IOC Report
HkObDPju6Z.exe

loading gif

Files

File Path
Type
Category
Malicious
HkObDPju6Z.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\OWOW64WW.cab
data
modified
malicious
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\OWOW64WW.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\ProPsWW.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\ProPsWW.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\ProPsWW2.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\ProPsWW2.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0016-0409-0000-0000000FF1CE}-C\ExcelLR.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0016-0409-0000-0000000FF1CE}-C\ExcelLR.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0018-0409-0000-0000000FF1CE}-C\PptLR.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0018-0409-0000-0000000FF1CE}-C\PptLR.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0019-0409-0000-0000000FF1CE}-C\PubLR.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0019-0409-0000-0000000FF1CE}-C\PubLR.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-001A-0409-0000-0000000FF1CE}-C\OutlkLR.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-001A-0409-0000-0000000FF1CE}-C\OutlkLR.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-001B-0409-0000-0000000FF1CE}-C\WordLR.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-001B-0409-0000-0000000FF1CE}-C\WordLR.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-001B-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\MSOCache\All Users\{90160000-002C-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\MSOCache\All Users\{90160000-0044-0409-0000-0000000FF1CE}-C\InfLR.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0044-0409-0000-0000000FF1CE}-C\InfLR.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0090-0409-0000-0000000FF1CE}-C\DCFMUI.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0090-0409-0000-0000000FF1CE}-C\DCFMUI.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-00A1-0409-0000-0000000FF1CE}-C\OnoteLR.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-00A1-0409-0000-0000000FF1CE}-C\OnoteLR.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-00BA-0409-0000-0000000FF1CE}-C\GrooveLR.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-00BA-0409-0000-0000000FF1CE}-C\GrooveLR.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-00E2-0409-0000-0000000FF1CE}-C\OSMUXMUI.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-00E2-0409-0000-0000000FF1CE}-C\OSMUXMUI.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OfficeLR.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OfficeLR.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\OWOW64LR.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\OWOW64LR.cab.7878kr5jx (copy)
data
dropped
malicious
C:\MSOCache\All Users\{90160000-012B-0409-0000-0000000FF1CE}-C\LyncMUI.cab
data
dropped
malicious
C:\MSOCache\All Users\{90160000-012B-0409-0000-0000000FF1CE}-C\LyncMUI.cab.7878kr5jx (copy)
data
dropped
malicious
C:\Program Files (x86)\AutoIt3\Au3Check.exe
data
dropped
malicious
C:\Program Files (x86)\AutoIt3\Au3Info.exe
data
dropped
malicious
C:\Program Files (x86)\AutoIt3\Au3Info_x64.exe
data
dropped
malicious
C:\Program Files (x86)\AutoIt3\AutoIt.chm
data
dropped
malicious
C:\Program Files (x86)\AutoIt3\AutoIt3Help.exe
data
dropped
malicious
C:\Program Files (x86)\AutoIt3\AutoIt3_x64.exe
OpenPGP Secret Key
dropped
malicious
C:\Program Files (x86)\AutoIt3\Uninstall.exe
COM executable for DOS
dropped
malicious
C:\Program Files (x86)\autoit3\AutoIt.chm.7878kr5jx (copy)
data
dropped
malicious
C:\Program Files\Google\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Program Files\MSBuild\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Program Files\Microsoft Office\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Program Files\Reference Assemblies\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Program Files\Windows Defender Advanced Threat Protection\en-US\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Program Files\Windows Defender\Offline\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Program Files\Windows Media Player\en-US\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\Program Files\internet explorer\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
malicious
C:\MSOCache\All Users\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\Office64WW.msi
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\Office64WW.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\PidGenX.dll
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\PidGenX.dll.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\ProPlusWW.msi
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\ProPlusWW.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\ProPlusWW.xml
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\ProPlusWW.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\Setup.xml
OpenPGP Secret Key
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
OpenPGP Secret Key
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\ose.exe
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\ose.exe.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\osetup.dll
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\osetup.dll.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\pkeyconfig-office.xrm-ms.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\setup.dll
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\setup.dll.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\setup.exe
data
dropped
C:\MSOCache\All Users\{90160000-0011-0000-0000-0000000FF1CE}-C\setup.exe.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0016-0409-0000-0000000FF1CE}-C\ExcelMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-0016-0409-0000-0000000FF1CE}-C\ExcelMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0016-0409-0000-0000000FF1CE}-C\ExcelMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-0016-0409-0000-0000000FF1CE}-C\ExcelMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0016-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-0016-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0016-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-0018-0409-0000-0000000FF1CE}-C\PowerPointMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-0018-0409-0000-0000000FF1CE}-C\PowerPointMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0018-0409-0000-0000000FF1CE}-C\PowerPointMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-0018-0409-0000-0000000FF1CE}-C\PowerPointMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0018-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-0018-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0018-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-0019-0409-0000-0000000FF1CE}-C\PublisherMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-0019-0409-0000-0000000FF1CE}-C\PublisherMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0019-0409-0000-0000000FF1CE}-C\PublisherMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-0019-0409-0000-0000000FF1CE}-C\PublisherMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0019-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-0019-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0019-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-001A-0409-0000-0000000FF1CE}-C\OutlookMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-001A-0409-0000-0000000FF1CE}-C\OutlookMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-001A-0409-0000-0000000FF1CE}-C\OutlookMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-001A-0409-0000-0000000FF1CE}-C\OutlookMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-001A-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-001A-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-001A-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-001B-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-001B-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-001B-0409-0000-0000000FF1CE}-C\WordMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-001B-0409-0000-0000000FF1CE}-C\WordMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-001B-0409-0000-0000000FF1CE}-C\WordMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-001B-0409-0000-0000000FF1CE}-C\WordMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-002C-0409-0000-0000000FF1CE}-C\Proofing.msi
data
dropped
C:\MSOCache\All Users\{90160000-002C-0409-0000-0000000FF1CE}-C\Proofing.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-002C-0409-0000-0000000FF1CE}-C\Proofing.xml
OpenPGP Secret Key
dropped
C:\MSOCache\All Users\{90160000-002C-0409-0000-0000000FF1CE}-C\Proofing.xml.7878kr5jx (copy)
OpenPGP Secret Key
dropped
C:\MSOCache\All Users\{90160000-002C-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-002C-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0044-0409-0000-0000000FF1CE}-C\InfoPathMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-0044-0409-0000-0000000FF1CE}-C\InfoPathMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0044-0409-0000-0000000FF1CE}-C\InfoPathMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-0044-0409-0000-0000000FF1CE}-C\InfoPathMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0044-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-0044-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0044-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-0090-0409-0000-0000000FF1CE}-C\DCFMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-0090-0409-0000-0000000FF1CE}-C\DCFMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0090-0409-0000-0000000FF1CE}-C\DCFMUI.xml
OpenPGP Public Key
dropped
C:\MSOCache\All Users\{90160000-0090-0409-0000-0000000FF1CE}-C\DCFMUI.xml.7878kr5jx (copy)
OpenPGP Public Key
dropped
C:\MSOCache\All Users\{90160000-0090-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-0090-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0090-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-00A1-0409-0000-0000000FF1CE}-C\OneNoteMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-00A1-0409-0000-0000000FF1CE}-C\OneNoteMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00A1-0409-0000-0000000FF1CE}-C\OneNoteMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-00A1-0409-0000-0000000FF1CE}-C\OneNoteMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00A1-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-00A1-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00A1-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-00BA-0409-0000-0000000FF1CE}-C\GrooveMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-00BA-0409-0000-0000000FF1CE}-C\GrooveMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00BA-0409-0000-0000000FF1CE}-C\GrooveMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-00BA-0409-0000-0000000FF1CE}-C\GrooveMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00BA-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-00BA-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00BA-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-00E1-0409-0000-0000000FF1CE}-C\OSMMUI.cab
data
dropped
C:\MSOCache\All Users\{90160000-00E1-0409-0000-0000000FF1CE}-C\OSMMUI.cab.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00E1-0409-0000-0000000FF1CE}-C\OSMMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-00E1-0409-0000-0000000FF1CE}-C\OSMMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00E1-0409-0000-0000000FF1CE}-C\OSMMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-00E1-0409-0000-0000000FF1CE}-C\OSMMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00E1-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-00E1-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00E1-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-00E2-0409-0000-0000000FF1CE}-C\OSMUXMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-00E2-0409-0000-0000000FF1CE}-C\OSMUXMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00E2-0409-0000-0000000FF1CE}-C\OSMUXMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-00E2-0409-0000-0000000FF1CE}-C\OSMUXMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00E2-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-00E2-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-00E2-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OffSetLR.cab
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OffSetLR.cab.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OfficeMUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OfficeMUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OfficeMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OfficeMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OfficeMUISet.msi
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OfficeMUISet.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OfficeMUISet.xml
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\OfficeMUISet.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\ShellUI.MST
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\ShellUI.MST.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\branding.xml
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\branding.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\osetupui.dll
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\osetupui.dll.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\pss10r.chm
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\pss10r.chm.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\setup.chm
data
dropped
C:\MSOCache\All Users\{90160000-0115-0409-0000-0000000FF1CE}-C\setup.chm.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\Office64MUI.msi
data
dropped
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\Office64MUI.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\Office64MUI.xml
OpenPGP Public Key
dropped
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\Office64MUI.xml.7878kr5jx (copy)
OpenPGP Public Key
dropped
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\Office64MUISet.msi
data
dropped
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\Office64MUISet.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\Office64MUISet.xml
data
dropped
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\Office64MUISet.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0116-0409-1000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-0117-0409-0000-0000000FF1CE}-C\AccessMUISet.msi
data
dropped
C:\MSOCache\All Users\{90160000-0117-0409-0000-0000000FF1CE}-C\AccessMUISet.msi.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0117-0409-0000-0000000FF1CE}-C\AccessMUISet.xml
data
dropped
C:\MSOCache\All Users\{90160000-0117-0409-0000-0000000FF1CE}-C\AccessMUISet.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0117-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-0117-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-0117-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\All Users\{90160000-012B-0409-0000-0000000FF1CE}-C\LyncMUI.msi
OpenPGP Secret Key
dropped
C:\MSOCache\All Users\{90160000-012B-0409-0000-0000000FF1CE}-C\LyncMUI.msi.7878kr5jx (copy)
OpenPGP Secret Key
dropped
C:\MSOCache\All Users\{90160000-012B-0409-0000-0000000FF1CE}-C\LyncMUI.xml
data
dropped
C:\MSOCache\All Users\{90160000-012B-0409-0000-0000000FF1CE}-C\LyncMUI.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-012B-0409-0000-0000000FF1CE}-C\Setup.xml
data
dropped
C:\MSOCache\All Users\{90160000-012B-0409-0000-0000000FF1CE}-C\Setup.xml.7878kr5jx (copy)
data
dropped
C:\MSOCache\All Users\{90160000-012B-0409-0000-0000000FF1CE}-C\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\MSOCache\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\PerfLogs\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Adobe\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\AutoIt3\Au3Check.dat
data
dropped
C:\Program Files (x86)\AutoIt3\AutoIt v3 Website.url
data
dropped
C:\Program Files (x86)\AutoIt3\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Common Files\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Google\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Internet Explorer\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Java\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\MSBuild\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Microsoft Analysis Services\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0106816.WMF
