IOC Report
jre-6-windows-i586.exe

loading gif

Files

File Path
Type
Category
Malicious
jre-6-windows-i586.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Config.Msi\534cb6.rbs
data
modified
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\core1.zip
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\core2.zip
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\core3.zip
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\other.zip
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\launcher.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\msvcr71.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\patchjre.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\regutils.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\zipper.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\COPYRIGHT
ISO-8859 text, with CRLF line terminators
dropped
C:\Program Files (x86)\Java\jre1.6.0\LICENSE
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Java\jre1.6.0\README.txt
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Program Files (x86)\Java\jre1.6.0\THIRDPARTYLICENSEREADME.txt
Unicode text, UTF-8 text, with very long lines (8346), with CRLF line terminators
dropped
C:\Program Files (x86)\Java\jre1.6.0\Welcome.html
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\JdbcOdbc.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\awt.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\axbridge.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\client\Xusage.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\client\classes.jsa
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\client\jvm.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\cmm.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\dcpr.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\deploy.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\dt_shmem.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\dt_socket.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\fontmanager.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\hpi.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\hprof.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\instrument.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\ioser12.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\j2pcsc.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\j2pkcs11.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jaas_nt.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\java-rmi.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\java.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\java.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\java_crw_demo.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\javacpl.cpl
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\javacpl.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\javaw.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\javaws.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jawt.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jdwp.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jli.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jpeg.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jpicom.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jpiexp.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jpinscp.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jpioji.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jpishare.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jsound.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jsoundds.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jucheck.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\jusched.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\keytool.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\kinit.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\klist.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\ktab.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\management.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\msvcr71.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\net.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\nio.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\npjava11.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\npjava12.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\npjava13.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\npjava14.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\npjava32.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\npjpi160.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\npoji610.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\npt.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\orbd.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\pack200.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\policytool.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\regutils.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\rmi.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\rmid.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\rmiregistry.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\servertool.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\splashscreen.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\ssv.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\sunmscapi.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\tnameserv.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\unpack.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\unpack200.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\verify.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\w2k_lsa_auth.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\wsdetect.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\bin\zip.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\calendars.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\charsets.jar
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\charsets.pack
JAR compressed with pack200, version -106.7
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\classlist
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\cmm\CIEXYZ.pf
Sun KCMS color profile 2.0, type KCMS, XYZ/XYZ-spac device, 51236 bytes, 2-12-1997 18:50:04, dependently, PCS X=0xf6b3 Z=0xd2f8 "XYZ to XYZ Identity Profile"
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\cmm\GRAY.pf
Sun KCMS color profile 2.0, type KCMS, GRAY/XYZ-mntr device, KODA/GRAY model, 632 bytes, 27-7-95 17:30:15, embedded, relative colorimetric, PCS Z=0xd32b "KODAK Grayscale Conversion - Gamma 1.0"
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\cmm\LINEAR_RGB.pf
color profile 2.0, type KCMS, RGB/XYZ-mntr device by KODK, 1044 bytes, 2-2-1998, PCS Z=0xd32c "linear sRGB"
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\cmm\sRGB.pf
Microsoft color profile 2.1, type Lino, RGB/XYZ-mntr device, IEC/sRGB model by HP, 3144 bytes, 9-2-1998 6:49:00 "sRGB IEC61966-2.1"
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\content-types.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy.jar
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy.pack
JAR compressed with pack200, version -106.7
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\ffjcext.zip
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\messages.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\messages_de.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\messages_es.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\messages_fr.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\messages_it.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\messages_ja.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\messages_ko.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\messages_sv.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\messages_zh_CN.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\messages_zh_HK.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\messages_zh_TW.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\deploy\splash.jpg
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Macintosh, datetime=2005:05:16 15:20:39], baseline, precision 8, 421x172, components 3
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\ext\dnsns.jar
Java archive data (JAR)
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\ext\localedata.jar
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\ext\localedata.pack
JAR compressed with pack200, version -106.7
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\ext\meta-index
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\ext\sunjce_provider.jar
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\ext\sunmscapi.jar
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\ext\sunpkcs11.jar
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\flavormap.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\fontconfig.98.bfc
raw G3 (Group 3) FAX
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\fontconfig.98.properties.src
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\fontconfig.bfc
raw G3 (Group 3) FAX
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\fontconfig.properties.src
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\fonts\LucidaSansRegular.ttf
TrueType Font data, 18 tables, 1st "GDEF", 19 names, Macintosh, Copyright (c) 1999 by Bigelow & Holmes Inc. Pat. Des. 289,420.Lucida SansRegularLucida Sans Regu
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\i386\jvm.cfg
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\im\indicim.jar
Java archive data (JAR)
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\im\thaiim.jar
Java archive data (JAR)
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\images\cursors\cursors.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\images\cursors\invalid32x32.gif
GIF image data, version 89a, 32 x 32
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\images\cursors\win32_CopyDrop32x32.gif
GIF image data, version 89a, 31 x 32
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\images\cursors\win32_CopyNoDrop32x32.gif
GIF image data, version 89a, 32 x 32
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\images\cursors\win32_LinkDrop32x32.gif
GIF image data, version 89a, 31 x 32
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\images\cursors\win32_LinkNoDrop32x32.gif
GIF image data, version 89a, 32 x 32
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\images\cursors\win32_MoveDrop32x32.gif
GIF image data, version 89a, 31 x 32
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\images\cursors\win32_MoveNoDrop32x32.gif
GIF image data, version 89a, 32 x 32
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\javaws.jar
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\javaws.pack
JAR compressed with pack200, version -106.7
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\jce.jar
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\jsse.jar
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\jsse.pack
JAR compressed with pack200, version -106.7
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\jvm.hprof.txt
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\logging.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\management-agent.jar
Java archive data (JAR)
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\management\jmxremote.access
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\management\jmxremote.password.template
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\management\management.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\management\snmp.acl.template
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\meta-index
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\net.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\plugin.jar
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\plugin.pack
JAR compressed with pack200, version -106.7
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\psfont.properties.ja
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\psfontj2d.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\resources.jar
Java archive data (JAR)
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\rt.jar
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\rt.pack
JAR compressed with pack200, version -106.7
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\security\US_export_policy.jar
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\security\cacerts
Java KeyStore
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\security\java.policy
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\security\java.security
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\security\javaws.policy
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\security\local_policy.jar
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\sound.properties
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\tzmappings
ASCII text
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Abidjan
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Accra
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Addis_Ababa
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Algiers
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Asmera
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Bamako
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Bangui
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Banjul
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Bissau
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Blantyre
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Brazzaville
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Bujumbura
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Cairo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Casablanca
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Ceuta
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Conakry
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Dakar
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Dar_es_Salaam
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Djibouti
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Douala
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\El_Aaiun
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Freetown
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Gaborone
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Harare
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Johannesburg
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Kampala
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Khartoum
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Kigali
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Kinshasa
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Lagos
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Libreville
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Lome
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Luanda
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Lubumbashi
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Lusaka
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Malabo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Maputo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Maseru
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Mbabane
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Mogadishu
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Monrovia
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Nairobi
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Ndjamena
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Niamey
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Nouakchott
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Ouagadougou
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Porto-Novo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Sao_Tome
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Tripoli
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Tunis
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Africa\Windhoek
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Adak