data
dropped
C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107024.WMF
data
dropped
C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107042.WMF
data
dropped
C:\Program Files (x86)\Microsoft Office\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Microsoft SQL Server\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Microsoft.NET\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Mozilla Firefox\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Reference Assemblies\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Windows Defender\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Windows Mail\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Windows Media Player\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Windows Multimedia Platform\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Windows Photo Viewer\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Windows Portable Devices\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\WindowsPowerShell\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\ZVGTehONYOFIOHEumRSBVkpDOAdmdwUOdLWTBFlImvuycSXfebOKqkiHgvcAaIkSkY\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\autoit3\Au3Check.dat.7878kr5jx (copy)
data
dropped
C:\Program Files (x86)\autoit3\Au3Check.exe.7878kr5jx (copy)
data
dropped
C:\Program Files (x86)\autoit3\Au3Info.exe.7878kr5jx (copy)
data
dropped
C:\Program Files (x86)\autoit3\Au3Info_x64.exe.7878kr5jx (copy)
data
dropped
C:\Program Files (x86)\autoit3\AutoIt v3 Website.url.7878kr5jx (copy)
data
dropped
C:\Program Files (x86)\autoit3\AutoIt3Help.exe.7878kr5jx (copy)
data
dropped
C:\Program Files (x86)\autoit3\AutoIt3_x64.exe.7878kr5jx (copy)
OpenPGP Secret Key
dropped
C:\Program Files (x86)\autoit3\Uninstall.exe.7878kr5jx (copy)
COM executable for DOS
dropped
C:\Program Files (x86)\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\jDownloader\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\windows nt\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Common Files\Services\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Common Files\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Common Files\microsoft shared\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Common Files\system\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Google\Chrome\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\MSBuild\Microsoft\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Microsoft Office\Office16\AppSharingChromeHook64.dll
data
dropped
C:\Program Files\Microsoft Office\Office16\AppSharingChromeHook64.dll.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\AppSharingHookController64.exe
data
dropped
C:\Program Files\Microsoft Office\Office16\AppSharingHookController64.exe.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\Custom.propdesc
data
dropped
C:\Program Files\Microsoft Office\Office16\Custom.propdesc.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\IEAWSDC.DLL
data
dropped
C:\Program Files\Microsoft Office\Office16\IEAWSDC.DLL.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\MAPISHELL.DLL
data
dropped
C:\Program Files\Microsoft Office\Office16\MAPISHELL.DLL.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\MSOHEV.DLL
data
dropped
C:\Program Files\Microsoft Office\Office16\MSOHEV.DLL.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\MSOHEVI.DLL
OpenPGP Public Key
dropped
C:\Program Files\Microsoft Office\Office16\MSOHEVI.DLL.7878kr5jx (copy)
OpenPGP Public Key
dropped
C:\Program Files\Microsoft Office\Office16\MSOHTMED.EXE
data
dropped
C:\Program Files\Microsoft Office\Office16\MSOHTMED.EXE.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\MeetingJoinAxOC.dll
data
dropped
C:\Program Files\Microsoft Office\Office16\MeetingJoinAxOC.dll.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\Mso Example Setup File A.txt
data
dropped
C:\Program Files\Microsoft Office\Office16\Mso Example Setup File A.txt.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\NAMEEXT.DLL
data
dropped
C:\Program Files\Microsoft Office\Office16\NAMEEXT.DLL.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\OCHelper.dll
data
dropped
C:\Program Files\Microsoft Office\Office16\OCHelper.dll.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\OLKFSTUB.DLL
data
dropped
C:\Program Files\Microsoft Office\Office16\OLKFSTUB.DLL.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\ONBttnIE.dll
data
dropped
C:\Program Files\Microsoft Office\Office16\ONBttnIE.dll.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\ONBttnIELinkedNotes.dll
data
dropped
C:\Program Files\Microsoft Office\Office16\ONBttnIELinkedNotes.dll.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\ONFILTER.DLL
data
dropped
C:\Program Files\Microsoft Office\Office16\ONFILTER.DLL.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\ONLNTCOMLIB.DLL
data
dropped
C:\Program Files\Microsoft Office\Office16\ONLNTCOMLIB.DLL.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\VISSHE.DLL
data
dropped
C:\Program Files\Microsoft Office\Office16\VISSHE.DLL.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\VisioCustom.propdesc
data
dropped
C:\Program Files\Microsoft Office\Office16\VisioCustom.propdesc.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Microsoft Office\Office16\msoia.exe
data
dropped
C:\Program Files\Microsoft Office\Office16\msoia.exe.7878kr5jx (copy)
data
dropped
C:\Program Files\Microsoft Office\Office16\msoianetutil.dll
data
dropped
C:\Program Files\Microsoft Office\Office16\msoianetutil.dll.7878kr5jx (copy)
data
dropped
C:\Program Files\Reference Assemblies\Microsoft\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\UNP\Logs\UpdateNotificationPipeline.001.etl
data
dropped
C:\Program Files\UNP\Logs\UpdateNotificationPipeline.001.etl.7878kr5jx (copy)
data
dropped
C:\Program Files\UNP\Logs\UpdateNotificationPipeline.002.etl
data
dropped
C:\Program Files\UNP\Logs\UpdateNotificationPipeline.002.etl.7878kr5jx (copy)
data
dropped
C:\Program Files\UNP\Logs\UpdateNotificationPipeline.003.etl
data
dropped
C:\Program Files\UNP\Logs\UpdateNotificationPipeline.003.etl.7878kr5jx (copy)
data
dropped
C:\Program Files\UNP\Logs\UpdateNotificationPipeline.004.etl
data
dropped
C:\Program Files\UNP\Logs\UpdateNotificationPipeline.004.etl.7878kr5jx (copy)
data
dropped
C:\Program Files\UNP\Logs\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\UNP\UpdateNotificationMgr\.UpdateNotificationMgr_LockFile
data
dropped
C:\Program Files\UNP\UpdateNotificationMgr\.UpdateNotificationMgr_LockFile.7878kr5jx (copy)
data
dropped
C:\Program Files\UNP\UpdateNotificationMgr\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\UNP\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Uninstall Information\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Defender Advanced Threat Protection\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Defender\en-US\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Defender\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Mail\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Media Player\Media Renderer\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Media Player\Network Sharing\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Media Player\Skins\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Media Player\Visualizations\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Media Player\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Multimedia Platform\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Photo Viewer\en-US\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Photo Viewer\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Portable Devices\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Security\BrowserCore\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Windows Security\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WindowsPowerShell\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\internet explorer\SIGNUP\install.ins
COM executable for DOS
dropped
C:\Program Files\internet explorer\SIGNUP\install.ins.7878kr5jx (copy)
COM executable for DOS
dropped
C:\Program Files\internet explorer\SIGNUP\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\internet explorer\en-US\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\internet explorer\images\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\windows nt\accessories\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\windows nt\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\windows nt\tabletextservice\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\Adobe\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\Microsoft Help\MS.DATABASECOMPARE.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.DATABASECOMPARE.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.EXCEL.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.EXCEL.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.GRAPH.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.GRAPH.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.GROOVE.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.GROOVE.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.LYNC.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.LYNC.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.LYNC_BASIC.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.LYNC_BASIC.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.LYNC_ONLINE.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.LYNC_ONLINE.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.MSACCESS.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.MSACCESS.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.MSOUC.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.MSOUC.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.MSPUB.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.MSPUB.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.ONENOTE.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.ONENOTE.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.OUTLOOK.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.OUTLOOK.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.POWERPNT.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.POWERPNT.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.SETLANG.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.SETLANG.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.SKYPEFB.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.SKYPEFB.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.SKYPEFB_BASIC.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.SKYPEFB_BASIC.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.SKYPEFB_ONLINE.16.1033.hxn
OpenPGP Public Key
dropped
C:\ProgramData\Microsoft Help\MS.SKYPEFB_ONLINE.16.1033.hxn.7878kr5jx (copy)
OpenPGP Public Key
dropped
C:\ProgramData\Microsoft Help\MS.SKYPEFB_ONLINEG.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.SKYPEFB_ONLINEG.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.SPREADSHEETCOMPARE.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.SPREADSHEETCOMPARE.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\MS.WINWORD.16.1033.hxn
data
dropped
C:\ProgramData\Microsoft Help\MS.WINWORD.16.1033.hxn.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft Help\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\Microsoft Help\nslist.hxl
data
dropped
C:\ProgramData\Microsoft Help\nslist.hxl.7878kr5jx (copy)
data
dropped
C:\ProgramData\Microsoft OneDrive\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\Oracle\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\Package Cache\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\SoftwareDistribution\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\USOPrivate\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\USOShared\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\WindowsHolographicDevices\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\dbg\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\regid.1991-06.com.microsoft\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\ProgramData\regid.1991-06.com.microsoft\regid.1991-06.com.microsoft Microsoft Office Professional Plus 2016.swidtag
data
dropped
C:\ProgramData\regid.1991-06.com.microsoft\regid.1991-06.com.microsoft Microsoft Office Professional Plus 2016.swidtag.7878kr5jx (copy)
data
dropped
C:\ProgramData\regid.1991-06.com.microsoft\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag
data
dropped
C:\ProgramData\regid.1991-06.com.microsoft\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag.7878kr5jx (copy)
data
dropped
C:\Users\Default\NTUSER.DAT
data
dropped
C:\Users\Default\NTUSER.DAT.7878kr5jx (copy)
data
dropped
C:\Users\Default\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\Public\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\fkdjsadasd.ico
MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel
dropped
C:\Users\user\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
C:\instructions_read_me.txt
ASCII text, with CRLF line terminators
dropped
There are 391 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\HkObDPju6Z.exe
C:\Users\user\Desktop\HkObDPju6Z.exe
malicious
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Windows\SysNative\vssadmin.exe delete shadows /all /quiet
malicious
C:\Windows\System32\vssadmin.exe
C:\Windows\SysNative\vssadmin.exe delete shadows /all /quiet
malicious
C:\Users\user\Desktop\HkObDPju6Z.exe
"C:\Users\user\Desktop\HkObDPju6Z.exe"
malicious
C:\Users\user\Desktop\HkObDPju6Z.exe
"C:\Users\user\Desktop\HkObDPju6Z.exe"
malicious
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Windows\SysNative\vssadmin.exe delete shadows /all /quiet
malicious
C:\Windows\System32\vssadmin.exe
C:\Windows\SysNative\vssadmin.exe delete shadows /all /quiet
malicious
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Windows\SysNative\vssadmin.exe delete shadows /all /quiet
malicious
C:\Windows\System32\vssadmin.exe
C:\Windows\SysNative\vssadmin.exe delete shadows /all /quiet
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
There are 2 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion/
unknown
malicious
https://www.rizonesoft.com
unknown
https://www.torproject.org/
unknown
http://office.micro
unknown
https://www.flos-freeware.chopenmailto:florian.balmer
unknown
https://www.flos-freeware.ch
unknown

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.7878kr5jx\DefaultIcon
NULL
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Skype
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter

Memdumps

Base Address
Regiontype
Protect
Malicious
34E0000
direct allocation
page read and write
malicious
3220000
direct allocation
page execute and read and write
malicious
3600000
direct allocation
page execute and read and write
malicious
14EC000
heap
page read and write
1535000
heap
page read and write
14A1000
heap
page read and write
169B4100000
trusted library allocation
page read and write
148E000
heap
page read and write
150D000
heap
page read and write
153D000
heap
page read and write
14B5000
heap
page read and write
14F1000
heap
page read and write
1502000
heap
page read and write
155C000
heap
page read and write
14EC000
heap
page read and write
1549000
heap
page read and write
14D5000
heap
page read and write
150B000
heap
page read and write
1DA56208000
heap
page read and write
15A6000
heap
page read and write
148E000
heap
page read and write
152F000
heap
page read and write
14E9000
heap
page read and write
1592000
heap
page read and write
152D000
heap
page read and write
1501000
heap
page read and write
1534000
heap
page read and write
1559000
heap
page read and write
151E000
heap
page read and write
155B000
heap
page read and write
150F000
heap
page read and write
7A1987E000
stack
page read and write
14AB000
heap
page read and write
1544000
heap
page read and write
15BF000
heap
page read and write
941E579000
stack
page read and write
151C000
heap
page read and write
14E9000
heap
page read and write
1529000
heap
page read and write
14FD000
heap
page read and write
14C0000
heap
page read and write
15D6000
heap
page read and write
158E000
heap
page read and write
151D000
heap
page read and write
14C0000
heap
page read and write
159B000
heap
page read and write
15B7000
heap
page read and write
150B000
heap