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Anchorage
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Anguilla
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Antigua
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Araguaina
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Argentina\Buenos_Aires
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Argentina\Catamarca
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Argentina\Cordoba
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Argentina\Jujuy
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Argentina\La_Rioja
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Argentina\Mendoza
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Argentina\Rio_Gallegos
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Argentina\San_Juan
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Argentina\Tucuman
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Argentina\Ushuaia
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Aruba
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Asuncion
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Atikokan
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Bahia
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Barbados
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Belem
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Belize
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Blanc-Sablon
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Boa_Vista
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Bogota
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Boise
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Cambridge_Bay
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Campo_Grande
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Cancun
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Caracas
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Cayenne
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Cayman
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Chicago
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Chihuahua
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Costa_Rica
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Cuiaba
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Curacao
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Danmarkshavn
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Dawson
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Dawson_Creek
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Denver
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Detroit
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Dominica
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Edmonton
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Eirunepe
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\El_Salvador
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Fortaleza
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Glace_Bay
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Godthab
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Goose_Bay
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Grand_Turk
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Grenada
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Guadeloupe
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Guatemala
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Guayaquil
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Guyana
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Halifax
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Havana
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Hermosillo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Indiana\Indianapolis
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Indiana\Knox
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Indiana\Marengo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Indiana\Petersburg
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Indiana\Vevay
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Indiana\Vincennes
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Inuvik
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Iqaluit
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Jamaica
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Juneau
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Kentucky\Louisville
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Kentucky\Monticello
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\La_Paz
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Lima
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Los_Angeles
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Maceio
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Managua
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Manaus
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Martinique
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Mazatlan
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Menominee
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Merida
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Mexico_City
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Miquelon
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Moncton
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Monterrey
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Montevideo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Montreal
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Montserrat
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Nassau
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\New_York
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Nipigon
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Nome
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Noronha
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\North_Dakota\Center
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\North_Dakota\New_Salem
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Panama
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Pangnirtung
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Paramaribo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Phoenix
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Port-au-Prince
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Port_of_Spain
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Porto_Velho
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Puerto_Rico
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Rainy_River
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Rankin_Inlet
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Recife
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Regina
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Rio_Branco
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Santiago
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Santo_Domingo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Sao_Paulo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Scoresbysund
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\St_Johns
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\St_Kitts
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\St_Lucia
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\St_Thomas
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\St_Vincent
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Swift_Current
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Tegucigalpa
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Thule
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Thunder_Bay
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Tijuana
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Toronto
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Tortola
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Vancouver
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Whitehorse
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Winnipeg
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Yakutat
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\America\Yellowknife
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Antarctica\Casey
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Antarctica\Davis
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Antarctica\DumontDUrville
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Antarctica\Mawson
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Antarctica\McMurdo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Antarctica\Palmer
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Antarctica\Rothera
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Antarctica\Syowa
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Antarctica\Vostok
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Aden
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Almaty
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Amman
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Anadyr
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Aqtau
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Aqtobe
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Ashgabat
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Baghdad
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Bahrain
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Baku
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Bangkok
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Beirut
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Bishkek
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Brunei
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Calcutta
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Choibalsan
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Chongqing
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Colombo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Damascus
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Dhaka
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Dili
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Dubai
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Dushanbe
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Gaza
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Harbin
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Hong_Kong
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Hovd
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Irkutsk
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Jakarta
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Jayapura
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Jerusalem
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Kabul
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Kamchatka
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Karachi
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Kashgar
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Katmandu
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Krasnoyarsk
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Kuala_Lumpur
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Kuching
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Kuwait
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Macau
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Magadan
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Makassar
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Manila
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Muscat
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Nicosia
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Novosibirsk
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Omsk
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Oral
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Phnom_Penh
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Pontianak
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Pyongyang
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Qatar
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Qyzylorda
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Rangoon
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Riyadh
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Riyadh87
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Riyadh88
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Riyadh89
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Saigon
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Sakhalin
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Samarkand
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Seoul
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Shanghai
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Singapore
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Taipei
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Tashkent
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Tbilisi
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Tehran
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Thimphu
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Tokyo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Ulaanbaatar
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Urumqi
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Vientiane
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Vladivostok
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Yakutsk
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Yekaterinburg
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Asia\Yerevan
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Atlantic\Azores
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Atlantic\Bermuda
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Atlantic\Canary
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Atlantic\Cape_Verde
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Atlantic\Faeroe
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Atlantic\Madeira
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Atlantic\Reykjavik
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Atlantic\South_Georgia
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Atlantic\St_Helena
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Atlantic\Stanley
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Australia\Adelaide
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Australia\Brisbane
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Australia\Broken_Hill
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Australia\Currie
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Australia\Darwin
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Australia\Hobart
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Australia\Lindeman
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Australia\Lord_Howe
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Australia\Melbourne
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Australia\Perth
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Australia\Sydney
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\CET
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\CST6CDT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\EET
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\EST
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\EST5EDT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+1
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+10
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+11
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+12
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+2
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+3
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+4
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+5
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+6
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+7
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+8
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT+9
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-1
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-10
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-11
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-12
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-13
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-14
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-2
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-3
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-4
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-5
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-6
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-7
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-8
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\GMT-9
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\UCT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Etc\UTC
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Amsterdam
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Andorra
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Athens
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Belgrade
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Berlin
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Brussels
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Bucharest
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Budapest
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Chisinau
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Copenhagen
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Dublin
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Gibraltar
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Helsinki
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Istanbul
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Kaliningrad
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Kiev
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Lisbon
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\London
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Luxembourg
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Madrid
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Malta
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Minsk
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Monaco
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Moscow
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Oslo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Paris
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Prague
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Riga
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Rome
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Samara
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Simferopol
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Sofia
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Stockholm
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Tallinn
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Tirane
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Uzhgorod
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Vaduz
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Vienna
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Vilnius
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Volgograd
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Warsaw
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Zaporozhye
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Europe\Zurich
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\GMT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\HST
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Indian\Antananarivo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Indian\Chagos
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Indian\Christmas
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Indian\Cocos
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Indian\Comoro
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Indian\Kerguelen
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Indian\Mahe
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Indian\Maldives
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Indian\Mauritius
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Indian\Mayotte
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Indian\Reunion
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\MET
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\MST
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\MST7MDT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\PST8PDT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Apia
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Auckland
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Chatham
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Easter
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Efate
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Enderbury
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Fakaofo
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Fiji
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Funafuti
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Galapagos
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Gambier
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Guadalcanal
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Guam
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Honolulu
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Johnston
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Kiritimati
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Kosrae
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Kwajalein
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Majuro
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Marquesas
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Midway
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Nauru
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Niue
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Norfolk
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Noumea
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Pago_Pago
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Palau
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Pitcairn
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Ponape
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Port_Moresby
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Rarotonga
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Saipan
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Tahiti
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Tarawa
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Tongatapu
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Truk
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Wake
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\Pacific\Wallis
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\AST4
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\AST4ADT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\CST6
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\CST6CDT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\EST5
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\EST5EDT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\HST10
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\MST7
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\MST7MDT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\PST8
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\PST8PDT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\YST9
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\SystemV\YST9YDT
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\WET
data
dropped
C:\Program Files (x86)\Java\jre1.6.0\lib\zi\ZoneInfoMappings
data
dropped
C:\Users\user\AppData\LocalLow\Sun\Java\jre1.6.0\jre1.6.0.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.0, MSI Installer, Code page: 936, Title: Java(TM) SE Runtime Environment 6.0, Subject: Java(TM) SE Runtime Environment 6.0, Author: Sun Microsystems, Inc., Keywords: Installer,MSI,Database, Comments: Contact: Your local administrator, Create Time/Date: Wed Nov 29 03:43:18 2006, Name of Creating Application: InstallShield?Developer 8.0, Security: 1, Template: Intel;0, Last Saved By: Intel;2052, Revision Number: {3248F0A8-6813-11D6-A77B-00B0D0160000}1.6.0.0;{3248F0A8-6813-11D6-A77B-00B0D0160000}1.6.0.0;{3248F0A7-6813-11D6-A77B-00B0D0160000}, Number of Pages: 200, Number of Characters: 1
dropped
C:\Users\user\AppData\Local\Temp\MSI317C.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\MSI31DB.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\MSI4C3A.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\MSIC95A.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\hsperfdata_user\876
data
dropped
C:\Users\user\AppData\Local\Temp\java_install_reg.log
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\jusched.log
ASCII text, with CRLF, LF line terminators
modified
C:\Windows\Installer\534cb5.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.0, MSI Installer, Code page: 936, Title: Java(TM) SE Runtime Environment 6.0, Subject: Java(TM) SE Runtime Environment 6.0, Author: Sun Microsystems, Inc., Keywords: Installer,MSI,Database, Comments: Contact: Your local administrator, Create Time/Date: Wed Nov 29 03:43:18 2006, Name of Creating Application: InstallShield?Developer 8.0, Security: 1, Template: Intel;0, Last Saved By: Intel;2052, Revision Number: {3248F0A8-6813-11D6-A77B-00B0D0160000}1.6.0.0;{3248F0A8-6813-11D6-A77B-00B0D0160000}1.6.0.0;{3248F0A7-6813-11D6-A77B-00B0D0160000}, Number of Pages: 200, Number of Characters: 1
dropped
C:\Windows\Installer\534cb7.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.0, MSI Installer, Code page: 936, Title: Java(TM) SE Runtime Environment 6.0, Subject: Java(TM) SE Runtime Environment 6.0, Author: Sun Microsystems, Inc., Keywords: Installer,MSI,Database, Comments: Contact: Your local administrator, Create Time/Date: Wed Nov 29 03:43:18 2006, Name of Creating Application: InstallShield?Developer 8.0, Security: 1, Template: Intel;0, Last Saved By: Intel;2052, Revision Number: {3248F0A8-6813-11D6-A77B-00B0D0160000}1.6.0.0;{3248F0A8-6813-11D6-A77B-00B0D0160000}1.6.0.0;{3248F0A7-6813-11D6-A77B-00B0D0160000}, Number of Pages: 200, Number of Characters: 1
dropped
C:\Windows\Installer\MSI4F74.tmp
data
dropped
C:\Windows\Installer\MSI5011.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI507F.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI50A0.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI50C0.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI50F0.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI512F.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI516F.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI519F.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI51FD.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI522D.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI526D.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI52AC.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI676E.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI6A5D.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI8095.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI9A58.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI9EDD.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSIA140.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSIAAA7.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSIAC00.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSIB884.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSIBCF9.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSIBD39.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSIC095.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\SourceHash{3248F0A8-6813-11D6-A77B-00B0D0160000}
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Installer\inprogressinstallinfo.ipi
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\SysWOW64\java.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Windows\SysWOW64\javacpl.cpl
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\SysWOW64\javaw.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\SysWOW64\javaws.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Temp\~DF00ED2C742DF2DEEB.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DF1AC8EC0D793F0F7F.TMP
data
dropped
C:\Windows\Temp\~DF1AFEFB36D5ABDF0D.TMP
data
dropped
C:\Windows\Temp\~DF2B5C8742FD10A9A4.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DF32F469964C8C2A51.TMP
data
dropped
C:\Windows\Temp\~DF57C88A36662DB525.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DF7A302F473042564F.TMP
data
dropped
C:\Windows\Temp\~DF8C77CD28D129E8B2.TMP
data
dropped
C:\Windows\Temp\~DF8CF02462F0547C53.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DFA85392BC05490497.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DFC31B45354EDE5ECA.TMP
data
dropped
C:\Windows\Temp\~DFCE1CD7C610FEE537.TMP
data
dropped
There are 646 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\jre-6-windows-i586.exe
"C:\Users\user\Desktop\jre-6-windows-i586.exe"
malicious
C:\Windows\SysWOW64\msiexec.exe
"C:\Windows\SysWOW64\\msiexec.exe" /i "C:\Users\user\AppData\LocalLow\Sun\Java\jre1.6.0\jre1.6.0.msi" METHOD=joff
malicious
C:\Windows\SysWOW64\msiexec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding 0706A44E185502DEE18F2AC4C12ABF0C C
malicious
C:\Windows\SysWOW64\msiexec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding 9B70B2B81B7B7F095784D7E6B8DF4E62
malicious
C:\Windows\SysWOW64\msiexec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding A29A8C8B6FA2D29B2615C3F18EF36D1B E Global\MSI0000
malicious
C:\Program Files (x86)\Java\jre1.6.0\bin\javaw.exe
"C:\Program Files (x86)\Java\jre1.6.0\bin\\javaw.exe" -Xshare:dump
malicious
C:\Windows\System32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\zipper.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\zipper.exe" "C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\\core1.zip" "C:\Program Files (x86)\Java\jre1.6.0\\" ""
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\zipper.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\zipper.exe" "C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\\core2.zip" "C:\Program Files (x86)\Java\jre1.6.0\\" ""
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\zipper.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\zipper.exe" "C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\\core3.zip" "C:\Program Files (x86)\Java\jre1.6.0\\" ""
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\launcher.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\\launcher.exe" "C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\rt.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\rt.jar"
C:\Program Files (x86)\Java\jre1.6.0\bin\unpack200.exe
"C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\rt.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\rt.jar"
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\launcher.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\\launcher.exe" "C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\jsse.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\jsse.jar"
C:\Program Files (x86)\Java\jre1.6.0\bin\unpack200.exe
"C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\jsse.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\jsse.jar"
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\launcher.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\\launcher.exe" "C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\plugin.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\plugin.jar"
C:\Program Files (x86)\Java\jre1.6.0\bin\unpack200.exe
"C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\plugin.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\plugin.jar"
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\launcher.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\\launcher.exe" "C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\javaws.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\javaws.jar"