page read and write
152D000
heap
page read and write
1525000
heap
page read and write
1591000
heap
page read and write
1591000
heap
page read and write
14FF000
heap
page read and write
1F3083C0000
heap
page read and write
1525000
heap
page read and write
14EA000
heap
page read and write
2D70000
heap
page read and write
155E000
heap
page read and write
14E1000
heap
page read and write
14E9000
heap
page read and write
14FD000
heap
page read and write
14FC000
heap
page read and write
152D000
heap
page read and write
153C000
heap
page read and write
1540000
heap
page read and write
14D6000
heap
page read and write
15CE000
heap
page read and write
14CA000
heap
page read and write
14D1000
heap
page read and write
152D000
heap
page read and write
14CE000
heap
page read and write
1508000
heap
page read and write
14C0000
heap
page read and write
14C0000
heap
page read and write
14EF000
heap
page read and write
152C000
heap
page read and write
151F000
heap
page read and write
150D000
heap
page read and write
1541000
heap
page read and write
153A000
heap
page read and write
152C000
heap
page read and write
15CF000
heap
page read and write
15B6000
heap
page read and write
14F4000
heap
page read and write
14C0000
heap
page read and write
1508000
heap
page read and write
15A7000
heap
page read and write
14DB000
heap
page read and write
152D000
heap
page read and write
151A000
heap
page read and write
150C000
heap
page read and write
15B8000
heap
page read and write
1544000
heap
page read and write
1499000
heap
page read and write
14E5000
heap
page read and write
1529000
heap
page read and write
14FA000
heap
page read and write
14DD000
heap
page read and write
1505000
heap
page read and write
1550000
heap
page read and write
14FE000
heap
page read and write
196BD1C0000
heap
page read and write
152C000
heap
page read and write
14CE000
heap
page read and write
1523000
heap
page read and write
1551000
heap
page read and write
158A000
heap
page read and write
152E000
heap
page read and write
14F6000
heap
page read and write
1554000
heap
page read and write
15DE000
heap
page read and write
150C000
heap
page read and write
14D6000
heap
page read and write
14EC000
heap
page read and write
14D6000
heap
page read and write
14F9000
heap
page read and write
941E5FA000
stack
page read and write
169B3E50000
heap
page read and write
1505000
heap
page read and write
14C2000
heap
page read and write
15BF000
heap
page read and write
150E000
heap
page read and write
14F3000
heap
page read and write
14C6000
heap
page read and write
155C000
heap
page read and write
150F000
heap
page read and write
14F0000
heap
page read and write
14C0000
heap
page read and write
150C000
heap
page read and write
1501000
heap
page read and write
14B0000
heap
page read and write
159F000
heap
page read and write
1505000
heap
page read and write
15AC000
heap
page read and write
1522000
heap
page read and write
1591000
heap
page read and write
14C0000
heap
page read and write
152E000
heap
page read and write
24721FC000
stack
page read and write
1542000
heap
page read and write
14B5000
heap
page read and write
152C000
heap
page read and write
14F7000
heap
page read and write
152D000
heap
page read and write
151A000
heap
page read and write
1506000
heap
page read and write
1514000
heap
page read and write
15E0000
heap
page read and write
148E000
heap
page read and write
15DF000
heap
page read and write
15A8000
heap
page read and write
14A3000
heap
page read and write
15BF000
heap
page read and write
14EC000
heap
page read and write
14C9000
heap
page read and write
1523000
heap
page read and write
14FC000
heap
page read and write
155C000
heap
page read and write
14F3000
heap
page read and write
1500000
heap
page read and write
14E2000
heap
page read and write
15D7000
heap
page read and write
152C000
heap
page read and write
1536000
heap
page read and write
1549000
heap
page read and write
14FB000
heap
page read and write
14FE000
heap
page read and write
1502000
heap
page read and write
1505000
heap
page read and write
1559000
heap
page read and write
14C0000
heap
page read and write
1524000
heap
page read and write
14D3000
heap
page read and write
14C6000
heap
page read and write
159A000
heap
page read and write
14CE000
heap
page read and write
155C000
heap
page read and write
14E8000
heap
page read and write
14EE000
heap
page read and write
1529000
heap
page read and write
14AD000
heap
page read and write
1541000
heap
page read and write
154F000
heap
page read and write
14F6000
heap
page read and write
196BD1C9000
heap
page read and write
153C000
heap
page read and write
14C6000
heap
page read and write
1502000
heap
page read and write
1549000
heap
page read and write
152C000
heap
page read and write
159A000
heap
page read and write
14CE000
heap
page read and write
14DC000
heap
page read and write
1505000
heap
page read and write
14E3000
heap
page read and write
14F2000
heap
page read and write
14DB000
heap
page read and write
153C000
heap
page read and write
152C000
heap
page read and write
153A000
heap
page read and write
1F0000
unkown
page readonly
1550000
heap
page read and write
14A6000
heap
page read and write
14E3000
heap
page read and write
158D000
heap
page read and write
14C0000
heap
page read and write
1510000
heap
page read and write
14EC000
heap
page read and write
14C6000
heap
page read and write
14D9000
heap
page read and write
14C0000
heap
page read and write
1529000
heap
page read and write
1549000
heap
page read and write
152C000
heap
page read and write
14E9000
heap
page read and write
149A000
heap
page read and write
15AF000
heap
page read and write
1508000
heap
page read and write
14E5000
heap
page read and write
14D6000
heap
page read and write
158A000
heap
page read and write
1506000
heap
page read and write
1525000
heap
page read and write
14B5000
heap
page read and write
151A000
heap
page read and write
14FA000
heap
page read and write
15CE000
heap
page read and write
14A5000
heap
page read and write
152D000
heap
page read and write
153B000
heap
page read and write
1530000
heap
page read and write
14D3000
heap
page read and write
14CB000
heap
page read and write
152C000
heap
page read and write
14EC000
heap
page read and write
14F9000
heap
page read and write
23F78645000
heap
page read and write
14F6000
heap
page read and write
14EA000
heap
page read and write
14E3000
heap
page read and write
14FF000
heap
page read and write
14CC000
heap
page read and write
14D0000
heap
page read and write
14D9000
heap
page read and write
1594000
heap
page read and write
1515000
heap
page read and write
1507000
heap
page read and write
153C000
heap
page read and write
1531000
heap
page read and write
153D000
heap
page read and write
14C0000
heap
page read and write
1501000
heap
page read and write
14F5000
heap
page read and write
150C000
heap
page read and write
1532000
heap
page read and write
14F9000
heap
page read and write
14AC000
heap
page read and write
153C000
heap
page read and write
1559000
heap
page read and write
14C0000
heap
page read and write
1541000
heap
page read and write
1559000
heap
page read and write
14F3000
heap
page read and write
15CF000
heap
page read and write
152C000
heap
page read and write
152C000
heap
page read and write
1F1000
unkown
page execute read
152D000
heap
page read and write
30BF000
unkown
page read and write
158C000
heap
page read and write
14C0000
heap
page read and write
14DB000
heap
page read and write
1526000
heap
page read and write
1539000
heap
page read and write
2B3E000
stack
page read and write
151E000
heap
page read and write
14F0000
heap
page read and write
153A000
heap
page read and write
14EC000
heap
page read and write
14C0000
heap
page read and write
14A0000
heap
page read and write
14E1000
heap
page read and write
15DE000
heap
page read and write
1555000
heap
page read and write
1535000
heap
page read and write
1553000
heap
page read and write
143F000
stack
page read and write
15BE000
heap
page read and write
148E000
heap
page read and write
14FF000
heap
page read and write
155C000
heap
page read and write
283000
unkown
page execute and write copy
14FF000
heap
page read and write
14F6000
heap
page read and write
15AA000
heap
page read and write
152D000
heap
page read and write
1508000
heap
page read and write
152C000
heap
page read and write
1595000
heap
page read and write
1521000
heap
page read and write
14EC000
heap
page read and write
1556000
heap
page read and write
158E000
stack
page read and write
152D000
heap
page read and write
14EA000
heap
page read and write
1506000
heap
page read and write
155E000
heap
page read and write
152C000
heap
page read and write
14D3000
heap
page read and write
14E7000
heap
page read and write
14E9000
heap
page read and write
14FA000
heap
page read and write
14E9000
heap
page read and write
1549000
heap
page read and write
14B5000
heap
page read and write
14DE000
heap
page read and write
14E2000
heap
page read and write
14C0000
heap
page read and write
1499000
heap
page read and write
150C000
heap
page read and write
159A000
heap
page read and write
14E3000
heap
page read and write
14FA000
heap
page read and write
152C000
heap
page read and write
15C1000
heap
page read and write
14DF000
heap
page read and write
14C0000
heap
page read and write
152A000
heap
page read and write
1540000
heap
page read and write
153A000
heap
page read and write
1544000
heap
page read and write
196BCF40000
heap
page read and write
1511000
heap
page read and write
14CC000
heap
page read and write
158D000
heap
page read and write
152D000
heap
page read and write
14C0000
heap
page read and write
1502000
heap
page read and write
14F0000
heap
page read and write
14C2000
heap
page read and write
152D000
heap
page read and write
1506000
heap
page read and write
28FD000
stack
page read and write
14E1000
heap
page read and write
1535000
heap
page read and write
14C3000
heap
page read and write
1549000
heap
page read and write
14F6000
heap
page read and write
1544000
heap
page read and write
14D1000
heap
page read and write
15B3000
heap
page read and write
1586000
heap
page read and write
1505000
heap
page read and write
1594000
heap
page read and write
15DE000
heap
page read and write
14F2000
heap
page read and write
14A5000
heap
page read and write
154B000
heap
page read and write
1544000
heap
page read and write
1544000
heap
page read and write
15A3000
heap
page read and write
152C000
heap
page read and write
1531000
heap
page read and write
153D000
heap
page read and write
150C000
heap
page read and write
1526000
heap
page read and write
14C4000
heap
page read and write
151C000
heap
page read and write
B53EE7F000
stack
page read and write
150E000
heap
page read and write
150F000
heap
page read and write
150F000
heap
page read and write
1504000
heap
page read and write
151D000
heap
page read and write
14DC000
heap
page read and write
1F308488000
heap
page read and write
14FF000
heap
page read and write
15DD000
heap
page read and write
14E2000
heap
page read and write
15BE000
heap
page read and write
14FC000
heap
page read and write
153C000
heap
page read and write
1DA56200000
heap
page read and write
1521000
heap
page read and write
153B000
heap
page read and write
30A6000
heap
page read and write
169B3DF0000
trusted library allocation
page read and write
14E9000
heap
page read and write
585BFE000
stack
page read and write
14FA000
heap
page read and write
155D000
heap
page read and write
14E9000
heap
page read and write
159A000
heap
page read and write
14C0000
heap
page read and write
150E000
heap
page read and write
14D5000
heap
page read and write
14EC000
heap
page read and write
15C2000
heap
page read and write
1549000
heap
page read and write
14C0000
heap
page read and write
1544000
heap
page read and write
1581000
heap
page read and write
152F000
heap
page read and write
152F000
heap
page read and write
14CB000
heap
page read and write
14B5000
heap
page read and write
14F6000
heap
page read and write
15A6000
heap
page read and write
1554000
heap
page read and write
2890000
heap
page read and write
1549000
heap
page read and write
30D2000
heap
page read and write
1549000
heap
page read and write
23F78440000
heap
page read and write
14F9000
heap
page read and write
150A000
heap
page read and write
15A6000
heap
page read and write
1499000
heap
page read and write
151A000
heap
page read and write
151F000
heap
page read and write
2EF2000
heap
page read and write
14FA000
heap
page read and write
1499000
heap
page read and write
148E000
heap
page read and write
14EC000
heap
page read and write
14DA000
heap
page read and write
14E0000
heap
page read and write
5854ED000
stack
page read and write
1544000
heap
page read and write
1528000
heap
page read and write
152C000
heap
page read and write
14C9000
heap
page read and write
153D000
heap
page read and write
14B5000
heap
page read and write
14C0000
heap
page read and write
14F6000
heap
page read and write
14FA000
heap
page read and write
14A1000
heap
page read and write
14E2000
heap
page read and write
1521000
heap
page read and write
14B5000
heap
page read and write
153C000
heap
page read and write
155A000
heap
page read and write
150F000
heap
page read and write
15BA000
heap
page read and write
154B000
heap
page read and write
14CD000
heap
page read and write
155C000
heap
page read and write
14F4000
heap
page read and write
153C000
heap
page read and write
15C2000
heap
page read and write
1504000
heap
page read and write
14A0000
heap
page read and write
14ED000
heap
page read and write
1539000
heap
page read and write
14C0000
heap
page read and write
15DB000
heap
page read and write
14B3000
heap
page read and write
1521000
heap
page read and write
14F9000
heap
page read and write
1506000
heap
page read and write
1558000
heap
page read and write
14DE000
heap
page read and write
1505000
heap
page read and write
14CA000
heap
page read and write
14E0000
heap
page read and write
1521000
heap
page read and write
14F2000
heap
page read and write
1557000
heap
page read and write
1536000
heap
page read and write
1534000
heap
page read and write
14EC000
heap
page read and write
14B4000
heap
page read and write
153D000
heap
page read and write
153B000
heap
page read and write
1597000
heap
page read and write
1505000
heap
page read and write
158E000
heap
page read and write
15D2000
heap
page read and write
14C0000
heap
page read and write
1586000
heap
page read and write
151D000
heap
page read and write
1559000
heap
page read and write
14CD000
heap
page read and write
153C000
heap
page read and write
152C000
heap
page read and write
14C7000
heap
page read and write
1470000
heap
page read and write
14C6000
heap
page read and write
7A1997F000
stack
page read and write
14D0000
heap
page read and write
7A1957F000
stack
page read and write
1590000
heap
page read and write
152D000
heap
page read and write
1549000
heap
page read and write
1526000
heap
page read and write
14FF000
heap
page read and write
152E000
heap
page read and write
1499000
heap
page read and write
1530000
heap
page read and write
1549000
heap
page read and write
14DB000
heap
page read and write
14DB000
heap
page read and write
14F8000
heap
page read and write
14C8000
heap
page read and write
14F6000
heap
page read and write
1F3084B1000
heap
page read and write
14ED000
heap
page read and write
14F0000
heap
page read and write
152C000
heap
page read and write
153B000
heap
page read and write
14A1000
heap
page read and write
1499000
heap
page read and write
14C0000
heap
page read and write
159A000
heap
page read and write
1559000
heap
page read and write
14F6000
heap
page read and write
14B1000
heap
page read and write
155E000
heap
page read and write
153A000
heap
page read and write
196BD110000
trusted library allocation
page read and write
1591000
heap
page read and write
150B000
heap
page read and write
14C0000
heap
page read and write
14DB000
heap
page read and write
1DA564D5000
heap
page read and write
14B5000
heap
page read and write
14A0000
heap
page read and write
14AF000
heap
page read and write
1598000
heap
page read and write
1549000
heap
page read and write
1534000
heap
page read and write
1550000
heap
page read and write
133E000
stack
page read and write
14C0000
heap
page read and write
1517000
heap
page read and write
1525000
heap
page read and write
154F000
heap
page read and write
14A3000
heap
page read and write
15CE000
heap
page read and write
1521000
heap