C:\Program Files (x86)\Java\jre1.6.0\bin\unpack200.exe
"C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\javaws.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\javaws.jar"
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\launcher.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\\launcher.exe" "C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\deploy.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\deploy.jar"
C:\Program Files (x86)\Java\jre1.6.0\bin\unpack200.exe
"C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\deploy.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\deploy.jar"
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\zipper.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\zipper.exe" "C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\\other.zip" "C:\Program Files (x86)\Java\jre1.6.0\\" ""
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\launcher.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\\launcher.exe" "C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\charsets.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\charsets.jar"
C:\Program Files (x86)\Java\jre1.6.0\bin\unpack200.exe
"C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\charsets.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\charsets.jar"
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\launcher.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\\launcher.exe" "C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\ext\localedata.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\ext\localedata.jar"
C:\Program Files (x86)\Java\jre1.6.0\bin\unpack200.exe
"C:\Program Files (x86)\Java\jre1.6.0\bin\\unpack200.exe" -r -v -l "" "C:\Program Files (x86)\Java\jre1.6.0\\lib\ext\localedata.pack" "C:\Program Files (x86)\Java\jre1.6.0\\lib\ext\localedata.jar"
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\patchjre.exe
"C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\patchjre.exe" -s "C:\Program Files (x86)\Java\jre1.6.0\"
There are 16 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://apache.org/xml/features/validation/schema/augment-psvi
unknown
http://apache.org/xml/properties/input-buffer-size
unknown
https://java.sun.com/update/1.6.0/1.6.0-b105.xml
unknown
http://java.sun.com/javase
unknown
http://www.sun.com/xml/sax-events
unknown
http://java.sun.com/xml/ns/jdbc
unknown
http://apache.org/xml/properties/internal/entity-manager
unknown
http://javadl.sun.com/webapps/download/GetFile/1.6.0-b105/windows-i586/jre-6-windows-i586-iftw.exe
unknown
http://apache.org/xml/features/internal/parser-settings
unknown
http://rps-svcssun.com/services/countrylookup
unknown
http://apache.org/xml/features/dom/include-ignorable-whitespace
unknown
https://java.sun.com/-c
unknown
http://schemas.xmlsoap.org/wsdl/soap/http?mtom=true
unknown
http://apache.org/xml/properties/internal/stax-entity-resolver
unknown
http://apache.org/xml/features/validation
unknown
http://schemas.xmlsoap.org/soap/http
unknown
http://xml.apache.org/xalan/psuedovar
unknown
http://xml.apache.org/xalan-j
unknown
http://apache.org/xml/features/xinclude/fixup-base-uris
unknown
http://apache.org/xml/properties/schema/external-noNamespaceSchemaLocation
unknown
http://apache.org/xml/properties/internal/error-reporter
unknown
http://www.alphaworks.ibm.com/formula/xmleamOverhangCC
unknown
http://java.sun.com/javase/webnotes/6/index.html
unknown
http://xml.apache.org/xslt/java
unknown
http://apache.org/xml/features/include-comments
unknown
http://apache.org/xml/features/scanner/notify-char-refs
unknown
http://exslt.org/sets
unknown
http://oss.sgi.com/projects/FreeB
unknown
http://jvnet.org/fastinfoset/sax/properties/primitive-type-content-handler
unknown
http://java.sun.com/dtd/preferences.dtd
unknown
http://xml.apache.org/xalan-j/faq.html
unknown
http://jaxb.dev.java.net/xjc/model
unknown
http://apache.org/xml/features/continue-after-fatal-error
unknown
http://apache.org/xml/features/standard-uri-conformant
unknown
http://apache.org/xml/properties/internal/document-scanner
unknown
http://xml.apache.org/xalan/features/optimize
unknown
https://java.sun.com/update/1.6.0/1.6.0-b105.xmlZh
unknown
http://exslt.org/common
unknown
http://www.alphaworks.ibm.com/formula/xmlIBeamOverhangICC
unknown
http://exslt.org/dates-and-times
unknown
http://apache.org/xml/features/
unknown
http://apache.org/xml/features/generate-synthetic-annotations
unknown
http://www.xfree86.org/)
unknown
http://xml.org/sax/features/allow-dtd-events-after-endDTD
unknown
http://javadl.sun.com/webapps/download/GetFile/1.6.0-b105/windows-i586
unknown
http://www.entrust.net/CRL/Client1.crl0
unknown
http://xml.apache.org/xalan-j/faq.html#
unknown
http://apache.org/xml/features/internal/validation/schema/use-grammar-pool-only
unknown
http://www.entrust.net/CRL/net1.crl0
unknown
http://xsl.lotus.com/java
unknown
http://www.alphaworks.ibm.com/formula/xmlIBM
unknown
http://apache.org/xml/properties/internal/namespace-binder
unknown
http://schemas.xmlsoap.org/wsdl/soap12/
unknown
http://java.sun.com/products/autodl/j2seWindowsx86SunOStruetruetruedeployment.javaws.jre.%s%d%s.plat
unknown
http://schemas.xmlsoap.org/wsdl/
unknown
http://javax.xml.transform.sax.SAXTransformerFactory/feature
unknown
http://java.sun.com/update/1.6.0/1.6.0-b105.xmloe
unknown
http://exslt.org/dynamic
unknown
http://xml.apache.org/xalan/java
unknown
http://www.dom4j.org
unknown
http://apache.org/xml/properties/security-manager
unknown
http://javadl-esd.sun.com/update/1.6.0/1.6.0-b105.xml
unknown
http://xml.apache.org/xslt
unknown
http://jaxb.dev.java.net/array
unknown
http://schemas.xmlsoap.org/wsdl/mime/
unknown
http://javax.xml.transform.stax.StAXResult/feature
unknown
http://www.apache.org
unknown
http://exslt.org/strings
unknown
http://java.sun.com/j2se/%s/download.html
unknown
http://apache.org/xml/features/namespaces
unknown
http://apache.org/xml/features/xinclude
unknown
http://java.sun.com/products/autodl/j2se
unknown
http://apache.org/xml/features/validation/schema-full-checking
unknown
http://java.sun.com/javase/6/docs/technotes/guides/standards/
unknown
http://java.sun.com/update/1.6.0/1.6.0-b105.xml
unknown
http://java.sun.com/products/autodl/j2se-Jcom.sun.javaws.Maintoo
unknown
http://www.apache.org.
unknown
http://www.apache.org/
unknown
http://apache.org/xml/properties/internal/grammar-pool
unknown
http://www.apache.org/).
unknown
http://java.sun.com/xml/stream/properties/reader-in-defined-state
unknown
http://rps-svcs.sun.com/
unknown
http://jvnet.org/fastinfoset/serializer/feature/ignore/whiteSpaceTextContent
unknown
http://www.sun.com/patents
unknown
http://www.alphaworks.ibm.com/formula/xmlXorbetic
unknown
http://www.oasis-open.org/committees/entity/release/1.0/catalog.xsd
unknown
http://www.ietf.org/internet-drafts/draft-eastlake-xmldsig-uri-02.txt
unknown
http://relaxngcc.sf.net/).
unknown
http://apache.org/xml/features/allow-java-encodings
unknown
http://schemas.xmlsoap.org/soap/security/2000-12
unknown
http://www.w3c.org)
unknown
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
unknown
http://java.sun.com/update/%s/map-%s.xml
unknown
http://apache.org/xml/xmlschema/1.0/anonymousTypes
unknown
http://javax.xml.transform.stream.StreamSource/feature
unknown
http://apache.org/xml/features/validation/schema/normalized-value
unknown
http://exslt.org/common:objectType
unknown
http://apache.org/xml/features/xinclude/fixup-language
unknown
http://javax.xml.transform.dom.DOMSource/feature
unknown
http://apache.org/xml/properties/dom/document-class-name
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
java.com.ssl.d1.sc.omtrdc.net
63.140.62.17
sjremetrics.java.com
unknown
rps-svcs.sun.com
unknown
javadl-esd.sun.com
unknown
java.sun.com
unknown

IPs

IP
Domain
Country
Malicious
63.140.62.17
java.com.ssl.d1.sc.omtrdc.net
United States

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile
NULL
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jarfile\shell\open\command
NULL
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
NoExplorer
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}
MenuText
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}
CLSID
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}
ClsidExtension
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
NULL
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
ComponentID
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
IsInstalled
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
KeyFileName
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
Version
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
Locale
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Update\Policy
Country
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Config.Msi\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
C:\Config.Msi\534cb6.rbs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
C:\Config.Msi\534cb6.rbsLow
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SharedDlls
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\other.zip
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF606123726A6D117A78000B0D97FA46
8A0F842331866D117AB7000B0D610000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610000
8A0F842331866D117AB7000B0D610000
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SharedDlls
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\core1.zip
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACB0612318A96D117A58000B0D97FA46
8A0F842331866D117AB7000B0D610000
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SharedDlls
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\core2.zip
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACB0612318A96D117A58000B0D97FA56
8A0F842331866D117AB7000B0D610000
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\SharedDlls
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\core3.zip
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACB0612318A96D117A58000B0D97FA66
8A0F842331866D117AB7000B0D610000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\23B06123E6D18D74FA6711404FCAC1B8
8A0F842331866D117AB7000B0D610000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACB0612318A96D117A58000B0D977777
8A0F842331866D117AB7000B0D610000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files (x86)\Common Files\Java\Update\Base Images\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files (x86)\Common Files\Java\Update\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files (x86)\Java\jre1.6.0\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files (x86)\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0.b105\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files (x86)\Java\jre1.6.0\bin\
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6.0\MSI
INSTALLDIR
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6.0\MSI
SYSTRAY
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6.0\MSI
EULA
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6.0\MSI
IEXPLORER
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6.0\MSI
MOZILLA
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6.0\MSI
JAVAUPDATE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6.0\MSI
AUTOUPDATECHECK
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6.0\MSI
JU
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
DisplayIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
RegOwner
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
RegCompany
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
ProductID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
LocalPackage
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
AuthorizedCDFPrefix
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
Comments
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
Contact
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
HelpTelephone
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
InstallDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
InstallSource
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
ModifyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
NoRepair
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
Readme
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
URLUpdateInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
WindowsInstaller
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
Language
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
AuthorizedCDFPrefix
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
Comments
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
Contact
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
HelpTelephone
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
InstallDate
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
InstallSource
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
ModifyPath
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
NoRepair
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
Readme
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
Size
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
URLUpdateInfo
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
WindowsInstaller
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
Version
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
Language
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610000
8A0F842331866D117AB7000B0D610000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\InstallProperties
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160000}
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610000
other_onnonUS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\Features
other_onnonUS
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610000
IE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\Features
IE
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610000
extra
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\Features
extra
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610000
jrecore
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\Features
jrecore
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610000\Patches
AllPatches
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000
ProductName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000
PackageCode
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000
Language
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000
Assignment
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000
AdvertiseFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000
InstanceType
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000
AuthorizedLUAApp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000
DeploymentFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610000
8A0F842331866D117AB7000B0D610000
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000\SourceList
PackageName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000\SourceList\Net
1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000\SourceList\Media
DiskPrompt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000\SourceList\Media
1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000
Clients
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610000\SourceList
LastUsedSource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings
StringCacheGeneration
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Update\Policy
VisitorId
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1f\417C44EB
@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1f\417C44EB
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.160\CLSID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
Installer
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\DownloadInformation
CODEBASE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\DownloadInformation
INF
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\InstalledVersion
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6.0
JavaHome
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6.0
MicroVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6.0
RuntimeLib