page read and write
153B000
heap
page read and write
1506000
heap
page read and write
153C000
heap
page read and write
153E000
heap
page read and write
1506000
heap
page read and write
150B000
heap
page read and write
14AE000
heap
page read and write
1591000
heap
page read and write
14EC000
heap
page read and write
26E000
unkown
page readonly
150D000
heap
page read and write
14D3000
heap
page read and write
14F4000
heap
page read and write
14F6000
heap
page read and write
154A000
heap
page read and write
14F2000
heap
page read and write
1582000
heap
page read and write
14E9000
heap
page read and write
15B8000
heap
page read and write
14E9000
heap
page read and write
159B000
heap
page read and write
14C4000
heap
page read and write
14B5000
heap
page read and write
1591000
heap
page read and write
14B5000
heap
page read and write
14C0000
heap
page read and write
155E000
heap
page read and write
1590000
heap
page read and write
1525000
heap
page read and write
15BA000
heap
page read and write
15CE000
heap
page read and write
14EC000
heap
page read and write
14EC000
heap
page read and write
1553000
heap
page read and write
14CA000
heap
page read and write
14F6000
heap
page read and write
1534000
heap
page read and write
1507000
heap
page read and write
1539000
heap
page read and write
14A3000
heap
page read and write
14EC000
heap
page read and write
1508000
heap
page read and write
152B000
heap
page read and write
15DB000
heap
page read and write
196BCF72000
heap
page read and write
14F4000
heap
page read and write
1535000
heap
page read and write
1F3084A1000
heap
page read and write
15BE000
heap
page read and write
1558000
heap
page read and write
150D000
heap
page read and write
14ED000
heap
page read and write
15CE000
heap
page read and write
14AB000
heap
page read and write
1582000
heap
page read and write
14F2000
heap
page read and write
14D9000
heap
page read and write
152C000
heap
page read and write
1505000
heap
page read and write
14C0000
heap
page read and write
1585000
heap
page read and write
153C000
heap
page read and write
15DB000
heap
page read and write
14FD000
heap
page read and write
14F4000
heap
page read and write
14C2000
heap
page read and write
1510000
heap
page read and write
155E000
heap
page read and write
15C7000
heap
page read and write
14E9000
heap
page read and write
1505000
heap
page read and write
14A1000
heap
page read and write
1544000
heap
page read and write
15C3000
heap
page read and write
15D6000
heap
page read and write
15CB000
heap
page read and write
14FC000
heap
page read and write
14C0000
heap
page read and write
14D3000
heap
page read and write
14E1000
heap
page read and write
14DD000
heap
page read and write
1559000
heap
page read and write
14A3000
heap
page read and write
1499000
heap
page read and write
1508000
heap
page read and write
148E000
heap
page read and write
152C000
heap
page read and write
10FB000
stack
page read and write
150F000
heap
page read and write
14EB000
heap
page read and write
1556000
heap
page read and write
169B4042000
heap
page read and write
153B000
heap
page read and write
155E000
heap
page read and write
1505000
heap
page read and write
14FE000
heap
page read and write
1545000
heap
page read and write
14B4000
heap
page read and write
2D8D000
stack
page read and write
14C0000
heap
page read and write
152C000
heap
page read and write
14FC000
heap
page read and write
14F2000
heap
page read and write
14FF000
heap
page read and write
159B000
heap
page read and write
155C000
heap
page read and write
1525000
heap
page read and write
283000
unkown
page execute and write copy
152C000
heap
page read and write
14F9000
heap
page read and write
159B000
heap
page read and write
15C2000
heap
page read and write
14C0000
heap
page read and write
14E0000
heap
page read and write
14CB000
heap
page read and write
14EB000
heap
page read and write
152C000
heap
page read and write
151F000
heap
page read and write
15CE000
heap
page read and write
14F1000
heap
page read and write
14E3000
heap
page read and write
14C0000
heap
page read and write
152D000
heap
page read and write
155A000
heap
page read and write
154B000
heap
page read and write
1547000
heap
page read and write
1557000
heap
page read and write
148E000
heap
page read and write
14FC000
heap
page read and write
1523000
heap
page read and write
14A3000
heap
page read and write
14C0000
heap
page read and write
14B6000
heap
page read and write
8D107E000
stack
page read and write
14D0000
heap
page read and write
14EB000
heap
page read and write
14DB000
heap
page read and write
151E000
heap
page read and write
1A7DE820000
heap
page read and write
14C0000
heap
page read and write
14FE000
heap
page read and write
151E000
heap
page read and write
1508000
heap
page read and write
1526000
heap
page read and write
154B000
heap
page read and write
284000
unkown
page execute and write copy
14B6000
heap
page read and write
14C0000
heap
page read and write
14EC000
heap
page read and write
14F1000
heap
page read and write
14CE000
heap
page read and write
14C3000
heap
page read and write
14C6000
heap
page read and write
14B5000
heap
page read and write
15C3000
heap
page read and write
1509000
heap
page read and write
8D0F7E000
stack
page read and write
14A3000
heap
page read and write
15A2000
heap
page read and write
14C6000
heap
page read and write
7A195FF000
stack
page read and write
1502000
heap
page read and write
159A000
heap
page read and write
154B000
heap
page read and write
14C6000
heap
page read and write
1591000
heap
page read and write
14F1000
heap
page read and write
152C000
heap
page read and write
14FA000
heap
page read and write
150E000
heap
page read and write
14AF000
heap
page read and write
14D5000
heap
page read and write
150D000
heap
page read and write
155C000
heap
page read and write
14FF000
heap
page read and write
1514000
heap
page read and write
14CC000
heap
page read and write
1503000
heap
page read and write
153C000
heap
page read and write
14FF000
heap
page read and write
152C000
heap
page read and write
3560000
heap
page read and write
15C2000
heap
page read and write
14AD000
heap
page read and write
14FF000
heap
page read and write
14D1000
heap
page read and write
150A000
heap
page read and write
153E000
heap
page read and write
1534000
heap
page read and write
1533000
heap
page read and write
150E000
heap
page read and write
15BA000
heap
page read and write
151F000
heap
page read and write
15BE000
heap
page read and write
14C0000
heap
page read and write
150C000
heap
page read and write
14B5000
heap
page read and write
150F000
heap
page read and write
1535000
heap
page read and write
1513000
heap
page read and write
1500000
heap
page read and write
14A9000
heap
page read and write
1507000
heap
page read and write
1529000
heap
page read and write
14F6000
heap
page read and write
14E6000
heap
page read and write
196BD180000
trusted library allocation
page read and write
14CE000
heap
page read and write
14C0000
heap
page read and write
152C000
heap
page read and write
15A6000
heap
page read and write
14C2000
heap
page read and write
14C9000
heap
page read and write
158A000
heap
page read and write
196BD1D0000
trusted library allocation
page read and write
1501000
heap
page read and write
158A000
heap
page read and write
158C000
heap
page read and write
151E000
heap
page read and write
1506000
heap
page read and write
14D0000
heap
page read and write
14F2000
heap
page read and write
14F0000
heap
page read and write
14FA000
heap
page read and write
1F1000
unkown
page execute read
152C000
heap
page read and write
196BCEB0000
heap
page read and write
150D000
heap
page read and write
152A000
heap
page read and write
1505000
heap
page read and write
14F8000
heap
page read and write
1F0000
unkown
page readonly
1502000
heap
page read and write
1504000
heap
page read and write
1535000
heap
page read and write
14C0000
heap
page read and write
150E000
heap
page read and write
14F8000
heap
page read and write
158C000
heap
page read and write
14FF000
heap
page read and write
1549000
heap
page read and write
159A000
heap
page read and write
1501000
heap
page read and write
1530000
heap
page read and write
15D6000
heap
page read and write
14FD000
heap
page read and write
1535000
heap
page read and write
15C3000
heap
page read and write
1505000
heap
page read and write
14C4000
heap
page read and write
150E000
heap
page read and write
14EF000
heap
page read and write
1520000
heap
page read and write
1540000
heap
page read and write
1506000
heap
page read and write
14E3000
heap
page read and write
1500000
heap
page read and write
14E9000
heap
page read and write
152C000
heap
page read and write
1536000
heap
page read and write
14A8000
heap
page read and write
14C0000
heap
page read and write
14C0000
heap
page read and write
15C8000
heap
page read and write
1507000
heap
page read and write
1535000
heap
page read and write
2DB6000
heap
page read and write
15D7000
heap
page read and write
14EE000
heap
page read and write
14A3000
heap
page read and write
14B5000
heap
page read and write
14F7000
heap
page read and write
14A3000
heap
page read and write
1A7DE5A0000
heap
page read and write
14A0000
heap
page read and write
14FF000
heap
page read and write
30A0000
heap
page read and write
14AA000
heap
page read and write
14D0000
heap
page read and write
14A0000
heap
page read and write
14F6000
heap
page read and write
15D0000
heap
page read and write
1505000
heap
page read and write
1506000
heap
page read and write
1500000
heap
page read and write
15DE000
heap
page read and write
152C000
heap
page read and write
14CB000
heap
page read and write
150F000
heap
page read and write
14F7000
heap
page read and write
1510000
heap
page read and write
14E5000
heap
page read and write
1513000
heap
page read and write
15BE000
heap
page read and write
14CB000
heap
page read and write
150F000
heap
page read and write
155C000
heap
page read and write
1531000
heap
page read and write
150D000
heap
page read and write
151D000
heap
page read and write
14D3000
heap
page read and write
FEC000
stack
page read and write
1522000
heap
page read and write
14CA000
heap
page read and write
153C000
heap
page read and write
14F6000
heap
page read and write
14CF000
heap
page read and write
1549000
heap
page read and write
152C000
heap
page read and write
14ED000
heap
page read and write
151F000
heap
page read and write
1505000
heap
page read and write
14B4000
heap
page read and write
14E9000
heap
page read and write
150D000
heap
page read and write
150E000
heap
page read and write
14C0000
heap
page read and write
14C6000
heap
page read and write
150E000
heap
page read and write
1540000
heap
page read and write
14FF000
heap
page read and write
14F3000
heap
page read and write
1597000
heap
page read and write
14F0000
heap
page read and write
14FD000
heap
page read and write
155D000
heap
page read and write
14C2000
heap
page read and write
2DC0000
heap
page read and write
149A000
heap
page read and write
1534000
heap
page read and write
15BE000
heap
page read and write
15A6000
heap
page read and write
14D5000
heap
page read and write
2A3D000
stack
page read and write
1526000
heap
page read and write
15CE000
heap
page read and write
150D000
heap
page read and write
150D000
heap
page read and write
14EA000
heap
page read and write
14EF000
heap
page read and write
155B000
heap
page read and write
14A5000
heap
page read and write
15CE000
heap
page read and write
14F9000
heap
page read and write
154D000
heap
page read and write
14FF000
heap
page read and write
155A000
heap
page read and write
154B000
heap
page read and write
1513000
heap
page read and write
14C3000
heap
page read and write
14F0000
heap
page read and write
1521000
heap
page read and write
14EE000
heap
page read and write
1505000
heap
page read and write
14C4000
heap
page read and write
14CD000
heap
page read and write
153C000
heap
page read and write
1507000
heap
page read and write
155E000
heap
page read and write
151F000
heap
page read and write
1582000
heap
page read and write
14CF000
heap
page read and write
14F3000
heap
page read and write
150E000
heap
page read and write
14FD000
heap
page read and write
14FD000
heap
page read and write
14C0000
heap
page read and write
155C000
heap
page read and write
1549000
heap
page read and write
307000
unkown
page execute and read and write
1556000
heap
page read and write
14F9000
heap
page read and write
14F6000
heap
page read and write
1525000
heap
page read and write
14B5000
heap
page read and write
1525000
heap
page read and write
152C000
heap
page read and write
151F000
heap
page read and write
14E2000
heap
page read and write
1505000
heap
page read and write
1502000
heap
page read and write
14A3000
heap
page read and write
154F000
heap
page read and write
1502000
heap
page read and write
15A2000
heap
page read and write
151F000
heap
page read and write
1521000
heap
page read and write
14F0000
heap
page read and write
14AF000
heap
page read and write
151E000
heap
page read and write
1499000
heap
page read and write
26E000
unkown
page readonly
1502000
heap
page read and write
14B6000
heap
page read and write
153B000
heap
page read and write
1500000
heap
page read and write
15B7000
heap
page read and write
196BCF64000
heap
page read and write
152C000
heap
page read and write
14FF000
heap
page read and write
1535000
heap
page read and write
151C000
heap
page read and write
14EF000
heap
page read and write
1510000
heap
page read and write
14E1000
heap
page read and write
14CA000
heap
page read and write
15AF000
heap
page read and write
15CE000
heap
page read and write
158E000
heap
page read and write
1591000
heap
page read and write
14DA000
heap
page read and write
14B5000
heap
page read and write
15CB000
heap
page read and write
14EB000
heap
page read and write
1554000
heap
page read and write
14DB000
heap
page read and write
B53EC7F000
stack
page read and write
14F3000
heap
page read and write
14EF000
heap
page read and write
1506000
heap
page read and write
14E0000
heap
page read and write
14C2000
heap
page read and write
14FD000
heap
page read and write
14F3000
heap
page read and write
1535000
heap
page read and write
15DF000
heap
page read and write
1F1000
unkown
page execute read
14F3000
heap
page read and write
14DD000
heap
page read and write
1531000
heap
page read and write
150D000
heap
page read and write
152C000
heap
page read and write
14B6000
heap
page read and write
30A6000
heap
page read and write
1530000
heap
page read and write
15C4000
heap
page read and write
151C000
heap
page read and write
1505000
heap
page read and write
1581000
heap
page read and write
151A000
heap
page read and write
152C000
heap
page read and write
14C7000
heap
page read and write
169B400D000
unkown
page read and write
14EA000
heap
page read and write
14E5000
heap
page read and write
1590000
heap
page read and write
14FD000
heap
page read and write
14E9000
heap
page read and write
14E8000
heap
page read and write
14F5000
heap
page read and write
14FE000
heap
page read and write
1511000
heap
page read and write
14E2000
heap
page read and write
1581000
heap
page read and write
14D9000
heap
page read and write
1502000
heap
page read and write
1F308480000
heap
page read and write
1506000
heap
page read and write
150D000
heap
page read and write
14FC000
heap
page read and write
1507000
heap
page read and write
1559000
heap
page read and write
14DE000
heap
page read and write
14C9000
heap
page read and write
30C0000
heap
page read and write
14FF000
heap
page read and write
15A6000
heap
page read and write
14EF000
heap
page read and write
154B000
heap
page read and write
14F7000
heap
page read and write
1582000
heap
page read and write
3566000
heap
page read and write
14D9000
heap
page read and write
152C000
heap
page read and write
15CE000
heap
page read and write
14F2000
heap
page read and write
14A3000
heap
page read and write
1F3084CC000
heap
page read and write
14D9000
heap
page read and write
1532000
heap
page read and write
15DB000
heap
page read and write
14F4000
heap
page read and write
15AE000
heap
page read and write
150D000
heap
page read and write
14B1000
heap
page read and write
14CB000
heap
page read and write
152D000
heap
page read and write
196BDAB0000
trusted library allocation
page read and write
14E3000
heap
page read and write
1532000
heap
page read and write
14CB000
heap
page read and write
14C0000
heap