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Plug-in\1.6.0
JavaHome
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Plug-in\1.6.0
UseJava2IExplorer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.jar
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\MiscStatus
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\MiscStatus\1
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\MiscStatus
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\MiscStatus\1
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}\MiscStatus
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}\MiscStatus\1
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}\MiscStatus
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}\MiscStatus\1
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}\MiscStatus
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}\MiscStatus\1
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin\CLSID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\JavaPlugin.FamilyVersionSupport\CLSID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}
Installer
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\DownloadInformation
CODEBASE
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\DownloadInformation
INF
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\InstalledVersion
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Installer
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\InstalledVersion
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.8
JavaHome
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.8
RuntimeLib
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.8
MicroVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN
Text
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN
Type
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN
Bitmap
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT
RegPath
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT
Text
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT
Type
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT
ValueName
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT
HKeyRoot
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT
CheckedValue
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT
DefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\AdvancedOptions\JAVA_SUN\SELECT
UncheckedValue
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Web Start\1.6.0
Home
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Plug-in\1.6.0
HideSystemTrayIcon
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
SunJavaUpdateSched
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6
JavaHome
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6
RuntimeLib
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Runtime Environment\1.6
MicroVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\TreatAs
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Plug-in\1.6.0
UseJava2IExplorer
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\JavaSoft\Java Update\Policy
EnableJavaUpdate
There are 199 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
A77000
heap
page read and write
A77000
heap
page read and write
A2F000
stack
page read and write
7C392000
unkown
page readonly
20CF000
stack
page read and write
A74000
heap
page read and write
497B000
heap
page read and write
4130000
heap
page read and write
A74000
heap
page read and write
2518000
heap
page read and write
A77000
heap
page read and write
20EF000
heap
page read and write
A77000
heap
page read and write
401000
unkown
page execute read
2561000
heap
page read and write
7C38E000
unkown
page read and write
49D6000
heap
page read and write
7C392000
unkown
page readonly
423C000
heap
page read and write
ED000
stack
page read and write
623000
heap
page read and write
296B000
heap
page read and write
A77000
heap
page read and write
12DF000
stack
page read and write
3055000
heap
page read and write
403000
unkown
page readonly
A77000
heap
page read and write
7C38B000
unkown
page read and write
A77000
heap
page read and write
580000
heap
page read and write
2DB0000
heap
page read and write
25FF000
stack
page read and write
496F000
heap
page read and write
27D0000
heap
page read and write
AC1000
heap
page read and write
54E000
stack
page read and write
19C000
stack
page read and write
2F8E000
heap
page read and write
49A1000
heap
page read and write
A77000
heap
page read and write
4B0000
heap
page read and write
401000
unkown
page execute read
A77000
heap
page read and write
5CE000
stack
page read and write
A74000
heap
page read and write
530000
heap
page read and write
A74000
heap
page read and write
209F000
heap
page read and write
A77000
heap
page read and write
402000
unkown
page readonly
AE1000
heap
page read and write
2120000
heap
page read and write
401000
unkown
page execute read
AB4000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
7C37A000
unkown
page readonly
411000
unkown
page read and write
660000
heap
page read and write
A77000
heap
page read and write
20E9000
heap
page read and write
22D0000
heap
page read and write
A77000
heap
page read and write
DE8000
heap
page read and write
1F8D000
heap
page read and write
401000
unkown
page execute read
4740000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
2919000
heap
page read and write
A77000
heap
page read and write
4994000
heap
page read and write
2D81000
heap
page read and write
A77000
heap
page read and write
23A7000
heap
page read and write
290D000
heap
page read and write
215C000
heap
page read and write
5BA000
heap
page read and write
400000
unkown
page readonly
2ED9000
heap
page read and write
4367000
heap
page read and write
1FE5000
heap
page read and write
239F000
heap
page read and write
39B0000
remote allocation
page read and write
2426000
heap
page read and write
640000
heap
page read and write
239F000
heap
page read and write
36CD000
stack
page read and write
41A000
unkown
page read and write
420000
heap
page read and write
2D66000
heap
page read and write
A77000
heap
page read and write
402000
unkown
page readonly
43F7000
heap
page read and write
7C38E000
unkown
page write copy
A77000
heap
page read and write
20B3000
heap
page read and write
4999000
heap
page read and write
2089000
heap
page read and write
402000
unkown
page readonly
27FE000
heap
page read and write
4265000
heap
page read and write
4C0000
heap
page read and write
1F4F000
stack
page read and write
4E0000
heap
page read and write
5AE000
stack
page read and write
256E000
heap
page read and write
282D000
heap
page read and write
2E6E000
heap
page read and write
7C37A000
unkown
page readonly
A77000
heap
page read and write
2E073000
heap
page read and write
2909000
heap
page read and write
7C38B000
unkown
page read and write
2927000
heap
page read and write
9C000
stack
page read and write
7C341000
unkown
page execute read
A77000
heap
page read and write
7C38B000
unkown
page read and write
460000
heap
page read and write
300B000
heap
page read and write
A77000
heap
page read and write
49E6000
heap
page read and write
2535000
heap
page read and write
5A0000
heap
page read and write
2AC3000
heap
page read and write
210F000
stack
page read and write
402000
unkown
page readonly
4A07000
heap
page read and write
A77000
heap
page read and write
4994000
heap
page read and write
700000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
73A000
heap
page read and write
2E14000
heap
page read and write
AF0000
heap
page read and write
2030000
heap
page read and write
BCF000
heap
page read and write
400000
unkown
page readonly
A77000
heap
page read and write
4994000
heap
page read and write
4578000
heap
page read and write
4A06000
heap
page read and write
2A6E000
heap
page read and write
201F000
heap
page read and write
1F0000
heap
page read and write
440000
heap
page read and write
1F0000
heap
page read and write
A77000
heap
page read and write
2589000
heap
page read and write
1F0000
heap
page read and write
1F0F000
stack
page read and write
A77000
heap
page read and write
290D000
heap
page read and write
7C340000
unkown
page readonly
237B000
heap
page read and write
2C20000
heap
page read and write
A77000
heap
page read and write
2B46000
heap
page read and write
2D80000
heap
page read and write
2510000
heap
page read and write
A77000
heap
page read and write
278C000
heap
page read and write
293D000
heap
page read and write
423A000
heap
page read and write
20D9000
heap
page read and write
411000
unkown
page write copy
AB4000
heap
page read and write
7C340000
unkown
page readonly
A77000
heap
page read and write
A74000
heap
page read and write
2CC10000
direct allocation
page execute and read and write
401000
unkown
page execute read
A77000
heap
page read and write
AB8000
heap
page read and write
41B000
unkown
page readonly
1F0000
heap
page read and write
7C38E000
unkown
page read and write
A74000
heap
page read and write
49A1000
heap
page read and write
AB4000
heap
page read and write
27DD000
heap
page read and write
2A4C000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
410000
heap
page read and write
A77000
heap
page read and write
2E14000
heap
page read and write
7C340000
unkown
page readonly
291B000
heap
page read and write
3066000
heap
page read and write
7C38B000
unkown
page read and write
27C0000
heap
page read and write
25EE000
heap
page read and write
A77000
heap
page read and write
415000
unkown
page readonly
ABE000
heap
page read and write
460000
heap
page read and write
A77000
heap
page read and write
20D1000
heap
page read and write
2561000
heap
page read and write
400000
unkown
page readonly
47C1000
heap
page read and write
4A06000
heap
page read and write
A77000
heap
page read and write
1F8F000
stack
page read and write
2927000
heap
page read and write
400000
unkown
page readonly
91F000
stack
page read and write
2D66000
heap
page read and write
6D310000
unkown
page readonly
209F000
stack
page read and write
A77000
heap
page read and write
415000
unkown
page readonly
400000
unkown
page readonly
423C000
heap
page read and write
131E000
stack
page read and write
95F000
stack
page read and write
AC1000
heap
page read and write
7C38B000
unkown
page read and write
7C38E000
unkown
page write copy
9C000
stack
page read and write
1FD2000
heap
page read and write
410000
heap
page read and write
4999000
heap
page read and write
A77000
heap
page read and write
400000
unkown
page readonly
49A1000
heap
page read and write
4980000
heap
page read and write
419000
unkown
page write copy
A77000
heap
page read and write
2020000
heap
page read and write
20C5000
heap
page read and write
41A000
unkown
page read and write
419000
unkown
page write copy
27FE000
heap
page read and write
2930000
heap
page read and write
7C392000
unkown
page readonly
27FE000
heap
page read and write
2900000
heap
page read and write
550000
heap
page read and write
423C000
heap
page read and write
1F8F000
stack
page read and write
4A06000
heap
page read and write
400000
unkown
page readonly
4EB000
heap
page read and write
306E000
heap
page read and write
4368000
heap
page read and write
4641000
heap
page read and write
A77000
heap
page read and write
92F000
stack
page read and write
7C37A000
unkown
page readonly
400000
unkown
page readonly
52B000
heap
page read and write
2925000
heap
page read and write
13AE000
heap
page read and write
2504000
heap
page read and write
400000
unkown
page readonly
4F0000
heap
page read and write
A77000
heap
page read and write
23BD000
heap
page read and write
2387000
heap
page read and write
AC0000
heap
page read and write
A77000
heap
page read and write
212F000
stack
page read and write
6DB000
heap
page read and write
A77000
heap
page read and write
2930000
heap
page read and write
402000
unkown
page readonly
A77000
heap
page read and write
6D9C7000
unkown
page write copy
41D000
unkown
page readonly
236F000
heap
page read and write
400000
unkown
page readonly
B87000
heap
page read and write
402000
unkown
page readonly
A77000
heap
page read and write
4997000
heap
page read and write
A77000
heap
page read and write
2080000
heap
page read and write
A77000
heap
page read and write
67E000
stack
page read and write
A1F000
stack
page read and write
412000
unkown
page readonly
2DDF000
heap
page read and write
4999000
heap
page read and write
7D0000
heap
page read and write
7C38B000
unkown
page read and write
27E8000
heap
page read and write
20D1000
heap
page read and write
2938000
heap
page read and write
401000
unkown
page execute read
59E000
stack
page read and write
A77000
heap
page read and write
400000
unkown
page readonly
D26000
heap
page read and write
25B6000
heap
page read and write
2571000
heap
page read and write
7C38B000
unkown
page read and write
381D000
stack
page read and write
274C000
heap
page read and write
49F6000
heap
page read and write
2364000
heap
page read and write
6D7B0000
unkown
page readonly
132A000
heap
page read and write
40BF000
heap
page read and write
2510000
heap
page read and write
1C0000
heap
page read and write
46C1000
heap
page read and write
6D316000
unkown
page readonly
550000
heap
page read and write
AC1000
heap
page read and write
2620000
heap
page read and write
2393000
heap
page read and write
20F0000
heap
page read and write
2E14000
heap
page read and write
2491000
heap
page read and write
A77000
heap
page read and write
290D000
heap
page read and write
401000
unkown
page execute read
7C38E000
unkown
page write copy
4999000
heap
page read and write
25B6000
heap
page read and write
2120000
heap
page read and write
A77000
heap
page read and write
2FE0000
heap
page read and write
400000
unkown
page readonly
9D000
stack
page read and write
5BE000
stack
page read and write
415000
unkown
page readonly
401000
unkown
page execute read
7C341000
unkown
page execute read
E14000
unkown
page execute and write copy
2059000
heap
page read and write
400000
unkown
page readonly
401000
unkown
page execute read
4980000
heap
page read and write
A77000
heap
page read and write
2930000
heap
page read and write
A77000
heap
page read and write
2033000
heap
page read and write
58E000
stack
page read and write
402000
unkown
page readonly
202A000
heap
page read and write
2E21000
heap
page read and write
2EBF000
heap
page read and write
AC1000
heap
page read and write
400000
unkown
page readonly
20D5000
heap
page read and write
415000
unkown
page readonly
4F0000
heap
page read and write
2057000
heap
page read and write
4994000
heap
page read and write
2505000
heap
page read and write
27FE000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
AE4000
heap
page read and write
4131000
heap
page read and write
4992000
heap
page read and write
4974000
heap
page read and write
20EA000
heap
page read and write
403000
unkown
page readonly
20D2000
heap
page read and write
27EE000
heap
page read and write
2B47000
heap
page read and write
A77000
heap
page read and write
251D000
heap
page read and write
7C38B000
unkown
page read and write
1F0000
heap
page read and write
4980000
heap
page read and write
2948000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
2EBF000
heap
page read and write
258D000
heap
page read and write
7C37A000
unkown
page readonly
43E7000
heap
page read and write
2D66000
heap
page read and write
3085000
heap
page read and write
290A000
heap
page read and write
7C38B000
unkown
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
2FE9000
heap
page read and write
AC1000
heap
page read and write
23BD000
heap
page read and write
309B000
heap
page read and write
19C000
stack
page read and write
2EA1000
heap
page read and write
400000
unkown
page readonly
A77000
heap
page read and write
7CF000
stack
page read and write
660000
heap
page read and write
AB4000
heap
page read and write
2713000
heap
page read and write
59E000
stack
page read and write
7C340000
unkown
page readonly
2E218000
heap
page read and write
A77000
heap
page read and write
A81000
heap
page read and write
D98000
heap
page read and write
AC0000
heap
page read and write
A77000
heap
page read and write
9C000
stack
page read and write
2D810000
direct allocation
page execute and read and write
7C38E000
unkown
page read and write
A77000
heap
page read and write
2D66000
heap
page read and write
2687000
heap
page read and write
A77000
heap
page read and write
43B000
heap
page read and write
22D1000
heap
page read and write
20BB000
heap
page read and write
A81000
heap
page read and write
A74000
heap
page read and write
2561000
heap
page read and write
2D66000
heap
page read and write
A74000
heap
page read and write
A77000
heap
page read and write
2E14000
heap
page read and write
640000
heap
page read and write
2518000
heap
page read and write
A77000
heap
page read and write
43F7000
heap
page read and write
7C340000
unkown
page readonly
2FDF000
heap
page read and write
A77000
heap
page read and write
290A000
heap
page read and write
450000
heap
page read and write
28FE000
heap
page read and write
27EE000
heap
page read and write
401000
unkown
page execute read
A77000
heap
page read and write
A5F000
stack
page read and write
2EAB000
heap
page read and write
41B000
heap
page read and write
200B000
heap
page read and write
19C000
stack
page read and write
B82000
heap
page read and write
4244000
heap
page read and write
20E1000
heap
page read and write
A77000
heap
page read and write
2E175000
heap
page read and write
2440000
heap
page read and write
400000
unkown
page readonly
2EF6000
heap
page read and write
4074000
heap
page read and write
38AE000
stack
page read and write
401000
unkown
page execute read
7C38E000
unkown
page read and write
AB8000
heap
page read and write
2059000
heap
page read and write
196000
stack
page read and write
20C0000
heap
page read and write
2027000
heap
page read and write
7C390000
unkown
page read and write
2DB7000
heap
page read and write
6D9C3000
unkown
page read and write
2EB0000
heap
page read and write
280E000
heap
page read and write
278C000
heap
page read and write
11D5000
heap
page read and write
9C000
stack
page read and write
A77000
heap
page read and write
BC8000
heap
page read and write
2E0D6000
heap
page read and write
745000
heap
page read and write
2932000
heap
page read and write
2587000
heap
page read and write
803000
heap
page read and write
2029000
heap
page read and write
420000
heap
page read and write
39B0000
remote allocation
page read and write
401000
unkown
page execute read
1F0000
heap
page read and write
A77000
heap
page read and write
24E4000
heap
page read and write
32FF000
stack
page read and write
4980000
heap
page read and write
401000
unkown
page execute read
423C000
heap
page read and write
290F000
heap
page read and write
2567000
heap
page read and write
2804000
heap
page read and write
7C341000
unkown
page execute read
415000
unkown
page readonly
AD5000
heap
page read and write
25B6000
heap
page read and write
E14000
unkown
page execute and write copy
7C340000
unkown
page readonly
75E000
unkown
page read and write
2D66000
heap
page read and write
2C20000
heap
page read and write
AD6000
heap
page read and write
6D770000
unkown
page readonly
7C341000
unkown
page execute read
7C341000
unkown
page execute read
58A000
heap
page read and write
A77000
heap
page read and write
150000
heap
page read and write
23A6000
heap
page read and write
A77000
heap
page read and write
400000
unkown
page readonly
1F8F000
stack
page read and write
28D4000
heap
page read and write
2565000
heap
page read and write
A81000
heap
page read and write
400000
unkown
page readonly
AC1000
heap
page read and write
A77000
heap
page read and write
24A3000
heap
page read and write
49E6000
heap
page read and write
A77000
heap
page read and write
54E000
stack
page read and write
280E000
heap
page read and write
7C392000
unkown
page readonly
A77000
heap
page read and write
58E000
stack
page read and write
4980000
heap
page read and write
BDD000
heap
page read and write
1F0000
heap
page read and write
6EE000
stack
page read and write
203F000
stack
page read and write
4997000
heap
page read and write
2CFF000
heap
page read and write
4992000
heap
page read and write
2013000
heap
page read and write
2081000
heap
page read and write
A74000
heap
page read and write
20E9000
heap
page read and write
28FA000
heap
page read and write
2D8C9000
direct allocation
page execute and read and write
2E2A0000
heap
page read and write
7A0000
heap
page read and write
A74000
heap
page read and write
2575000
heap
page read and write
2CFE000
heap
page read and write
A77000
heap
page read and write
4E0000
heap
page read and write
A77000
heap
page read and write
48F4000
heap
page read and write
2A71000
heap
page read and write
2BE1000
heap
page read and write
AB6000
heap
page read and write
6D3C1000
unkown
page readonly
AC1000
heap
page read and write
410000
heap
page read and write
290D000
heap
page read and write
20BE000
stack
page read and write
860000
heap
page read and write
27EE000
heap
page read and write
A77000
heap
page read and write
400000
unkown
page readonly
2561000
heap
page read and write
7C340000
unkown
page readonly
4999000
heap
page read and write
2E010000
heap
page read and write
400000
unkown
page readonly
4999000
heap
page read and write
1F0000
heap
page read and write
7C38B000
unkown
page read and write
2548000
heap
page read and write
414000
unkown
page execute and write copy
7C392000
unkown
page readonly
DE1000
heap
page read and write
7C341000
unkown
page execute read
419000
unkown
page write copy
B39000
heap
page read and write
7C392000
unkown
page readonly
25B3000
heap
page read and write
423C000
heap
page read and write
6D776000
unkown
page readonly
41D000
unkown
page readonly
A77000
heap
page read and write
B8A000
heap
page read and write
2059000
heap
page read and write
11CE000
stack
page read and write
400000
unkown
page readonly
4997000
heap
page read and write
20B7000
heap
page read and write
4D0000
heap
page read and write
2EBF000
heap
page read and write
7C38E000
unkown
page write copy
4999000
heap
page read and write
630000
heap
page read and write
402000
unkown
page readonly
56E000
stack
page read and write
2057000
heap
page read and write
5AE000
stack
page read and write
7C340000
unkown
page readonly
4579000
heap
page read and write
2F31000
heap
page read and write
2946000
heap
page read and write
419000
unkown
page write copy
400000
unkown
page readonly
A81000
heap
page read and write
20E9000
heap
page read and write
4994000
heap
page read and write
24E4000
heap
page read and write
402000
unkown
page readonly
415000
unkown
page readonly
27DC000
heap
page read and write
40C4000
heap
page read and write
1E8E000
stack
page read and write
A77000
heap
page read and write
27EE000
heap
page read and write
29C8000
heap
page read and write
DA4000
heap
page read and write
41A000
unkown
page read and write
2597000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
520000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
28FF000
heap
page read and write
A77000
heap
page read and write
293B000
heap
page read and write
A77000
heap
page read and write
7C38B000
unkown
page read and write
7C340000
unkown
page readonly
290D000
heap
page read and write
13E4000
heap
page read and write
4980000
heap
page read and write
41D000
unkown
page readonly
4994000
heap
page read and write
2508000
heap
page read and write
19C000
stack
page read and write
A77000
heap
page read and write
7C38B000
unkown
page read and write
4999000
heap
page read and write
27FF000
heap
page read and write
1F0000
heap
page read and write
A77000
heap
page read and write
D69000
heap
page read and write
401000
unkown
page execute read
2ED9000
heap
page read and write
4997000
heap
page read and write
A74000
heap
page read and write
280E000
heap
page read and write
A77000
heap
page read and write
4999000
heap
page read and write
AD1000
heap
page read and write
7C37A000
unkown
page readonly
2376000
heap
page read and write
4997000
heap
page read and write
6D7B1000
unkown
page execute read
7C392000
unkown
page readonly
7C341000
unkown
page execute read
570000
heap
page read and write
20CD000
heap
page read and write
43F8000
heap
page read and write
760000
heap
page read and write
6D9DE000
unkown
page read and write
A77000
heap
page read and write
9C000
stack
page read and write
4999000
heap
page read and write
2FBB000
heap
page read and write
4953000
heap
page read and write
BCD000
heap
page read and write
2E14000
heap
page read and write
400000
unkown
page readonly
20E9000
heap
page read and write
41D000
unkown
page readonly
6A0000
heap
page read and write
A81000
heap
page read and write
7DE000
stack
page read and write
A77000
heap
page read and write
2E14000
heap
page read and write
1F4E000
stack
page read and write
A77000
heap
page read and write
6AA000
heap
page read and write
450000
heap
page read and write
403000
unkown
page readonly
2E103000
heap
page read and write
A77000
heap
page read and write
19C000
stack
page read and write
27A0000
heap
page read and write
A77000
heap
page read and write
6D3B1000
unkown
page execute read
20E6000
heap
page read and write
AF9000
heap
page read and write
24D5000
heap
page read and write
4A0000
heap
page read and write
A77000
heap
page read and write
2938000
heap
page read and write
A74000
heap
page read and write
A77000
heap
page read and write
20CB000
heap
page read and write
25B3000
heap
page read and write
20C1000
heap
page read and write
2060000
heap
page read and write
777000
heap
page read and write
28410000
direct allocation
page execute and read and write
A70000
heap
page read and write
2057000
heap
page read and write
A77000
heap
page read and write
2410000
direct allocation
page execute and read and write
AC1000
heap
page read and write
238B000
heap
page read and write
A77000
heap
page read and write
290A000
heap
page read and write
28BA000
heap
page read and write
1F3F000
stack
page read and write
A77000
heap
page read and write
7C341000
unkown
page execute read
403000
unkown
page readonly
401000
unkown
page execute read
20CE000
stack
page read and write
2DC10000
direct allocation
page execute and read and write
A77000
heap
page read and write
4E49000
heap
page read and write
2BD0000
heap
page read and write
400000
unkown
page readonly
7C340000
unkown
page readonly
A77000
heap
page read and write
7C37A000
unkown
page readonly
200B000
heap
page read and write
B10000
heap
page read and write
9C000
stack
page read and write
A77000
heap
page read and write
2561000
heap
page read and write
580000
heap
page read and write
216F000
stack
page read and write
27B5000
heap
page read and write
293E000
heap
page read and write
AC1000
heap
page read and write
A74000
heap
page read and write
2059000
heap
page read and write
2D66000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
20E9000
heap
page read and write
A74000
heap
page read and write
A77000
heap
page read and write
47FC000
heap
page read and write
401000
unkown
page execute read
2931000
heap
page read and write
A77000
heap
page read and write
1362000
heap
page read and write
A74000
heap
page read and write
2570000
heap
page read and write
25D3000
heap
page read and write
419000
unkown
page write copy
AB8000
heap
page read and write
206D000
heap
page read and write
290D000
heap
page read and write
41A000
unkown
page read and write
27FE000
heap
page read and write
A77000
heap
page read and write
204E000
heap
page read and write
2909000
heap
page read and write
A77000
heap
page read and write
2398000
heap
page read and write
302D000
heap
page read and write
20F1000
heap
page read and write
800000
heap
page read and write
414000
unkown
page execute and write copy
BE1000
heap
page read and write
256C000
heap
page read and write
4130000
heap
page read and write
401000
unkown
page execute read
9C000
stack
page read and write
2422000
heap
page read and write
60B000
heap
page read and write
41D000
unkown
page readonly
217E000
heap
page read and write
401000
unkown
page execute read
2563000
heap
page read and write
49F6000
heap
page read and write
4640000
heap
page read and write
A77000
heap
page read and write
437F000
heap
page read and write
A77000
heap
page read and write
7C341000
unkown
page execute read
B61000
heap
page read and write
3F21000
heap
page read and write
57E000
stack
page read and write
2EE2000
heap
page read and write
19D000
stack
page read and write
540000
heap
page read and write
247E000
heap
page read and write
4A06000
heap
page read and write
20F8000
heap
page read and write
401000
unkown
page execute read
D7D000
heap
page read and write
2575000
heap
page read and write
A77000
heap
page read and write
2521000
heap
page read and write
28FE000
heap
page read and write
257A000
heap
page read and write
A77000
heap
page read and write
2E14000
heap
page read and write
62E000
stack
page read and write
80D000
heap
page read and write
23A1000
heap
page read and write
4994000
heap
page read and write
870000
heap
page read and write
4997000
heap
page read and write
39B0000
heap
page read and write
AC1000
heap
page read and write
41D000
unkown
page readonly
19C000
stack
page read and write
4992000
heap
page read and write
25F6000
heap
page read and write
7C340000
unkown
page readonly
A77000
heap
page read and write
400000
unkown
page readonly
2DC5000
heap
page read and write
A81000
heap
page read and write
4994000
heap
page read and write
1F83000
heap
page read and write
4980000
heap
page read and write
2611000
heap
page read and write
2D66000
heap
page read and write
5B0000
heap
page read and write
4110000
heap
page read and write
A77000
heap
page read and write
1FD9000
heap
page read and write
430000
heap
page read and write
4997000
heap
page read and write
209F000
heap
page read and write
2946000
heap
page read and write
7C37A000
unkown
page readonly
A77000
heap
page read and write
2425000
heap
page read and write
2CA1000
heap
page read and write
2441000
heap
page read and write
2040000
direct allocation
page execute and read and write
9C000
stack
page read and write
27EF000
heap
page read and write
A77000
heap
page read and write
2059000
heap
page read and write
290A000
heap
page read and write
A74000
heap
page read and write
401000
unkown
page execute read
A77000
heap
page read and write
5DA000
heap
page read and write
41A000
unkown
page read and write
A74000
heap
page read and write
A77000
heap
page read and write
20E9000
heap
page read and write
2E14000
heap
page read and write
A77000
heap
page read and write
B24000
heap
page read and write
2A4C000
heap
page read and write
2E14000
heap
page read and write
419000
unkown
page write copy
560000
heap
page read and write
540000
heap
page read and write
400000
unkown
page readonly
4246000
heap
page read and write
730000
heap
page read and write
4992000
heap
page read and write
2588000
heap
page read and write
A74000
heap
page read and write
46B000
heap
page read and write
401000
unkown
page execute read
2871000
heap
page read and write
4980000
heap
page read and write
4980000
heap
page read and write
2D66000
heap
page read and write
19C000
stack
page read and write
1FF2000
heap
page read and write
250F000
stack
page read and write
A77000
heap
page read and write
1F0000
heap
page read and write
A74000
heap
page read and write
7C341000
unkown
page execute read
2CFE000
heap
page read and write
2059000
heap
page read and write
7C341000
unkown
page execute read
A77000
heap
page read and write
2610000
heap
page read and write
20E9000
heap
page read and write
57E000
stack
page read and write
1F0000
heap
page read and write
2E320000
heap
page read and write
7C38E000
unkown
page read and write
7C340000
unkown
page readonly
49A1000
heap
page read and write
2919000
heap
page read and write
4560000
heap
page read and write
7C392000
unkown
page readonly
2EAB000
heap
page read and write
2568000
heap
page read and write
AC1000
heap
page read and write
7C38E000
unkown
page read and write
4997000
heap
page read and write
3B19000
heap
page read and write
A74000
heap
page read and write
A77000
heap
page read and write
41B2000
heap
page read and write
7C37A000
unkown
page readonly
6D771000
unkown
page execute read
2DB7000
heap
page read and write
A77000
heap
page read and write
AB8000
heap
page read and write
20E4000
heap
page read and write
600000
heap
page read and write
2C20000
heap
page read and write
7C340000
unkown
page readonly
2BCF000
heap
page read and write
43E8000
heap
page read and write
1395000
heap
page read and write