page read and write
150E000
heap
page read and write
152C000
heap
page read and write
1559000
heap
page read and write
14F0000
heap
page read and write
14EE000
heap
page read and write
152A000
heap
page read and write
150F000
heap
page read and write
1508000
heap
page read and write
1520000
heap
page read and write
15A6000
heap
page read and write
14F7000
heap
page read and write
14C3000
heap
page read and write
1534000
heap
page read and write
1558000
heap
page read and write
15B7000
heap
page read and write
14F4000
heap
page read and write
1546000
heap
page read and write
14C0000
heap
page read and write
153B000
heap
page read and write
14C0000
heap
page read and write
1521000
heap
page read and write
152D000
heap
page read and write
158D000
heap
page read and write
1552000
heap
page read and write
14F3000
heap
page read and write
155C000
heap
page read and write
15CE000
heap
page read and write
14D2000
heap
page read and write
14CB000
heap
page read and write
14CA000
heap
page read and write
155E000
heap
page read and write
150E000
heap
page read and write
14C0000
heap
page read and write
1581000
heap
page read and write
14FB000
heap
page read and write
152F000
heap
page read and write
14C0000
heap
page read and write
14AF000
heap
page read and write
14CF000
heap
page read and write
1507000
heap
page read and write
15BE000
heap
page read and write
154B000
heap
page read and write
14B4000
heap
page read and write
14C0000
heap
page read and write
1525000
heap
page read and write
1503000
heap
page read and write
1523000
heap
page read and write
151D000
heap
page read and write
150C000
heap
page read and write
14C6000
heap
page read and write
152C000
heap
page read and write
1508000
heap
page read and write
14FD000
heap
page read and write
1553000
heap
page read and write
14E9000
heap
page read and write
152C000
heap
page read and write
14D4000
heap
page read and write
14B2000
heap
page read and write
153C000
heap
page read and write
14E1000
heap
page read and write
29FE000
stack
page read and write
14FE000
heap
page read and write
14C0000
heap
page read and write
14A3000
heap
page read and write
1F3084CC000
heap
page read and write
14A3000
heap
page read and write
1533000
heap
page read and write
14F2000
heap
page read and write
14FC000
heap
page read and write
152C000
heap
page read and write
14C0000
heap
page read and write
14EB000
heap
page read and write
150C000
heap
page read and write
14FE000
heap
page read and write
14D5000
heap
page read and write
1547000
heap
page read and write
14C0000
heap
page read and write
14AA000
heap
page read and write
15BE000
heap
page read and write
14AF000
heap
page read and write
1534000
heap
page read and write
155A000
heap
page read and write
14F5000
heap
page read and write
14A5000
heap
page read and write
1543000
heap
page read and write
14E8000
heap
page read and write
14F2000
heap
page read and write
14F9000
heap
page read and write
15C7000
heap
page read and write
1538000
heap
page read and write
14DD000
heap
page read and write
1517000
heap
page read and write
1480000
heap
page read and write
14FE000
heap
page read and write
14CC000
heap
page read and write
1549000
heap
page read and write
152F000
heap
page read and write
149A000
heap
page read and write
1549000
heap
page read and write
15A7000
heap
page read and write
14D5000
heap
page read and write
30D2000
heap
page read and write
1559000
heap
page read and write
14AD000
heap
page read and write
150D000
heap
page read and write
14E9000
heap
page read and write
14A3000
heap
page read and write
1508000
heap
page read and write
148F000
heap
page read and write
1531000
heap
page read and write
14C2000
heap
page read and write
14E9000
heap
page read and write
154B000
heap
page read and write
1590000
heap
page read and write
1544000
heap
page read and write
1526000
heap
page read and write
153E000
heap
page read and write
1534000
heap
page read and write
14ED000
heap
page read and write
169B3DE0000
heap
page read and write
150B000
heap
page read and write
14F7000
heap
page read and write
155E000
heap
page read and write
1590000
heap
page read and write
14D0000
heap
page read and write
1507000
heap
page read and write
14EA000
heap
page read and write
152A000
heap
page read and write
14B4000
heap
page read and write
150D000
heap
page read and write
1521000
heap
page read and write
14F6000
heap
page read and write
1510000
heap
page read and write
14FF000
heap
page read and write
15DA000
heap
page read and write
152C000
heap
page read and write
150E000
heap
page read and write
15D3000
heap
page read and write
1521000
heap
page read and write
154A000
heap
page read and write
14B4000
heap
page read and write
153C000
heap
page read and write
14A5000
heap
page read and write
1556000
heap
page read and write
150F000
heap
page read and write
152C000
heap
page read and write
153C000
heap
page read and write
15BA000
heap
page read and write
15D6000
heap
page read and write
14E2000
heap
page read and write
14AC000
heap
page read and write
14FC000
heap
page read and write
14E9000
heap
page read and write
150E000
heap
page read and write
1F3084A6000
heap
page read and write
150E000
heap
page read and write
1541000
heap
page read and write
1506000
heap
page read and write
14E8000
heap
page read and write
153C000
heap
page read and write
307000
unkown
page execute and read and write
152C000
heap
page read and write
1559000
heap
page read and write
150E000
heap
page read and write
14E9000
heap
page read and write
14E4000
heap
page read and write
1558000
heap
page read and write
14E2000
heap
page read and write
14F3000
heap
page read and write
1586000
heap
page read and write
14D1000
heap
page read and write
1502000
heap
page read and write
14FD000
heap
page read and write
150D000
heap
page read and write
152C000
heap
page read and write
152D000
heap
page read and write
14F8000
heap
page read and write
14E4000
heap
page read and write
1539000
heap
page read and write
14F5000
heap
page read and write
14FF000
heap
page read and write
153B000
heap
page read and write
14DE000
heap
page read and write
1520000
heap
page read and write
15D7000
heap
page read and write
1549000
heap
page read and write
14E9000
heap
page read and write
14DD000
heap
page read and write
150B000
heap
page read and write
1554000
heap
page read and write
14EF000
heap
page read and write
14C9000
heap
page read and write
15A6000
heap
page read and write
1517000
heap
page read and write
149A000
heap
page read and write
1558000
heap
page read and write
23F78668000
heap
page read and write
14FF000
heap
page read and write
14B4000
heap
page read and write
14B5000
heap
page read and write
14D0000
heap
page read and write
15A7000
heap
page read and write
196BD1C5000
heap
page read and write
14AE000
heap
page read and write
1583000
heap
page read and write
15D2000
heap
page read and write
1550000
heap
page read and write
159A000
heap
page read and write
15B6000
heap
page read and write
14D5000
heap
page read and write
196BDCC0000
trusted library allocation
page read and write
1499000
heap
page read and write
1516000
heap
page read and write
152C000
heap
page read and write
1525000
heap
page read and write
1535000
heap
page read and write
1586000
heap
page read and write
1550000
heap
page read and write
14F3000
heap
page read and write
14FF000
heap
page read and write
153C000
heap
page read and write
1521000
heap
page read and write
14E9000
heap
page read and write
14D0000
heap
page read and write
158F000
heap
page read and write
14B2000
heap
page read and write
1505000
heap
page read and write
196BDCD0000
heap
page readonly
1539000
heap
page read and write
14C0000
heap
page read and write
15CF000
heap
page read and write
1499000
heap
page read and write
154B000
heap
page read and write
150E000
heap
page read and write
150F000
heap
page read and write
1499000
heap
page read and write
1533000
heap
page read and write
14E9000
heap
page read and write
14FF000
heap
page read and write
14ED000
heap
page read and write
15D9000
heap
page read and write
152E000
heap
page read and write
1510000
heap
page read and write
151D000
heap
page read and write
14FF000
heap
page read and write
15A8000
heap
page read and write
1534000
heap
page read and write
15E0000
heap
page read and write
15AF000
heap
page read and write
14C6000
heap
page read and write
152C000
heap
page read and write
155E000
heap
page read and write
14DF000
heap
page read and write
15D2000
heap
page read and write
14B5000
heap
page read and write
14EC000
heap
page read and write
14FA000
heap
page read and write
14EC000
heap
page read and write
14CB000
heap
page read and write
1DA564D0000
heap
page read and write
155E000
heap
page read and write
14C4000
heap
page read and write
1515000
heap
page read and write
150D000
heap
page read and write
152B000
heap
page read and write
30E000
unkown
page readonly
151D000
heap
page read and write
152C000
heap
page read and write
155C000
heap
page read and write
1544000
heap
page read and write
14EC000
heap
page read and write
14FE000
heap
page read and write
1510000
heap
page read and write
1521000
heap
page read and write
1502000
heap
page read and write
14DC000
heap
page read and write
1526000
heap
page read and write
14CD000
heap
page read and write
153B000
heap
page read and write
155C000
heap
page read and write
14F7000
heap
page read and write
1540000
heap
page read and write
1551000
heap
page read and write
1544000
heap
page read and write
150A000
heap
page read and write
14ED000
heap
page read and write
169B4102000
trusted library allocation
page read and write
150A000
heap
page read and write
1535000
heap
page read and write
196BCED0000
heap
page read and write
1531000
heap
page read and write
1549000
heap
page read and write
169B4013000
unkown
page read and write
154C000
heap
page read and write
148E000
heap
page read and write
14C4000
heap
page read and write
1597000
heap
page read and write
150C000
heap
page read and write
15DD000
heap
page read and write
14F7000
heap
page read and write
150B000
heap
page read and write
1506000
heap
page read and write
14C0000
heap
page read and write
14F4000
heap
page read and write
14A5000
heap
page read and write
151E000
heap
page read and write
1529000
heap
page read and write
14FD000
heap
page read and write
1539000
heap
page read and write
154B000
heap
page read and write
14DB000
heap
page read and write
152C000
heap
page read and write
1535000
heap
page read and write
14A0000
heap
page read and write
14E3000
heap
page read and write
14E0000
heap
page read and write
158A000
heap
page read and write
158D000
heap
page read and write
14A7000
heap
page read and write
1546000
heap
page read and write
14E3000
heap
page read and write
1549000
heap
page read and write
14E9000
heap
page read and write
153B000
heap
page read and write
14D0000
heap
page read and write
1546000
heap
page read and write
14E5000
heap
page read and write
1534000
heap
page read and write
14E0000
heap
page read and write
1502000
heap
page read and write
3510000
heap
page read and write
1A7DE5B2000
heap
page read and write
15CB000
heap
page read and write
152A000
heap
page read and write
151A000
heap
page read and write
14C2000
heap
page read and write
1531000
heap
page read and write
15B6000
heap
page read and write
1551000
heap
page read and write
14FF000
heap
page read and write
14DF000
heap
page read and write
15AC000
heap
page read and write
1586000
heap
page read and write
14D9000
heap
page read and write
14F3000
heap
page read and write
14F4000
heap
page read and write
1F3084B2000
heap
page read and write
14F6000
heap
page read and write
1502000
heap
page read and write
1500000
heap
page read and write
15AC000
heap
page read and write
153A000
heap
page read and write
1508000
heap
page read and write
3270000
heap
page read and write
15A8000
heap
page read and write
14E5000
heap
page read and write
14C0000
heap
page read and write
155A000
heap
page read and write
1510000
heap
page read and write
1559000
heap
page read and write
152D000
heap
page read and write
14A3000
heap
page read and write
1F30849D000
heap
page read and write
169B4002000
unkown
page read and write
14FB000
heap
page read and write
150D000
heap
page read and write
151A000
heap
page read and write
1507000
heap
page read and write
1557000
heap
page read and write
152C000
heap
page read and write
14D6000
heap
page read and write
1529000
heap
page read and write
150C000
heap
page read and write
150F000
heap
page read and write
14A5000
heap
page read and write
151F000
heap
page read and write
14CB000
heap
page read and write
5859FA000
stack
page read and write
5858F9000
stack
page read and write
14CB000
heap
page read and write
152C000
heap
page read and write
14FE000
heap
page read and write
1524000
heap
page read and write
1593000
heap
page read and write
14C0000
heap
page read and write
14FF000
heap
page read and write
1F30849B000
heap
page read and write
14F6000
heap
page read and write
2D20000
heap
page read and write
14C6000
heap
page read and write
1559000
heap
page read and write
14D5000
heap
page read and write
1499000
heap
page read and write
15CE000
heap
page read and write
14C0000
heap
page read and write
152E000
heap
page read and write
14C4000
heap
page read and write
14A3000
heap
page read and write
1558000
heap
page read and write
169B4202000
heap
page read and write
14FF000
heap
page read and write
14B5000
heap
page read and write
14C0000
heap
page read and write
14EE000
heap
page read and write
1550000
heap
page read and write
14F1000
heap
page read and write
150B000
heap
page read and write
14EE000
heap
page read and write
1539000
heap
page read and write
14E0000
heap
page read and write
1499000
heap
page read and write
150B000
heap
page read and write
1546000
heap
page read and write
14B1000
heap
page read and write
14E2000
heap
page read and write
1529000
heap
page read and write
1590000
heap
page read and write
1521000
heap
page read and write
155E000
heap
page read and write
152D000
heap
page read and write
145E000
stack
page read and write
1517000
heap
page read and write
D7C000
stack
page read and write
155A000
heap
page read and write
1558000
heap
page read and write
14C3000
heap
page read and write
155E000
heap
page read and write
151D000
heap
page read and write
14EA000
heap
page read and write
1521000
heap
page read and write
155A000
heap
page read and write
150A000
heap
page read and write
14F8000
heap
page read and write
158C000
heap
page read and write
14CF000
heap
page read and write
14DF000
heap
page read and write
14AC000
heap
page read and write
14C0000
heap
page read and write
14C0000
heap
page read and write
1523000
heap
page read and write
1530000
heap
page read and write
14F7000
heap
page read and write
15A6000
heap
page read and write
14E5000
heap
page read and write
15A6000
heap
page read and write
1529000
heap
page read and write
284000
unkown
page execute and write copy
153B000
heap
page read and write
14AB000
heap
page read and write
14A0000
heap
page read and write
14C0000
heap
page read and write
1535000
heap
page read and write
8D0EFF000
stack
page read and write
1530000
heap
page read and write
1507000
heap
page read and write
152C000
heap
page read and write
14E1000
heap
page read and write
15CE000
heap
page read and write
1508000
heap
page read and write
14CA000
heap
page read and write
1549000
heap
page read and write
1200000
heap
page read and write
14E9000
heap
page read and write
1521000
heap
page read and write
15B6000
heap
page read and write
152E000
heap
page read and write
15CE000
heap
page read and write
1549000
heap
page read and write
14EC000
heap
page read and write
1534000
heap
page read and write
1533000
heap
page read and write
14DE000
heap
page read and write
152C000
heap
page read and write
1539000
heap
page read and write
14C0000
heap
page read and write
14ED000
heap
page read and write
155C000
heap
page read and write
15B3000
heap
page read and write
152C000
heap
page read and write
152C000
heap
page read and write
1544000
heap
page read and write
1510000
heap
page read and write
151A000
heap
page read and write
2BBE000
unkown
page read and write
15AB000
heap
page read and write
1521000
heap
page read and write
14C6000
heap
page read and write
14F9000
heap
page read and write
14E1000
heap
page read and write
1586000
heap
page read and write
15B5000
heap
page read and write
15B7000
heap
page read and write
14FF000
heap
page read and write
158A000
heap
page read and write
1532000
heap
page read and write
14DC000
heap
page read and write
150C000
heap
page read and write
1508000
heap
page read and write
15BA000
heap
page read and write
153D000
heap
page read and write
14FF000
heap
page read and write
14DA000
heap
page read and write
14E3000
heap
page read and write
1557000
heap
page read and write
14E9000
heap
page read and write
1549000
heap
page read and write
1549000
heap
page read and write
150D000
heap
page read and write
14EC000
heap
page read and write
152C000
heap
page read and write
14D9000
heap
page read and write
152C000
heap
page read and write
14FD000
heap
page read and write
150B000
heap
page read and write
15D3000
heap
page read and write
159A000
heap
page read and write
152C000
heap
page read and write
12FB000
stack
page read and write
1539000
heap
page read and write
1500000
heap
page read and write
1549000
heap
page read and write
14F2000
heap
page read and write
158A000
heap
page read and write
152F000
heap
page read and write
1521000
heap
page read and write
1507000
heap
page read and write
14CB000
heap
page read and write
15CB000
heap
page read and write
155A000
heap
page read and write
14C0000
heap
page read and write
169B4115000
trusted library allocation
page read and write
1505000
heap
page read and write
1525000
heap
page read and write
14FE000
heap
page read and write
1552000
heap
page read and write
1517000
heap
page read and write
1586000
heap
page read and write
14FA000
heap
page read and write
1549000
heap
page read and write
1522000
heap
page read and write
14E9000
heap
page read and write
14EC000
heap
page read and write
1521000
heap
page read and write
153A000
heap
page read and write
14E3000
heap
page read and write
14F4000
heap
page read and write
26E000
unkown
page readonly
14FA000
heap
page read and write
14D9000
heap
page read and write
1526000
heap
page read and write
14ED000
heap
page read and write
1544000
heap
page read and write
14FF000
heap
page read and write
1529000
heap
page read and write
1F0000
unkown
page readonly
1597000
heap
page read and write
14DE000
heap
page read and write
14FF000
heap
page read and write
15CE000
heap
page read and write
1523000
heap
page read and write
14C0000
heap
page read and write
150E000
heap
page read and write
15D6000
heap
page read and write
14AF000
heap
page read and write
14C0000
heap
page read and write
14C0000
heap
page read and write
14F7000
heap
page read and write
152C000
heap
page read and write
1528000
heap
page read and write
1526000
heap
page read and write
14E9000
heap
page read and write
1549000
heap
page read and write
1DA561D0000
heap
page read and write
14FA000
heap
page read and write
1506000
heap
page read and write
14A3000
heap
page read and write
14DE000
heap
page read and write
150D000
heap
page read and write
1539000
heap
page read and write
1544000
heap
page read and write
152D000
heap
page read and write
1540000
heap
page read and write
14EC000
heap
page read and write
2BC0000
heap
page read and write
14C9000
heap
page read and write
1521000
heap
page read and write
1585000
heap
page read and write
14D3000
heap
page read and write
1510000
heap
page read and write
15D6000
heap
page read and write
149A000
heap
page read and write
1539000
heap
page read and write
14EF000
heap
page read and write
1512000
heap
page read and write
1512000
heap
page read and write
2ED9000
heap
page read and write
14C4000
heap
page read and write
14B4000
heap
page read and write
1544000
heap
page read and write
1539000
heap
page read and write
14E7000
heap
page read and write
154F000
heap
page read and write
1504000
heap
page read and write
14B3000
heap
page read and write
155A000
heap
page read and write
15CB000
heap
page read and write
14C2000
heap
page read and write
1549000
heap
page read and write
1539000
heap
page read and write
14FD000
heap
page read and write
30E000
unkown
page readonly
15B6000
heap
page read and write
159A000
heap
page read and write
154C000
heap
page read and write
15D6000
heap
page read and write
15DC000
heap
page read and write
1549000
heap
page read and write
155B000
heap
page read and write
15CE000
heap
page read and write
1589000
heap
page read and write
14FD000
heap
page read and write
14F3000
heap
page read and write
14FF000
heap
page read and write
14C0000
heap
page read and write
247207C000
stack
page read and write
1591000
heap
page read and write
149A000
heap
page read and write
14EF000
heap
page read and write
15B7000
heap
page read and write
14C0000
heap
page read and write
11F0000
heap
page read and write
190F000
stack
page read and write
153D000
heap
page read and write
14FA000
heap
page read and write
152C000
heap
page read and write
1505000
heap
page read and write
14B5000
heap
page read and write
152D000
heap
page read and write
344F000
unkown
page read and write
15C2000
heap
page read and write
14F9000
heap
page read and write
155D000
heap
page read and write
14D5000
heap
page read and write
14B5000
heap
page read and write
14E9000
heap
page read and write
148E000
heap
page read and write
14F2000
heap
page read and write
1521000
heap
page read and write
158D000
heap
page read and write
14D9000
heap
page read and write
14C6000
heap
page read and write
196BCF8D000
heap
page read and write
1593000
heap
page read and write
15DB000
heap
page read and write
14D9000
heap
page read and write
1508000
heap
page read and write
1557000
heap
page read and write
1507000
heap
page read and write
1539000
heap
page read and write
3566000
heap
page read and write
153B000
heap
page read and write
15D7000
heap
page read and write
14D1000
heap
page read and write
1499000
heap
page read and write
14E0000
heap
page read and write
14C9000
heap
page read and write
14CE000
heap
page read and write
1559000
heap
page read and write
14A5000
heap
page read and write
151A000
heap
page read and write
14F5000
heap
page read and write
14B5000
heap
page read and write
1505000
heap
page read and write
15B6000
heap
page read and write
14DE000
heap
page read and write
152D000
heap
page read and write
152C000
heap
page read and write
150E000
heap
page read and write
15CE000
heap
page read and write
14EF000
heap
page read and write
14E9000
heap
page read and write
152E000
heap
page read and write
1559000
heap
page read and write
14FA000
heap
page read and write
14F7000
heap
page read and write
14A7000
heap
page read and write
14EB000
heap
page read and write
15AC000
heap
page read and write
1538000
heap
page read and write
196BCD70000
heap
page read and write
1531000
heap
page read and write
1529000
heap
page read and write
14E2000
heap
page read and write
1581000
heap
page read and write
15CE000
heap
page read and write
14F6000
heap
page read and write
15BE000
heap
page read and write
1526000
heap
page read and write
14C0000
heap
page read and write
14C2000
heap
page read and write
1502000
heap
page read and write
1F3084CE000
heap
page read and write
151D000
heap
page read and write
15CE000
heap
page read and write
150E000
heap
page read and write
14F3000
heap
page read and write
1535000
heap
page read and write
150D000
heap
page read and write
14E8000
heap
page read and write
14E2000
heap
page read and write
14CF000
heap
page read and write
14FD000
heap
page read and write
1534000
heap
page read and write
D10000
heap
page read and write
15DE000
heap
page read and write
15E0000
heap
page read and write
152C000
heap
page read and write
155A000
heap
page read and write
3566000
heap
page read and write
1DA5622B000
heap
page read and write
1505000
heap
page read and write
15E0000
heap
page read and write
1550000
heap
page read and write
151D000
heap
page read and write
154F000
heap
page read and write
1533000
heap
page read and write
14D5000
heap
page read and write
14C0000
heap
page read and write
15B2000
heap
page read and write
1521000
heap
page read and write
14C0000
heap
page read and write
1501000
heap
page read and write
1505000
heap
page read and write
1508000
heap
page read and write
14F6000
heap
page read and write
150D000
heap
page read and write
30C0000
direct allocation
page read and write
1521000
heap
page read and write
1523000
heap
page read and write
14F3000
heap
page read and write
1531000
heap
page read and write
1531000
heap
page read and write
14EF000
heap
page read and write
151D000
heap
page read and write
15CE000
heap
page read and write
14B4000
heap
page read and write
23F78640000
heap
page read and write
148E000
heap
page read and write
152C000
heap
page read and write
30E000
unkown
page readonly
14AF000
heap
page read and write
14D6000
heap
page read and write
15B6000
heap
page read and write
14B1000
heap
page read and write
1552000
heap
page read and write
1582000
heap
page read and write
14CE000
heap
page read and write
14F0000
heap
page read and write
1508000
heap
page read and write
941E67E000
stack
page read and write
15B3000
heap
page read and write
1505000
heap
page read and write
1535000
heap
page read and write
158E000
heap
page read and write
155C000
heap
page read and write
14F5000
heap
page read and write
152C000
heap
page read and write
14B5000
heap
page read and write
15D0000
heap
page read and write
1509000
heap
page read and write
159F000
heap
page read and write
1552000
heap
page read and write
151F000
heap
page read and write
150E000
heap
page read and write
14DE000
heap
page read and write
155B000
heap
page read and write
1525000
heap
page read and write
1549000
heap
page read and write
1502000
heap
page read and write
14C6000
heap
page read and write
1544000
heap
page read and write
14E9000
heap
page read and write
15BE000
heap
page read and write
14D2000
heap
page read and write
2D6E000
unkown
page read and write
14C6000
heap
page read and write
153D000
heap
page read and write
14C0000
heap
page read and write
15CE000
heap
page read and write
14D5000
heap
page read and write
14B4000
heap
page read and write
155A000
heap
page read and write
15B6000
heap
page read and write
150D000
heap
page read and write
159A000
heap
page read and write
150C000
heap
page read and write
1534000
heap
page read and write
14EC000
heap
page read and write
152D000
heap
page read and write
14F5000
heap
page read and write
152D000
heap
page read and write
151A000
heap
page read and write
14A7000
heap
page read and write
14C3000
heap
page read and write
2EE0000
heap
page read and write
2DB6000
heap
page read and write
1540000
heap
page read and write
151E000
heap
page read and write
14E9000
heap
page read and write
152C000
heap
page read and write
15BF000
heap
page read and write
14E9000
heap
page read and write
152E000
heap
page read and write
148E000
heap
page read and write
152D000
heap
page read and write
14D3000
heap
page read and write
14E9000
heap
page read and write
1529000
heap
page read and write
152C000
heap
page read and write
155A000
heap
page read and write
14F2000
heap
page read and write
15B5000
heap
page read and write
14A6000
heap
page read and write
14E0000
heap
page read and write
150E000
heap
page read and write
15DB000
heap
page read and write
14EF000
heap
page read and write
15D7000
heap
page read and write
155A000
heap
page read and write
153D000
heap
page read and write
1534000
heap
page read and write
14C2000
heap
page read and write
14AF000
heap
page read and write
152D000
heap
page read and write
1499000
heap
page read and write
151A000
heap
page read and write
1529000
heap
page read and write
1535000
heap
page read and write
15BF000
heap
page read and write
14C0000
heap
page read and write
1531000
heap
page read and write
14F0000
heap
page read and write
14FE000
heap
page read and write
15BE000
heap
page read and write
14EA000
heap
page read and write
14CF000
heap
page read and write
150F000
heap
page read and write
14FE000
heap
page read and write
1DA5620F000
heap
page read and write
14D9000
heap
page read and write
155C000
heap
page read and write
15BE000
heap
page read and write
152C000
heap
page read and write
1499000
heap
page read and write
15D0000
heap
page read and write
14E1000
heap
page read and write
14A0000
heap
page read and write
151D000
heap
page read and write
1593000
heap
page read and write
1508000
heap
page read and write
14F3000
heap
page read and write
14CF000
heap
page read and write
153A000
heap
page read and write
14E1000
heap
page read and write
14E7000
heap
page read and write
152E000
heap
page read and write
14A3000
heap
page read and write
14A1000
heap
page read and write
154B000
heap
page read and write
14B6000
heap
page read and write
14E9000
heap
page read and write
1591000
heap
page read and write
3159000
heap
page read and write
1591000
heap
page read and write
1553000
heap
page read and write
153E000
heap
page read and write
152C000
heap
page read and write
1581000
heap
page read and write
14C4000
heap
page read and write
151A000
heap
page read and write
14CF000
heap
page read and write
1505000
heap
page read and write
1523000
heap
page read and write
14FA000
heap
page read and write
14C0000
heap
page read and write
14C6000
heap
page read and write
14AF000
heap
page read and write
14C0000
heap
page read and write
14F6000
heap
page read and write
1499000
heap
page read and write
155A000
heap
page read and write
150D000
heap
page read and write
14C3000
heap
page read and write
152C000
heap
page read and write
14FC000
heap
page read and write
14EC000
heap
page read and write
15A0000
heap
page read and write
1539000
heap
page read and write
1506000
heap
page read and write
1531000
heap
page read and write
14CB000
heap
page read and write
153A000
heap
page read and write
1508000
heap
page read and write
1551000
heap
page read and write
15D7000
heap
page read and write
B53E9AB000
stack
page read and write
15B6000
heap
page read and write
1546000
heap
page read and write
1548000
heap
page read and write
1591000
heap
page read and write
151D000
heap
page read and write
14CA000
heap
page read and write
152C000
heap
page read and write
1505000
heap
page read and write
1539000
heap
page read and write
1545000
heap
page read and write
14EA000
heap
page read and write
148E000
heap
page read and write
153B000
heap
page read and write
1F1000
unkown
page execute read
15CF000
heap
page read and write
1506000
heap
page read and write
150D000
heap
page read and write
7A194FB000
stack
page read and write
152E000
heap
page read and write
1558000
heap
page read and write
14B5000
heap
page read and write
1556000
heap
page read and write
151A000
heap
page read and write
2EF2000
heap
page read and write
14DD000
heap
page read and write
1508000
heap
page read and write
1552000
heap
page read and write
14C0000
heap
page read and write
14E9000
heap
page read and write
14C0000
heap
page read and write
1586000
heap
page read and write
15BE000
heap
page read and write
15B2000
heap
page read and write
15D7000
heap
page read and write
1547000
heap
page read and write
14CF000
heap
page read and write
14E7000
heap
page read and write
152C000
heap
page read and write
1505000
heap
page read and write
1F30849E000
heap
page read and write
1515000
heap
page read and write
158C000
heap
page read and write
1530000
heap
page read and write
14F7000
heap
page read and write
14CF000
heap
page read and write
1535000
heap
page read and write
1505000
heap
page read and write
1F30849F000
heap
page read and write
1544000
heap
page read and write
1558000
heap
page read and write
1525000
heap
page read and write
14A0000
heap
page read and write
14C0000
heap
page read and write
14E9000
heap
page read and write
14FF000
heap
page read and write
14E1000
heap
page read and write
15AF000
heap
page read and write
15CE000
heap
page read and write
14F1000
heap
page read and write
14B4000
heap
page read and write
150B000
heap
page read and write
1549000
heap
page read and write
1591000
heap
page read and write
150D000
heap
page read and write
14F0000
heap
page read and write
15A6000
heap
page read and write
585AFC000
stack
page read and write
14D3000
heap
page read and write
150D000
heap
page read and write
14E2000
heap
page read and write
155C000
heap
page read and write
14D5000
heap
page read and write
1540000
heap
page read and write
1582000
heap
page read and write
155A000
heap
page read and write
1546000
heap
page read and write
14EC000
heap
page read and write
14EF000
heap
page read and write
150F000
heap
page read and write
1531000
heap
page read and write
14C0000
heap