41A000
unkown
page read and write
A77000
heap
page read and write
4992000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
207F000
stack
page read and write
A77000
heap
page read and write
401000
unkown
page execute read
401000
unkown
page execute read
AC1000
heap
page read and write
A77000
heap
page read and write
660000
heap
page read and write
20EF000
stack
page read and write
4992000
heap
page read and write
27EE000
heap
page read and write
23A8000
heap
page read and write
7C340000
unkown
page readonly
420000
heap
page read and write
510000
heap
page read and write
2D66000
heap
page read and write
423000
heap
page read and write
1F0000
heap
page read and write
252D000
heap
page read and write
262A000
heap
page read and write
A77000
heap
page read and write
1FFF000
stack
page read and write
2AA2000
heap
page read and write
7C37A000
unkown
page readonly
25DE000
heap
page read and write
2589000
heap
page read and write
2D8E000
stack
page read and write
31FF000
stack
page read and write
2070000
direct allocation
page execute and read and write
1FD1000
heap
page read and write
69E000
stack
page read and write
AC1000
heap
page read and write
257D000
heap
page read and write
CB0000
heap
page read and write
290D000
heap
page read and write
401000
unkown
page execute read
2420000
heap
page read and write
1FEF000
stack
page read and write
A74000
heap
page read and write
4233000
heap
page read and write
401000
unkown
page execute read
2ED9000
heap
page read and write
20BB000
heap
page read and write
290E000
heap
page read and write
6D9E4000
unkown
page readonly
85F000
stack
page read and write
400000
unkown
page readonly
3675000
heap
page read and write
23BD000
heap
page read and write
D61000
heap
page read and write
401000
unkown
page execute read
4992000
heap
page read and write
AB4000
heap
page read and write
73E000
heap
page read and write
2397000
heap
page read and write
45B000
heap
page read and write
7C37A000
unkown
page readonly
2930000
heap
page read and write
1FF4000
heap
page read and write
A77000
heap
page read and write
4479000
heap
page read and write
41D000
unkown
page readonly
4BE000
stack
page read and write
498B000
heap
page read and write
415000
unkown
page readonly
4741000
heap
page read and write
2040000
heap
page read and write
4980000
heap
page read and write
2D66000
heap
page read and write
A77000
heap
page read and write
2A6E000
heap
page read and write
2D66000
heap
page read and write
415000
unkown
page readonly
4130000
heap
page read and write
2903000
heap
page read and write
A77000
heap
page read and write
13AA000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
4074000
heap
page read and write
820000
heap
page read and write
6D7C1000
unkown
page execute read
53E000
stack
page read and write
A77000
heap
page read and write
9C000
stack
page read and write
2789000
heap
page read and write
7C38B000
unkown
page read and write
24E4000
heap
page read and write
423E000
heap
page read and write
1FDD000
heap
page read and write
7C37A000
unkown
page readonly
45F4000
heap
page read and write
2E161000
heap
page read and write
A77000
heap
page read and write
401000
unkown
page execute and write copy
40E000
unkown
page readonly
6D3CA000
unkown
page write copy
2925000
heap
page read and write
20E9000
heap
page read and write
4995000
heap
page read and write
25BC000
heap
page read and write
27C4000
heap
page read and write
29E0000
heap
page read and write
44FE000
heap
page read and write
A77000
heap
page read and write
11D0000
heap
page read and write
39AF000
stack
page read and write
333E000
stack
page read and write
7C38E000
unkown
page read and write
4240000
heap
page read and write
AC1000
heap
page read and write
2DB7000
heap
page read and write
4997000
heap
page read and write
358F000
stack
page read and write
40BD000
heap
page read and write
47D8000
heap
page read and write
89E000
stack
page read and write
400000
unkown
page readonly
A77000
heap
page read and write
4784000
heap
page read and write
253F000
heap
page read and write
6F0000
heap
page read and write
49D7000
heap
page read and write
4478000
heap
page read and write
2C410000
direct allocation
page execute and read and write
C29000
heap
page read and write
4994000
heap
page read and write
21B3000
heap
page read and write
D82000
heap
page read and write
A77000
heap
page read and write
AB0000
heap
page read and write
A77000
heap
page read and write
7C341000
unkown
page execute read
49C6000
heap
page read and write
2949000
heap
page read and write
DD2000
heap
page read and write
410000
heap
page read and write
490000
heap
page read and write
401000
unkown
page execute read
AC1000
heap
page read and write
A77000
heap
page read and write
4265000
heap
page read and write
4997000
heap
page read and write
25E6000
heap
page read and write
2C21000
heap
page read and write
21D0000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
4980000
heap
page read and write
255D000
heap
page read and write
2375000
heap
page read and write
510000
heap
page read and write
A77000
heap
page read and write
4980000
heap
page read and write
A77000
heap
page read and write
2ED9000
heap
page read and write
43F7000
heap
page read and write
25F7000
heap
page read and write
2CA6000
heap
page read and write
277F000
stack
page read and write
B0E000
heap
page read and write
7C38B000
unkown
page read and write
64A000
heap
page read and write
5D0000
heap
page read and write
1FF3000
heap
page read and write
AB4000
heap
page read and write
2AA2000
heap
page read and write
2590000
heap
page read and write
251D000
heap
page read and write
460D000
heap
page read and write
A77000
heap
page read and write
2923000
heap
page read and write
21D3000
heap
page read and write
1FF0000
heap
page read and write
AC1000
heap
page read and write
65E000
stack
page read and write
A77000
heap
page read and write
2D9E000
heap
page read and write
49E6000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
2377000
heap
page read and write
1FF7000
heap
page read and write
7C340000
unkown
page readonly
2518000
heap
page read and write
46C0000
heap
page read and write
A77000
heap
page read and write
CC1000
heap
page read and write
25D2000
heap
page read and write
239F000
heap
page read and write
403000
unkown
page readonly
290D000
heap
page read and write
41D000
unkown
page readonly
A77000
heap
page read and write
2440000
direct allocation
page execute and read and write
4980000
heap
page read and write
2E035000
heap
page read and write
AB8000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
A74000
heap
page read and write
2424000
heap
page read and write
A77000
heap
page read and write
4A16000
heap
page read and write
2E14000
heap
page read and write
19C000
stack
page read and write
498B000
heap
page read and write
1F89000
heap
page read and write
7C37A000
unkown
page readonly
252D000
heap
page read and write
AC1000
heap
page read and write
A74000
heap
page read and write
640000
heap
page read and write
13AE000
heap
page read and write
401000
unkown
page execute read
420000
heap
page read and write
2781000
heap
page read and write
252B000
heap
page read and write
204A000
heap
page read and write
A81000
heap
page read and write
423E000
heap
page read and write
27C4000
heap
page read and write
7C38E000
unkown
page read and write
2908000
heap
page read and write
4130000
heap
page read and write
400000
unkown
page readonly
4992000
heap
page read and write
1F91000
heap
page read and write
4992000
heap
page read and write
A77000
heap
page read and write
138D000
heap
page read and write
6D7BD000
unkown
page readonly
2A70000
heap
page read and write
5DE000
stack
page read and write
410000
heap
page read and write
108F000
unkown
page execute and write copy
7C37A000
unkown
page readonly
27EE000
heap
page read and write
66A000
heap
page read and write
2521000
heap
page read and write
4997000
heap
page read and write
1F80000
heap
page read and write
20B0000
heap
page read and write
4997000
heap
page read and write
2E220000
heap
page read and write
A77000
heap
page read and write
2E14000
heap
page read and write
2724000
heap
page read and write
1F3F000
stack
page read and write
AB8000
heap
page read and write
410000
heap
page read and write
5B3000
heap
page read and write
204A000
heap
page read and write
720000
heap
page read and write
20E6000
heap
page read and write
7C37A000
unkown
page readonly
49F6000
heap
page read and write
402000
unkown
page readonly
4758000
heap
page read and write
20E9000
heap
page read and write
45AC000
heap
page read and write
A77000
heap
page read and write
2EBF000
heap
page read and write
578000
heap
page read and write
256D000
heap
page read and write
2EA1000
heap
page read and write
6D985000
unkown
page readonly
2059000
heap
page read and write
4F0000
heap
page read and write
A77000
heap
page read and write
2EDA000
heap
page read and write
19E000
stack
page read and write
2E14000
heap
page read and write
7C340000
unkown
page readonly
A74000
heap
page read and write
2A6E000
heap
page read and write
2412000
direct allocation
page execute and read and write
A77000
heap
page read and write
45A000
heap
page read and write
415000
unkown
page readonly
4999000
heap
page read and write
42E6000
heap
page read and write
A77000
heap
page read and write
4992000
heap
page read and write
2611000
heap
page read and write
A81000
heap
page read and write
A77000
heap
page read and write
1EE0000
heap
page read and write
2E14000
heap
page read and write
27B0000
heap
page read and write
41A000
unkown
page read and write
27F3000
heap
page read and write
419000
unkown
page write copy
215B000
heap
page read and write
27EE000
heap
page read and write
A77000
heap
page read and write
57E000
stack
page read and write
4040000
heap
page read and write
2EDA000
heap
page read and write
256A000
heap
page read and write
AA0000
heap
page read and write
240E000
stack
page read and write
A77000
heap
page read and write
7C390000
unkown
page read and write
4997000
heap
page read and write
27BF000
heap
page read and write
35CD000
stack
page read and write
1F0000
heap
page read and write
4A16000
heap
page read and write
4999000
heap
page read and write
780000
unkown
page read and write
400000
unkown
page readonly
20C2000
heap
page read and write
2059000
heap
page read and write
2E14000
heap
page read and write
45F9000
heap
page read and write
46F4000
heap
page read and write
7C341000
unkown
page execute read
401000
unkown
page execute read
41D000
unkown
page readonly
7C341000
unkown
page execute read
47C0000
heap
page read and write
7C38E000
unkown
page read and write
2BCE000
heap
page read and write
A74000
heap
page read and write
44F9000
heap
page read and write
1FD3000
heap
page read and write
4041000
heap
page read and write
402000
unkown
page readonly
410000
heap
page read and write
6A0000
heap
page read and write
7C37A000
unkown
page readonly
A74000
heap
page read and write
7C38B000
unkown
page read and write
22F6000
heap
page read and write
AC1000
heap
page read and write
680000
heap
page read and write
24A1000
heap
page read and write
4992000
heap
page read and write
5E0000
heap
page read and write
A77000
heap
page read and write
401000
unkown
page execute read
A77000
heap
page read and write
257D000
heap
page read and write
20CD000
heap
page read and write
7C392000
unkown
page readonly
19E000
stack
page read and write
A77000
heap
page read and write
AC1000
heap
page read and write
A77000
heap
page read and write
256B000
heap
page read and write
A77000
heap
page read and write
418000
unkown
page read and write
A77000
heap
page read and write
41B000
unkown
page readonly
6D3CB000
unkown
page read and write
6D9C5000
unkown
page read and write
A77000
heap
page read and write
415000
unkown
page readonly
A77000
heap
page read and write
A74000
heap
page read and write
2F5A000
heap
page read and write
A74000
heap
page read and write
AD0000
heap
page read and write
7C38E000
unkown
page write copy
2EB9000
heap
page read and write
1FF2000
heap
page read and write
A74000
heap
page read and write
510000
heap
page read and write
4994000
heap
page read and write
2DB7000
heap
page read and write
65E000
stack
page read and write
A77000
heap
page read and write
9C000
stack
page read and write
451F000
heap
page read and write
D29000
heap
page read and write
4994000
heap
page read and write
4992000
heap
page read and write
25B6000
heap
page read and write
2540000
heap
page read and write
19C000
stack
page read and write
2938000
heap
page read and write
403000
unkown
page readonly
2439000
heap
page read and write
A77000
heap
page read and write
4F0000
heap
page read and write
2780000
heap
page read and write
412000
unkown
page readonly
530000
heap
page read and write
423C000
heap
page read and write
7C390000
unkown
page read and write
7C390000
unkown
page read and write
D52000
heap
page read and write
246B000
direct allocation
page execute and read and write
7C392000
unkown
page readonly
41D000
unkown
page readonly
2E14000
heap
page read and write
4041000
heap
page read and write
2E6E000
heap
page read and write
499B000
heap
page read and write
20DD000
heap
page read and write
2D8CF000
direct allocation
page execute and read and write
20E9000
heap
page read and write
23AD000
heap
page read and write
27EE000
heap
page read and write
4994000
heap
page read and write
2059000
heap
page read and write
A77000
heap
page read and write
1F0000
heap
page read and write
9D000
stack
page read and write
600000
heap
page read and write
AB8000
heap
page read and write
2367000
heap
page read and write
A74000
heap
page read and write
2F5F000
heap
page read and write
19C000
stack
page read and write
1F50000
direct allocation
page execute and read and write
20E9000
heap
page read and write
A74000
heap
page read and write
4997000
heap
page read and write
25B6000
heap
page read and write
2042000
heap
page read and write
23B7000
heap
page read and write
27D2000
heap
page read and write
A77000
heap
page read and write
24E5000
heap
page read and write
2D14000
heap
page read and write
4130000
heap
page read and write
A77000
heap
page read and write
DA9000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
2089000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
2899000
heap
page read and write
A77000
heap
page read and write
B44000
heap
page read and write
2558000
heap
page read and write
A77000
heap
page read and write
4F0000
heap
page read and write
2373000
heap
page read and write
151F000
stack
page read and write
4838000
heap
page read and write
1F9F000
stack
page read and write
45F8000
heap
page read and write
A77000
heap
page read and write
255E000
heap
page read and write
24A6000
heap
page read and write
400000
unkown
page readonly
510000
heap
page read and write
4608000
heap
page read and write
25F8000
heap
page read and write
40C1000
heap
page read and write
2F02000
heap
page read and write
267D000
heap
page read and write
A77000
heap
page read and write
24FA000
heap
page read and write
1F90000
heap
page read and write
A74000
heap
page read and write
6D7BC000
unkown
page read and write
20E3000
heap
page read and write
294A000
heap
page read and write
45E000
heap
page read and write
4266000
heap
page read and write
A74000
heap
page read and write
25C4000
heap
page read and write
550000
heap
page read and write
7C341000
unkown
page execute read
20EC000
heap
page read and write
4992000
heap
page read and write
47E000
stack
page read and write
B08000
heap
page read and write
2CCA000
heap
page read and write
A77000
heap
page read and write
217E000
heap
page read and write
AB4000
heap
page read and write
20C5000
heap
page read and write
4999000
heap
page read and write
290D000
heap
page read and write
2CF0000
heap
page read and write
AB4000
heap
page read and write
57E000
stack
page read and write
2870000
heap
page read and write
7C38B000
unkown
page read and write
423C000
heap
page read and write
AD0000
heap
page read and write
2511000
heap
page read and write
206F000
stack
page read and write
2041000
heap
page read and write
19C000
stack
page read and write
2463000
direct allocation
page execute and read and write
A74000
heap
page read and write
4994000
heap
page read and write
A77000