page read and write
158E000
heap
page read and write
14CA000
heap
page read and write
1506000
heap
page read and write
1521000
heap
page read and write
14A3000
heap
page read and write
1499000
heap
page read and write
1591000
heap
page read and write
1543000
heap
page read and write
14F8000
heap
page read and write
1529000
heap
page read and write
14C0000
heap
page read and write
14EF000
heap
page read and write
283000
unkown
page execute and read and write
155C000
heap
page read and write
15A7000
heap
page read and write
23F78672000
heap
page read and write
152C000
heap
page read and write
1584000
heap
page read and write
1505000
heap
page read and write
150E000
heap
page read and write
1591000
heap
page read and write
14B5000
heap
page read and write
1521000
heap
page read and write
14F4000
heap
page read and write
26E000
unkown
page readonly
150A000
heap
page read and write
14FC000
heap
page read and write
1521000
heap
page read and write
14FA000
heap
page read and write
1502000
heap
page read and write
1547000
heap
page read and write
14D9000
heap
page read and write
1581000
heap
page read and write
15A6000
heap
page read and write
152C000
heap
page read and write
1535000
heap
page read and write
1593000
heap
page read and write
14ED000
heap
page read and write
150C000
heap
page read and write
15AC000
heap
page read and write
152C000
heap
page read and write
153C000
heap
page read and write
14F6000
heap
page read and write
14CD000
heap
page read and write
14D3000
heap
page read and write
1529000
heap
page read and write
14FF000
heap
page read and write
15DE000
heap
page read and write
30FE000
stack
page read and write
1505000
heap
page read and write
159D000
heap
page read and write
14E9000
heap
page read and write
14C0000
heap
page read and write
14DC000
heap
page read and write
14FC000
heap
page read and write
1505000
heap
page read and write
14F8000
heap
page read and write
14D7000
heap
page read and write
1506000
heap
page read and write
1544000
heap
page read and write
1590000
heap
page read and write
14B6000
heap
page read and write
1500000
heap
page read and write
15D6000
heap
page read and write
151C000
heap
page read and write
15CE000
heap
page read and write
196BCF94000
heap
page read and write
153C000
heap
page read and write
14A1000
heap
page read and write
2CE0000
heap
page read and write
152E000
heap
page read and write
14E2000
heap
page read and write
26E000
unkown
page readonly
14F9000
heap
page read and write
1514000
heap
page read and write
1505000
heap
page read and write
2CF9000
heap
page read and write
14F7000
heap
page read and write
1505000
heap
page read and write
14F5000
heap
page read and write
15A6000
heap
page read and write
1502000
heap
page read and write
14C0000
heap
page read and write
1534000
heap
page read and write
1541000
heap
page read and write
14EB000
heap
page read and write
1540000
heap
page read and write
155E000
heap
page read and write
150C000
heap
page read and write
1535000
heap
page read and write
14F9000
heap
page read and write
1554000
heap
page read and write
151C000
heap
page read and write
150E000
heap
page read and write
1541000
heap
page read and write
14E3000
heap
page read and write
14A6000
heap
page read and write
153B000
heap
page read and write
14F5000
heap
page read and write
153B000
heap
page read and write
1526000
heap
page read and write
14E1000
heap
page read and write
30E000
unkown
page readonly
1A7DE6A0000
heap
page read and write
15B5000
heap
page read and write
1523000
heap
page read and write
14AF000
heap
page read and write
14F6000
heap
page read and write
14C9000
heap
page read and write
15B3000
heap
page read and write
153C000
heap
page read and write
14C0000
heap
page read and write
14E3000
heap
page read and write
15C3000
heap
page read and write
155C000
heap
page read and write
14A0000
heap
page read and write
14B6000
heap
page read and write
152D000
heap
page read and write
32FA000
direct allocation
page execute and read and write
15A2000
heap
page read and write
152D000
heap
page read and write
1540000
heap
page read and write
153B000
heap
page read and write
14CD000
heap
page read and write
1586000
heap
page read and write
1500000
heap
page read and write
158D000
heap
page read and write
14C3000
heap
page read and write
14F6000
heap
page read and write
14F6000
heap
page read and write
1531000
heap
page read and write
1513000
heap
page read and write
15AF000
heap
page read and write
1526000
heap
page read and write
155C000
heap
page read and write
14E0000
heap
page read and write
1586000
heap
page read and write
14C0000
heap
page read and write
B53ED7F000
stack
page read and write
14C6000
heap
page read and write
15B8000
heap
page read and write
14CD000
heap
page read and write
14FF000
heap
page read and write
14FF000
heap
page read and write
1508000
heap
page read and write
1558000
heap
page read and write
14A3000
heap
page read and write
14B4000
heap
page read and write
15E0000
heap
page read and write
1529000
heap
page read and write
152E000
heap
page read and write
1534000
heap
page read and write
14C4000
heap
page read and write
150E000
heap
page read and write
1535000
heap
page read and write
1598000
heap
page read and write
153B000
heap
page read and write
1502000
heap
page read and write
14DD000
heap
page read and write
14FF000
heap
page read and write
14D9000
heap
page read and write
151A000
heap
page read and write
1591000
heap
page read and write
15CE000
heap
page read and write
1514000
heap
page read and write
152C000
heap
page read and write
150C000
heap
page read and write
1556000
heap
page read and write
153C000
heap
page read and write
14DC000
heap
page read and write
1511000
heap
page read and write
14DF000
heap
page read and write
151A000
heap
page read and write
14FE000
heap
page read and write
154F000
heap
page read and write
14B4000
heap
page read and write
1558000
heap
page read and write
14E5000
heap
page read and write
152C000
heap
page read and write
15D7000
heap
page read and write
15CE000
heap
page read and write
14B5000
heap
page read and write
14E9000
heap
page read and write
1517000
heap
page read and write
14FA000
heap
page read and write
14F0000
heap
page read and write
1593000
heap
page read and write
1546000
heap
page read and write
1581000
heap
page read and write
1505000
heap
page read and write
15D3000
heap
page read and write
15AF000
heap
page read and write
169B4055000
heap
page read and write
1502000
heap
page read and write
14C0000
heap
page read and write
1528000
heap
page read and write
1532000
heap
page read and write
14C0000
heap
page read and write
1A7DE5A8000
heap
page read and write
149A000
heap
page read and write
1591000
heap
page read and write
2F6E000
stack
page read and write
1550000
heap
page read and write
1553000
heap
page read and write
14CB000
heap
page read and write
2DB6000
heap
page read and write
14C2000
heap
page read and write
1499000
heap
page read and write
155E000
heap
page read and write
1549000
heap
page read and write
15E0000
heap
page read and write
1534000
heap
page read and write
14D4000
heap
page read and write
1521000
heap
page read and write
1510000
heap
page read and write
1514000
heap
page read and write
155D000
heap
page read and write
15C4000
heap
page read and write
1521000
heap
page read and write
14D9000
heap
page read and write
14AF000
heap
page read and write
14F1000
heap
page read and write
2DF0000
heap
page read and write
15CB000
heap
page read and write
152B000
heap
page read and write
15BE000
heap
page read and write
159B000
heap
page read and write
14FE000
heap
page read and write
14EA000
heap
page read and write
14EE000
heap
page read and write
152C000
heap
page read and write
151D000
heap
page read and write
14FC000
heap
page read and write
14C0000
heap
page read and write
2DB0000
heap
page read and write
1514000
heap
page read and write
1581000
heap
page read and write
1549000
heap
page read and write
14C9000
heap
page read and write
14EC000
heap
page read and write
150E000
heap
page read and write
14CE000
heap
page read and write
1511000
heap
page read and write
152C000
heap
page read and write
14A0000
heap
page read and write
941E6F9000
stack
page read and write
1505000
heap
page read and write
15BE000
heap
page read and write
585CFB000
stack
page read and write
14DB000
heap
page read and write
24720FE000
stack
page read and write
15B2000
heap
page read and write
1529000
heap
page read and write
14C0000
heap
page read and write
1521000
heap
page read and write
155E000
heap
page read and write
15CE000
heap
page read and write
15B7000
heap
page read and write
14D3000
heap
page read and write
15CE000
heap
page read and write
151A000
heap
page read and write
14A1000
heap
page read and write
14AF000
heap
page read and write
1535000
heap
page read and write
1590000
heap
page read and write
1540000
heap
page read and write
151F000
heap
page read and write
150E000
heap
page read and write
14F1000
heap
page read and write
14AC000
heap
page read and write
14B4000
heap
page read and write
14FD000
heap
page read and write
14EA000
heap
page read and write
1524000
heap
page read and write
14E1000
heap
page read and write
1535000
heap
page read and write
14D5000
heap
page read and write
1533000
heap
page read and write
1522000
heap
page read and write
155E000
heap
page read and write
14D9000
heap
page read and write
30B000
unkown
page execute and read and write
1559000
heap
page read and write
B53ECFF000
stack
page read and write
152C000
heap
page read and write
1532000
heap
page read and write
14D3000
heap
page read and write
15A6000
heap
page read and write
14F2000
heap
page read and write
14FA000
heap
page read and write
150D000
heap
page read and write
14B6000
heap
page read and write
152C000
heap
page read and write
15B2000
heap
page read and write
14F0000
heap
page read and write
151A000
heap
page read and write
14ED000
heap
page read and write
30E000
unkown
page readonly
1549000
heap
page read and write
14C2000
heap
page read and write
14EC000
heap
page read and write
14E9000
heap
page read and write
151E000
heap
page read and write
1549000
heap
page read and write
152D000
heap
page read and write
14F9000
heap
page read and write
14EB000
heap
page read and write
155E000
heap
page read and write
14A8000
heap
page read and write
8D0E7E000
stack
page read and write
15D2000
heap
page read and write
14CC000
heap
page read and write
1505000
heap
page read and write
15A2000
heap
page read and write
1549000
heap
page read and write
151F000
heap
page read and write
14C0000
heap
page read and write
14D5000
heap
page read and write
196BCF94000
heap
page read and write
14EF000
heap
page read and write
1508000
heap
page read and write
14EB000
heap
page read and write
14F6000
heap
page read and write
14E9000
heap
page read and write
150D000
heap
page read and write
1556000
heap
page read and write
941E1BB000
stack
page read and write
149A000
heap
page read and write
1586000
heap
page read and write
1582000
heap
page read and write
155A000
heap
page read and write
14D0000
heap
page read and write
14DE000
heap
page read and write
155A000
heap
page read and write
14F7000
heap
page read and write
1581000
heap
page read and write
14C0000
heap
page read and write
1558000
heap
page read and write
153C000
heap
page read and write
1519000
heap
page read and write
14ED000
heap
page read and write
1593000
heap
page read and write
196BCF8C000
heap
page read and write
155E000
heap
page read and write
14F2000
heap
page read and write
15BE000
heap
page read and write
1F3084CC000
heap
page read and write
150B000
heap
page read and write
7A198FE000
stack
page read and write
15A8000
heap
page read and write
1595000
heap
page read and write
153C000
heap
page read and write
1505000
heap
page read and write
152F000
heap
page read and write
1499000
heap
page read and write
14D4000
heap
page read and write
14C6000
heap
page read and write
1549000
heap
page read and write
14F0000
heap
page read and write
1507000
heap
page read and write
14CD000
heap
page read and write
14EC000
heap
page read and write
152C000
heap
page read and write
14B4000
heap
page read and write
14F7000
heap
page read and write
14EA000
heap
page read and write
1526000
heap
page read and write
15B5000
heap
page read and write
14A3000
heap
page read and write
14F2000
heap
page read and write
1549000
heap
page read and write
158A000
heap
page read and write
1529000
heap
page read and write
150E000
heap
page read and write
155C000
heap
page read and write
1508000
heap
page read and write
14FF000
heap
page read and write
15AF000
heap
page read and write
148E000
heap
page read and write
14C0000
heap
page read and write
15CE000
heap
page read and write
1533000
heap
page read and write
14E2000
heap
page read and write
152D000
heap
page read and write
1500000
heap
page read and write
1549000
heap
page read and write
14E9000
heap
page read and write
14F4000
heap
page read and write
14D5000
heap
page read and write
1534000
heap
page read and write
14C9000
heap
page read and write
169B4000000
unkown
page read and write
150D000
heap
page read and write
15BE000
heap
page read and write
155A000
heap
page read and write
1505000
heap
page read and write
14FE000
heap
page read and write
14FA000
heap
page read and write
3140000
heap
page read and write
150C000
heap
page read and write
150D000
heap
page read and write
15A8000
heap
page read and write
14EC000
heap
page read and write
1526000
heap
page read and write
1586000
heap
page read and write
1539000
heap
page read and write
1548000
heap
page read and write
196BCF94000
heap
page read and write
180E000
stack
page read and write
14F0000
heap
page read and write
150D000
heap
page read and write
283000
unkown
page execute and read and write
153C000
heap
page read and write
153A000
heap
page read and write
149A000
heap
page read and write
14D9000
heap
page read and write
1531000
heap
page read and write
1532000
heap
page read and write
1F0000
unkown
page readonly
1593000
heap
page read and write
14E7000
heap
page read and write
151E000
heap
page read and write
14C0000
heap
page read and write
1509000
heap
page read and write
152C000
heap
page read and write
1549000
heap
page read and write
1530000
heap
page read and write
14F0000
heap
page read and write
15AF000
heap
page read and write
155C000
heap
page read and write
1530000
heap
page read and write
158D000
heap
page read and write
150B000
heap
page read and write
153A000
heap
page read and write
14C0000
heap
page read and write
1F1000
unkown
page execute read
169B4213000
heap
page read and write
1541000
heap
page read and write
15E0000
heap
page read and write
1549000
heap
page read and write
151E000
heap
page read and write
1F308740000
heap
page read and write
1A7DE580000
heap
page read and write
1558000
heap
page read and write
14AF000
heap
page read and write
14D4000
heap
page read and write
1535000
heap
page read and write
14EC000
heap
page read and write
155E000
heap
page read and write
14E8000
heap
page read and write
153B000
heap
page read and write
150F000
heap
page read and write
1502000
heap
page read and write
1521000
heap
page read and write
154B000
heap
page read and write
154F000
heap
page read and write
152C000
heap
page read and write
3440000
direct allocation
page read and write
152F000
heap
page read and write
30A6000
heap
page read and write
169B4028000
heap
page read and write
14C9000
heap
page read and write
153E000
heap
page read and write
1539000
heap
page read and write
1526000
heap
page read and write
1505000
heap
page read and write
14B4000
heap
page read and write
14F9000
heap
page read and write
1F3084A6000
heap
page read and write
2EC0000
heap
page read and write
151F000
heap
page read and write
1519000
heap
page read and write
1517000
heap
page read and write
153C000
heap
page read and write
14FF000
heap
page read and write
15B6000
heap
page read and write
1504000
heap
page read and write
153E000
heap
page read and write
1F3083A0000
heap
page read and write
14C0000
heap
page read and write
14ED000
heap
page read and write
153E000
heap
page read and write
153E000
heap
page read and write
1207000
heap
page read and write
15BE000
heap
page read and write
150D000
heap
page read and write
1501000
heap
page read and write
1532000
heap
page read and write
14FD000
heap
page read and write
14DB000
heap
page read and write
1557000
heap
page read and write
14C4000
heap
page read and write
1F308745000
heap
page read and write
14FF000
heap
page read and write
14D5000
heap
page read and write
1A7DE825000
heap
page read and write
152F000
heap
page read and write
14ED000
heap
page read and write
15A7000
heap
page read and write
14F0000
heap
page read and write
15B8000
heap
page read and write
150D000
heap
page read and write
1554000
heap
page read and write
14C9000
heap
page read and write
14ED000
heap
page read and write
283000
unkown
page execute and write copy
15C8000
heap
page read and write
1507000
heap
page read and write
15C3000
heap
page read and write
1529000
heap
page read and write
14F3000
heap
page read and write
1590000
heap
page read and write
2471B8D000
stack
page read and write
152D000
heap
page read and write
14D5000
heap
page read and write
152C000
heap
page read and write
14E5000
heap
page read and write
14C0000
heap
page read and write
14F3000
heap
page read and write
14EC000
heap
page read and write
152F000
heap
page read and write
14B4000
heap
page read and write
14C0000
heap
page read and write
1529000
heap
page read and write
151F000
heap
page read and write
1510000
heap
page read and write
14D5000
heap
page read and write
150D000
heap
page read and write
14FD000
heap
page read and write
151D000
heap
page read and write
14C6000
heap
page read and write
1590000
heap
page read and write
1529000
heap
page read and write
27B0000
heap
page read and write
14D1000
heap
page read and write
1582000
heap
page read and write
14DB000
heap
page read and write
159A000
heap
page read and write
14B4000
heap
page read and write
14DD000
heap
page read and write
1531000
heap
page read and write
15A3000
heap
page read and write
14CD000
heap
page read and write
14CD000
heap
page read and write
1F3084CE000
heap
page read and write
1532000
heap
page read and write
36D8000
direct allocation
page execute and read and write
32F8000
direct allocation
page execute and read and write
151E000
heap
page read and write
152C000
heap
page read and write
1529000
heap
page read and write
151D000
heap
page read and write
1511000
heap
page read and write
14C7000
heap
page read and write
14F1000
heap
page read and write
14C7000
heap
page read and write
150D000
heap
page read and write
15A2000
heap
page read and write
14AF000
heap
page read and write
14C3000
heap
page read and write
1500000
heap
page read and write
152D000
heap
page read and write
152C000
heap
page read and write
15B6000
heap
page read and write
14CF000
heap
page read and write
150D000
heap
page read and write
154A000
heap
page read and write
1533000
heap
page read and write
1582000
heap
page read and write
14F9000
heap
page read and write
1506000
heap
page read and write
14C9000
heap
page read and write
14DC000
heap
page read and write
14F4000
heap
page read and write
14A0000
heap
page read and write
1499000
heap
page read and write
1505000
heap
page read and write
153C000
heap
page read and write
1521000
heap
page read and write
1499000
heap
page read and write
14FF000
heap
page read and write
1591000
heap
page read and write
14C9000
heap
page read and write
1507000
heap
page read and write
151C000
heap
page read and write
1505000
heap
page read and write
8D0B6A000
stack
page read and write
196BDCE0000
trusted library allocation
page read and write
14C6000
heap
page read and write
14DF000
heap
page read and write
15CE000
heap
page read and write
150D000
heap
page read and write
1F308260000
heap
page read and write
14E1000
heap
page read and write
14C0000
heap
page read and write
8D0FFE000
stack
page read and write
152C000
heap
page read and write
1581000
heap
page read and write
1591000
heap
page read and write
1508000
heap
page read and write
14A6000
heap
page read and write
15CE000
heap
page read and write
14F7000
heap
page read and write
15CE000
heap
page read and write
14F0000
heap
page read and write
14D6000
heap
page read and write
2EDF000
unkown
page read and write
1499000
heap
page read and write
1520000
heap
page read and write
14A8000
heap
page read and write
151F000
heap
page read and write
14F2000
heap
page read and write
1A7DE440000
heap
page read and write
15B6000
heap
page read and write
15B6000
heap
page read and write
14E1000
heap
page read and write
153C000
heap
page read and write
1502000
heap
page read and write
14FD000
heap
page read and write
1549000
heap
page read and write
153C000
heap
page read and write
14DA000
heap
page read and write
14AF000
heap
page read and write
1505000
heap
page read and write
14C0000
heap
page read and write
14D6000
heap
page read and write
14D1000
heap
page read and write
152C000
heap
page read and write
14C9000
heap
page read and write
196BDCF0000
trusted library allocation
page read and write
14A9000
heap
page read and write
14E9000
heap
page read and write
1540000
heap
page read and write
15B6000
heap
page read and write
36DA000
direct allocation
page execute and read and write
1591000
heap
page read and write
1503000
heap
page read and write
14C0000
heap
page read and write
150E000
heap
page read and write
14EC000
heap
page read and write
3520000
direct allocation
page read and write
1500000
heap
page read and write
14B5000
heap
page read and write
14EF000
heap
page read and write
153C000
heap
page read and write
153C000
heap
page read and write
14C0000
heap
page read and write
1460000
heap
page read and write
1544000
heap
page read and write
14AA000
heap
page read and write
155C000
heap
page read and write
14B1000
heap
page read and write
150D000
heap
page read and write
14B4000
heap
page read and write
14FD000
heap
page read and write
DE0000
heap
page read and write
14B6000
heap
page read and write
15B8000
heap
page read and write
14D3000
heap
page read and write
1499000
heap
page read and write
14EE000
heap
page read and write
14B1000
heap
page read and write
1DA561B0000
heap
page read and write
14FE000
heap
page read and write
15B2000
heap
page read and write
1544000
heap
page read and write
14B4000
heap
page read and write
14B4000
heap
page read and write
1502000
heap
page read and write
14F4000
heap
page read and write
14F5000
heap
page read and write
1533000
heap
page read and write
3462000
heap
page read and write
14C0000
heap
page read and write
1586000
heap
page read and write
2BF0000
heap
page read and write
150A000
heap
page read and write
1505000
heap
page read and write
155E000
heap
page read and write
15C2000
heap
page read and write
1513000
heap
page read and write
153E000
heap
page read and write
14E5000
heap
page read and write
14CD000
heap
page read and write
1556000
heap
page read and write
150E000
heap
page read and write
1544000
heap
page read and write
14EB000
heap
page read and write
150A000
heap
page read and write
30BF000
stack
page read and write
155E000
heap
page read and write
14DD000
heap
page read and write
23F78660000
heap
page read and write
14E5000
heap
page read and write
152C000
heap
page read and write
152D000
heap
page read and write
1500000
heap
page read and write
153C000
heap
page read and write
14EC000
heap
page read and write
158D000
heap
page read and write
153C000
heap
page read and write
196BCF85000
heap
page read and write
1530000
heap
page read and write
150D000
heap
page read and write
1517000
heap
page read and write
14B5000
heap
page read and write
14F9000
heap
page read and write
153B000
heap
page read and write
150E000
heap
page read and write
1508000
heap
page read and write
15DE000
heap
page read and write
152C000
heap
page read and write
1501000
heap
page read and write
1552000
heap
page read and write
14DE000
heap
page read and write
152C000
heap
page read and write
1531000
heap
page read and write
14A0000
heap
page read and write
14FD000
heap
page read and write
15BE000
heap
page read and write
155C000
heap
page read and write
1521000
heap
page read and write
152C000
heap
page read and write
14EE000
heap
page read and write
14CD000
heap
page read and write
14FE000
heap
page read and write
14C0000
heap
page read and write
3462000
heap
page read and write
152C000
heap
page read and write
152D000
heap
page read and write
14F3000
heap
page read and write
15D6000
heap
page read and write
14D9000
heap
page read and write
1505000
heap
page read and write
153C000
heap
page read and write
14E3000
heap
page read and write
150F000
heap
page read and write
14F2000
heap
page read and write
148E000
heap
page read and write
14AA000
heap
page read and write
153D000
heap
page read and write
14C0000
heap
page read and write
14D5000
heap
page read and write
14DB000
heap
page read and write
1550000
heap
page read and write
14F7000
heap
page read and write
14F0000
heap
page read and write
3140000
direct allocation
page read and write
1508000
heap
page read and write
15C8000
heap
page read and write
153A000
heap
page read and write
14C3000
heap
page read and write
1505000
heap
page read and write
14EA000
heap
page read and write
14E1000
heap
page read and write
14C0000
heap
page read and write
14C0000
heap
page read and write
1500000
heap
page read and write
1510000
heap
page read and write
14C0000
heap
page read and write
14B4000
heap
page read and write
152D000
heap
page read and write
14B5000
heap
page read and write
14EF000
heap
page read and write
14F4000
heap
page read and write
B53EDFF000
stack
page read and write
15BE000
heap
page read and write
14ED000
heap
page read and write
158A000
heap
page read and write
14C2000
heap
page read and write
153C000
heap
page read and write
14CB000
heap
page read and write
1507000
heap
page read and write
1535000
heap
page read and write
1529000
heap
page read and write
30B000
unkown
page execute and read and write
14A0000
heap
page read and write
14E5000
heap
page read and write
15BA000
heap
page read and write
14F6000
heap
page read and write
1533000
heap
page read and write
1550000
heap
page read and write
14B5000
heap
page read and write
14DC000
heap
page read and write
150E000
heap
page read and write
151A000
heap
page read and write
1559000
heap
page read and write
1529000
heap
page read and write
1511000
heap
page read and write
313E000
unkown
page read and write
1540000
heap
page read and write
150C000
heap
page read and write
14B3000
heap
page read and write
150F000
heap
page read and write
153E000
heap
page read and write
1DA56140000
heap
page read and write
14A6000
heap
page read and write
1521000
heap
page read and write
14F4000
heap
page read and write
15B2000
heap
page read and write
14C0000
heap
page read and write
14A3000
heap
page read and write
196BCF82000
heap
page read and write
196BCD80000
trusted library allocation
page read and write
15A3000
heap
page read and write
14FE000
heap
page read and write
14C4000
heap
page read and write
15CE000
heap
page read and write
152C000
heap
page read and write
14C0000
heap
page read and write
14FA000
heap
page read and write
14C0000
heap
page read and write
14F7000
heap
page read and write
14FD000
heap
page read and write
14FF000
heap
page read and write
14E5000
heap
page read and write
1534000
heap
page read and write
1555000
heap
page read and write
1535000
heap
page read and write
152C000
heap
page read and write
14AF000
heap
page read and write
150E000
heap
page read and write
1549000
heap
page read and write
155C000
heap
page read and write
15C2000
heap
page read and write
14EE000
heap
page read and write
153D000
heap
page read and write
23F785A0000
heap
page read and write
14C7000
heap
page read and write
14EE000
heap
page read and write
14D3000
heap
page read and write
150E000
heap
page read and write
152C000
heap
page read and write
2FB0000
heap
page read and write
1532000
heap
page read and write
1541000
heap
page read and write
14EF000
heap
page read and write
151D000
heap
page read and write
15E0000
heap
page read and write
1584000
heap
page read and write
14EE000
heap
page read and write
15E0000
heap
page read and write
15A2000
heap
page read and write
2471FF8000
stack
page read and write
150D000
heap
page read and write
158E000
heap
page read and write
15D2000
heap
page read and write
14AF000
heap
page read and write
1549000
heap
page read and write
14C0000
heap
page read and write
15AE000
heap
page read and write
1586000
heap
page read and write
14F6000
heap
page read and write
14F6000
heap
page read and write
14FF000
heap
page read and write
1506000
heap
page read and write
14C0000
heap
page read and write
14B1000
heap
page read and write
151F000
heap
page read and write
15DB000
heap
page read and write
1540000
heap
page read and write
152D000
heap
page read and write
151A000
heap
page read and write
14E3000
heap
page read and write
1505000
heap
page read and write
152E000
heap
page read and write
150D000
heap
page read and write
1508000
heap
page read and write
150D000
heap
page read and write
158A000
heap
page read and write
14C2000
heap
page read and write
196BD120000
trusted library allocation
page read and write
14B5000
heap
page read and write
1522000
heap
page read and write
15B5000
heap
page read and write
153A000
heap
page read and write
154B000
heap
page read and write
14FA000
heap
page read and write
14CB000
heap
page read and write
14AE000
heap
page read and write
14D5000
heap
page read and write
1F3084CE000
heap
page read and write
152C000
heap
page read and write
1499000
heap
page read and write
1582000
heap
page read and write
155E000
heap
page read and write
1544000
heap
page read and write
1541000
heap
page read and write
14B5000
heap
page read and write
1535000
heap
page read and write
15C2000
heap
page read and write
14AF000
heap
page read and write
11D0000
heap
page read and write
8D0BEE000
stack
page read and write
153C000
heap
page read and write
15DE000
heap
page read and write
15BA000
heap
page read and write
152C000
heap
page read and write
14C2000
heap
page read and write
1525000
heap
page read and write
14C4000
heap
page read and write
1F0000
unkown
page readonly
151E000
heap
page read and write
1507000
heap
page read and write
15E0000
heap
page read and write
150D000
heap
page read and write
151F000
heap
page read and write
1556000
heap
page read and write
151D000
heap
page read and write
152C000
heap
page read and write
14EA000
heap
page read and write
14CA000
heap
page read and write
1499000
heap
page read and write
14A7000
heap
page read and write
150B000
heap
page read and write
151A000
heap
page read and write
1590000
heap
page read and write
1500000
heap
page read and write
14C9000
heap
page read and write
1521000
heap
page read and write
153B000
heap
page read and write
1508000
heap
page read and write
14F2000
heap
page read and write
F80000
heap
page read and write
152A000
heap
page read and write
1586000
heap
page read and write
14AA000
heap
page read and write
14AA000
heap
page read and write
152C000
heap
page read and write
152D000
heap
page read and write
1531000
heap
page read and write
1595000
heap
page read and write
14C2000
heap
page read and write
155E000
heap
page read and write
14FE000
heap
page read and write
14CD000
heap
page read and write
15D6000
heap
page read and write
152D000
heap
page read and write
1532000
heap
page read and write
1508000
heap
page read and write
14F3000
heap
page read and write
1508000
heap
page read and write
14D1000
heap
page read and write
152E000
heap
page read and write
15A6000
heap
page read and write
151E000
heap
page read and write
150C000
heap
page read and write
14A9000
heap
page read and write
14A0000
heap
page read and write
15CE000
heap
page read and write
152C000
heap
page read and write
152C000
heap
page read and write
14EC000
heap
page read and write
152C000
heap
page read and write
1545000
heap
page read and write
1505000
heap
page read and write
15A2000
heap
page read and write
14E4000
heap
page read and write
196BDD40000
trusted library allocation
page read and write
1550000
heap
page read and write
14EA000
heap
page read and write
15CA000
heap
page read and write
1582000
heap
page read and write
15B2000
heap
page read and write
150F000
heap
page read and write
152C000
heap
page read and write
1501000
heap
page read and write
1586000
heap
page read and write
14AF000
heap
page read and write
14A6000
heap
page read and write
152C000
heap
page read and write
23F78580000
heap
page read and write
1505000
heap
page read and write
1594000
heap
page read and write
14F0000
heap
page read and write
1511000
heap
page read and write
14E9000
heap
page read and write
There are 2987 hidden memdumps, click here to show them.