heap
page read and write
1F0000
heap
page read and write
27FE000
heap
page read and write
27EC000
heap
page read and write
2933000
heap
page read and write
5AA000
heap
page read and write
2481000
heap
page read and write
27D8000
heap
page read and write
2E8B000
heap
page read and write
4997000
heap
page read and write
AC1000
heap
page read and write
7C37A000
unkown
page readonly
4255000
heap
page read and write
499B000
heap
page read and write
2DB5000
heap
page read and write
7C38E000
unkown
page read and write
343F000
stack
page read and write
7C38E000
unkown
page read and write
4AE000
stack
page read and write
2519000
heap
page read and write
2027000
heap
page read and write
2DB7000
heap
page read and write
A74000
heap
page read and write
2383000
heap
page read and write
39B0000
remote allocation
page read and write
AB4000
heap
page read and write
257B000
heap
page read and write
6D77A000
unkown
page readonly
2E15E000
stack
page read and write
290D000
heap
page read and write
84E000
stack
page read and write
27EF000
heap
page read and write
A77000
heap
page read and write
D55000
heap
page read and write
27EE000
heap
page read and write
21B0000
heap
page read and write
120000
heap
page read and write
400000
unkown
page readonly
23BD000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
1320000
heap
page read and write
247A000
heap
page read and write
40E000
unkown
page readonly
CF1000
heap
page read and write
423C000
heap
page read and write
4997000
heap
page read and write
A77000
heap
page read and write
23A0000
heap
page read and write
A74000
heap
page read and write
4839000
heap
page read and write
2E14000
heap
page read and write
A77000
heap
page read and write
9C000
stack
page read and write
255C000
heap
page read and write
7C38E000
unkown
page write copy
A77000
heap
page read and write
401000
unkown
page execute read
A77000
heap
page read and write
2871000
heap
page read and write
415000
unkown
page readonly
348E000
stack
page read and write
46BC000
heap
page read and write
A74000
heap
page read and write
3B30000
heap
page read and write
A77000
heap
page read and write
2C29000
heap
page read and write
7C390000
unkown
page read and write
7C341000
unkown
page execute read
2520000
heap
page read and write
A77000
heap
page read and write
2E160000
heap
page read and write
A74000
heap
page read and write
21CF000
stack
page read and write
A77000
heap
page read and write
1F0000
heap
page read and write
203A000
heap
page read and write
A77000
heap
page read and write
259F000
heap
page read and write
6D7C0000
unkown
page readonly
9C000
stack
page read and write
A74000
heap
page read and write
4232000
heap
page read and write
27FE000
heap
page read and write
290D000
heap
page read and write
2023000
heap
page read and write
6D7B8000
unkown
page readonly
2843000
heap
page read and write
AB8000
heap
page read and write
41D000
unkown
page readonly
2081000
heap
page read and write
19C000
stack
page read and write
290F000
heap
page read and write
A74000
heap
page read and write
7C340000
unkown
page readonly
414000
unkown
page execute and write copy
208F000
stack
page read and write
A77000
heap
page read and write
2377000
heap
page read and write
401000
unkown
page execute read
400000
unkown
page readonly
2620000
heap
page read and write
1FF000
stack
page read and write
7C340000
unkown
page readonly
9D000
stack
page read and write
291A000
heap
page read and write
203E000
heap
page read and write
620000
heap
page read and write
4980000
heap
page read and write
A74000
heap
page read and write
2059000
heap
page read and write
7C390000
unkown
page read and write
2043000
heap
page read and write
4241000
heap
page read and write
22D0000
heap
page read and write
2623000
heap
page read and write
201F000
heap
page read and write
20BF000
heap
page read and write
2363000
heap
page read and write
29C9000
heap
page read and write
21A0000
heap
page read and write
238F000
heap
page read and write
23A3000
heap
page read and write
7C340000
unkown
page readonly
A77000
heap
page read and write
41D000
unkown
page readonly
9D000
stack
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
415000
unkown
page readonly
1F80000
heap
page read and write
A77000
heap
page read and write
4999000
heap
page read and write
6D9C4000
unkown
page write copy
7C38E000
unkown
page read and write
4994000
heap
page read and write
4980000
heap
page read and write
27FE000
heap
page read and write
20E9000
heap
page read and write
2535000
heap
page read and write
6D3B0000
unkown
page readonly
403000
unkown
page readonly
5BE000
stack
page read and write
7C392000
unkown
page readonly
A77000
heap
page read and write
AB4000
heap
page read and write
4999000
heap
page read and write
20AF000
heap
page read and write
23AF000
heap
page read and write
208F000
stack
page read and write
147F000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
27FF000
heap
page read and write
1FF2000
heap
page read and write
7C341000
unkown
page execute read
207F000
stack
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
256C000
heap
page read and write
27F6000
heap
page read and write
2572000
heap
page read and write
4992000
heap
page read and write
7C37A000
unkown
page readonly
A74000
heap
page read and write
2541000
heap
page read and write
27FE000
heap
page read and write
2023000
heap
page read and write
44F8000
heap
page read and write
2D66000
heap
page read and write
2BCF000
heap
page read and write
20C0000
heap
page read and write
402000
unkown
page readonly
D5A000
heap
page read and write
4994000
heap
page read and write
4999000
heap
page read and write
402000
unkown
page readonly
19C000
stack
page read and write
A77000
heap
page read and write
1FEF000
heap
page read and write
419000
unkown
page write copy
7C38B000
unkown
page read and write
7C341000
unkown
page execute read
423C000
heap
page read and write
A74000
heap
page read and write
7DF000
stack
page read and write
D9B000
heap
page read and write
450000
heap
page read and write
62D000
heap
page read and write
A77000
heap
page read and write
2089000
heap
page read and write
6D9CE000
unkown
page read and write
2903000
heap
page read and write
2561000
heap
page read and write
AB4000
heap
page read and write
415000
unkown
page readonly
2003000
heap
page read and write
9C000
stack
page read and write
41AA000
heap
page read and write
2123000
heap
page read and write
42EE000
heap
page read and write
19C000
stack
page read and write
417000
unkown
page write copy
7C37A000
unkown
page readonly
23A4000
heap
page read and write
C41000
heap
page read and write
AB8000
heap
page read and write
4999000
heap
page read and write
2919000
heap
page read and write
3B0F000
stack
page read and write
402000
unkown
page readonly
6D7BB000
unkown
page write copy
2104000
heap
page read and write
4F0000
heap
page read and write
A77000
heap
page read and write
A74000
heap
page read and write
D5C000
heap
page read and write
20FF000
stack
page read and write
239C000
heap
page read and write
6D315000
unkown
page read and write
ADC000
heap
page read and write
4994000
heap
page read and write
24ED000
heap
page read and write
212D000
heap
page read and write
19C000
stack
page read and write
400000
unkown
page readonly
A77000
heap
page read and write
630000
heap
page read and write
417000
unkown
page write copy
4999000
heap
page read and write
1FF0000
heap
page read and write
2BAE000
heap
page read and write
419000
unkown
page write copy
A77000
heap
page read and write
401000
unkown
page execute read
7C392000
unkown
page readonly
1371000
heap
page read and write
2514000
heap
page read and write
400000
unkown
page readonly
A74000
heap
page read and write
870000
heap
page read and write
48F3000
heap
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
20CA000
heap
page read and write
A77000
heap
page read and write
7C392000
unkown
page readonly
4994000
heap
page read and write
5E0000
heap
page read and write
4828000
heap
page read and write
419000
unkown
page write copy
2E11A000
heap
page read and write
415000
unkown
page readonly
A74000
heap
page read and write
9C000
stack
page read and write
2364000
heap
page read and write
7C38E000
unkown
page write copy
705000
heap
page read and write
7C341000
unkown
page execute read
400000
unkown
page readonly
A77000
heap
page read and write
7F0000
heap
page read and write
A77000
heap
page read and write
19E000
stack
page read and write
4973000
heap
page read and write
1F7E000
stack
page read and write
4FD000
heap
page read and write
160000
heap
page read and write
2D4E000
stack
page read and write
4A17000
heap
page read and write
4994000
heap
page read and write
6D314000
unkown
page readonly
AC6000
heap
page read and write
7C38B000
unkown
page read and write
6AF000
stack
page read and write
243C000
direct allocation
page execute and read and write
499F000
heap
page read and write
2A57000
heap
page read and write
400000
unkown
page readonly
4F57000
heap
page read and write
7C392000
unkown
page readonly
10A0000
heap
page read and write
2AE5000
heap
page read and write
2343000
heap
page read and write
49B3000
heap
page read and write
499B000
heap
page read and write
4980000
heap
page read and write
D5E000
heap
page read and write
2898000
heap
page read and write
C2C000
heap
page read and write
D77000
heap
page read and write
B77000
heap
page read and write
2C7B000
heap
page read and write
C3D000
heap
page read and write
7C38B000
unkown
page read and write
38F6000
heap
page read and write
4997000
heap
page read and write
A77000
heap
page read and write
419000
unkown
page write copy
2E70000
heap
page read and write
A81000
heap
page read and write
4980000
heap
page read and write
3A0E000
stack
page read and write
2E14000
heap
page read and write
20E9000
heap
page read and write
A77000
heap
page read and write
7C390000
unkown
page read and write
4980000
heap
page read and write
2CA5000
heap
page read and write
257E000
heap
page read and write
7C392000
unkown
page readonly
7C341000
unkown
page execute read
4130000
heap
page read and write
A77000
heap
page read and write
400000
unkown
page readonly
401000
unkown
page execute and write copy
2550000
heap
page read and write
401000
unkown
page execute read
A77000
heap
page read and write
2526000
heap
page read and write
2CA0000
heap
page read and write
25B6000
heap
page read and write
1F7E000
stack
page read and write
7C392000
unkown
page readonly
217E000
heap
page read and write
21DD000
heap
page read and write
9C000
stack
page read and write
4997000
heap
page read and write
253E000
heap
page read and write
1FED000
heap
page read and write
293E000
heap
page read and write
2EAC000
heap
page read and write
AC1000
heap
page read and write
9C000
stack
page read and write
47B0000
heap
page read and write
5C0000
heap
page read and write
AC1000
heap
page read and write
23A1000
heap
page read and write
A77000
heap
page read and write
4992000
heap
page read and write
2BE1000
heap
page read and write
41D000
unkown
page readonly
7C392000
unkown
page readonly
400000
unkown
page readonly
A74000
heap
page read and write
B1F000
heap
page read and write
401000
unkown
page execute read
510000
heap
page read and write
24A4000
heap
page read and write
4999000
heap
page read and write
A74000
heap
page read and write
402000
unkown
page readonly
2E14000
heap
page read and write
7C340000
unkown
page readonly
2EAB000
heap
page read and write
4680000
heap
page read and write
A77000
heap
page read and write
2E22000
heap
page read and write
256D000
heap
page read and write
440000
heap
page read and write
28BA000
heap
page read and write
47E000
stack
page read and write
99F000
stack
page read and write
42E7000
heap
page read and write
401000
unkown
page execute read
257B000
heap
page read and write
AC1000
heap
page read and write
256C000
heap
page read and write
4488000
heap
page read and write
403000
unkown
page readonly
23B7000
heap
page read and write
132E000
heap
page read and write
4992000
heap
page read and write
252A000
heap
page read and write
A77000
heap
page read and write
2560000
heap
page read and write
309D000
heap
page read and write
283C000
heap
page read and write
2425000
heap
page read and write
A77000
heap
page read and write
2B4F000
heap
page read and write
E57000
heap
page read and write
401000
unkown
page execute read
6D3CC000
unkown
page readonly
6D311000
unkown
page execute read
A77000
heap
page read and write
A77000
heap
page read and write
2F59000
heap
page read and write
A77000
heap
page read and write
4728000
heap
page read and write
3065000
heap
page read and write
2E8A000
heap
page read and write
9C000
stack
page read and write
6D0000
heap
page read and write
A77000
heap
page read and write
A74000
heap
page read and write
2DB7000
heap
page read and write
A74000
heap
page read and write
5A0000
heap
page read and write
4994000
heap
page read and write
1E0000
heap
page read and write
790000
direct allocation
page execute and read and write
251C000
heap
page read and write
7C392000
unkown
page readonly
20F5000
heap
page read and write
290A000
heap
page read and write
401000
unkown
page execute read
A77000
heap
page read and write
21BD000
heap
page read and write
46E000
stack
page read and write
401000
unkown
page execute read
27BD000
heap
page read and write
2930000
heap
page read and write
401000
unkown
page execute read
2561000
heap
page read and write
4997000
heap
page read and write
2A71000
heap
page read and write
7C38B000
unkown
page read and write
A77000
heap
page read and write
A77000
heap
page read and write
61E000
stack
page read and write
A77000
heap
page read and write
3F20000
heap
page read and write
520000
heap
page read and write
423D000
heap
page read and write
4992000
heap
page read and write
A74000
heap
page read and write
1FD0000
heap
page read and write
1180000
heap
page read and write
7C38E000
unkown
page write copy
7C392000
unkown
page readonly
768000
heap
page read and write
A77000
heap
page read and write
2EA1000
heap
page read and write
4992000
heap
page read and write
23A6000
heap
page read and write
25F8000
heap
page read and write
A77000
heap
page read and write
4994000
heap
page read and write
7C392000
unkown
page readonly
2E58000
heap
page read and write
1FF1000
heap
page read and write
419000
unkown
page write copy
402000
unkown
page readonly
2D5A000
heap
page read and write
5D0000
heap
page read and write
AB8000
heap
page read and write
27C1000
heap
page read and write
1477000
heap
page read and write
2D66000
heap
page read and write
252D000
heap
page read and write
2DB7000
heap
page read and write
2561000
heap
page read and write
A81000
heap
page read and write
A77000
heap
page read and write
27B8000
heap
page read and write
419000
unkown
page write copy
2A4B000
heap
page read and write
241F000
stack
page read and write
215C000
heap
page read and write
4407000
heap
page read and write
371E000
stack
page read and write
A77000
heap
page read and write
54E000
stack
page read and write
400000
unkown
page readonly
499F000
heap
page read and write
A77000
heap
page read and write
49F6000
heap
page read and write
A77000
heap
page read and write
108F000
unkown
page execute and write copy
5A0000
heap
page read and write
252C000
heap
page read and write
1F0000
heap
page read and write
2D66000
heap
page read and write
2573000
heap
page read and write
7C37A000
unkown
page readonly
4992000
heap
page read and write
A77000
heap
page read and write
2343000
heap
page read and write
A74000
heap
page read and write
7C37A000
unkown
page readonly
2E71000
heap
page read and write
463C000
heap
page read and write
20E9000
heap
page read and write
D94000
heap
page read and write
C22000
heap
page read and write
419000
unkown
page write copy
7C390000
unkown
page read and write
A80000
heap
page read and write
1AE000
stack
page read and write
5A0000
heap
page read and write
253D000
heap
page read and write
4992000
heap
page read and write
AC1000
heap
page read and write
400000
unkown
page readonly
28E10000
direct allocation
page execute and read and write
41D000
unkown
page readonly
A77000
heap
page read and write
263C000
heap
page read and write
400000
unkown
page readonly
There are 1896 hidden memdumps, click here to show them.