IOC Report
dada.exe

loading gif

Files

File Path
Type
Category
Malicious
dada.exe
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
initial sample
malicious
C:\Windows\SysWOW64\msinfo.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
malicious
C:\Windows\SysWOW64\ntadmd.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
malicious
C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0fefae3c-9d1f-4258-a2df-0c4ae043f1f1.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\20956927-d92b-417e-8065-370c37b2f305.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\2f9832f0-b1ba-4f63-a7a4-988f08d63c07.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\3d40f514-e79c-40f8-a308-4b8c7ee805d4.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\3d67ec87-0f53-40c4-b600-2ea0770a56a5.tmp
JSON data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\573202ca-b3e3-415f-a300-f4ae5cdc506e.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\5a92a9d6-202e-412e-810b-fba7a4dde8b8.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\69892821-6101-41bd-9fea-037f31c67ab1.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\9b6df0f2-d9b0-4d7f-9289-ccd2f21bdbdf.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\3bc55f50-d23e-48a7-9021-c5b74e69167d.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-6606A324-C98.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-6606A330-23F0.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-6606A338-21D4.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\00311916-a58d-4ba9-af69-146b647812c2.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\0afaf70d-ab67-4561-acc3-7025ca360a30.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\3cc96874-7546-4189-8b53-e8bf6e66d9a9.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\52697c50-dfca-49df-8590-00ce2898a9f7.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\573e187c-cd99-4ac0-87cd-76ddfa3fa8cf.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\0bfca6cd-e603-4f17-8176-2b4f49f0151e.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\459c5378-4b1d-4c12-a578-bdb6b671e58d.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\4d128460-8b72-45cb-b3bb-bd99a9ad3dd2.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\4e6005eb-496d-4fb3-a6c6-df5fd35676e2.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\844cdd0a-5e6b-4990-86fe-381d2b5ef531.tmp
JSON data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF31aad.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF325d8.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF38fed.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF3bd46.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF41d58.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF3757f.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\65a1e6ec-8097-455c-8831-becafc682299.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\6e59e708-b0ce-4645-aff1-900f2231edbe.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\9c9d8f7f-17e1-42c9-9636-cfd754f81083.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF325d8.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 9, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 9
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\af9205dc-576c-45c6-ab5d-dd6ea6e4e63e.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json
ASCII text, with very long lines (3951), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\e72009ac-1b91-4350-8e95-481eeb640ce2.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\e737583c-097c-4c7a-8426-277e0039931c.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF309e4.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF30ca3.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF33317.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF33838.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3399f.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF339af.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF357d5.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF357e5.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF357f5.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF37f43.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3f638.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF41d48.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF47b56.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\c7a523ff-f9a3-4374-816f-2121f9f0c799.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\e917ff1e-ac5f-4aae-8d21-bfbb756cdd0e.tmp
JSON data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\f170eee1-d000-472c-b0a8-c0d3ebff069c.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{DE0D0E6F-EDBD-11EE-8C2C-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{E2DABCB2-EDBD-11EE-8C2C-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{DE0D0E71-EDBD-11EE-8C2C-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{E2DABCB4-EDBD-11EE-8C2C-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{D63CFB3C-EDBD-11EE-8C2C-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{D63CFB3E-EDBD-11EE-8C2C-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\favicon[1].ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
C:\Users\user\AppData\Local\Temp\059eeb41-a517-4c3b-a4cb-af704d9d9fb1.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Temp\8b5b7123-fe53-4e0e-9e6d-2aa8ddf16827.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Temp\cv_debug.log
JSON data
dropped
C:\Users\user\AppData\Local\Temp\d1f0b8a2-3a3f-481c-894a-9b0f364439da.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\d308514b-70c2-4630-bb79-18ed18958067.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 276634
dropped
C:\Users\user\AppData\Local\Temp\f13a634a-d0aa-4982-9a8f-ee79d03ea494.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\af\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\am\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ar\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\az\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\be\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\bg\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\bn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ca\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\cs\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\cy\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\da\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\de\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\el\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\en\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\en_CA\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\en_GB\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\en_US\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\es\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\es_419\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\et\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\eu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\fa\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\fi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\fil\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\fr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\fr_CA\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\gl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\gu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\hi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\hr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\hu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\hy\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\id\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\is\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\it\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\iw\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ja\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ka\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\kk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\km\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\kn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ko\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\lo\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\lt\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\lv\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ml\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\mn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\mr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ms\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\my\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ne\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\nl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\no\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\pa\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\pl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\pt_BR\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\pt_PT\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ro\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ru\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\si\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\sk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\sl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\sr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\sv\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\sw\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ta\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\te\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\th\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\tr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\uk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\ur\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\vi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\zh_CN\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\zh_HK\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\zh_TW\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_locales\zu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\_metadata\verified_contents.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\dasherSettingSchema.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\eventpage_bin_prod.js
ASCII text, with very long lines (3422)
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\manifest.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\CRX_INSTALL\page_embed_script.js
ASCII text
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_1399300811\d1f0b8a2-3a3f-481c-894a-9b0f364439da.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_450293302\CRX_INSTALL\_metadata\verified_contents.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_450293302\CRX_INSTALL\content.js
Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_450293302\CRX_INSTALL\content_new.js
Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_450293302\CRX_INSTALL\manifest.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir3224_450293302\f13a634a-d0aa-4982-9a8f-ee79d03ea494.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\~DF5212CEBD7E0A5D4A.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF5C8524018CB809F3.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF97C7E5C7A1429635.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFAC70E66B1F484FAE.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFB1E3951E4824692D.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFF2092B55F969AAC8.TMP
data
dropped
There are 214 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\dada.exe
"C:\Users\user\Desktop\dada.exe"
malicious
C:\Windows\SysWOW64\msinfo.exe
"C:\Windows\system32\msinfo.exe"
malicious
C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome
malicious
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1096 CREDAT:17410 /prefetch:2
malicious
C:\Windows\SysWOW64\msinfo.exe
"C:\Windows\SysWOW64\msinfo.exe"
malicious
C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome
malicious
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:9040 CREDAT:9474 /prefetch:2
malicious
C:\Windows\SysWOW64\msinfo.exe
"C:\Windows\SysWOW64\msinfo.exe"
malicious
C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome
malicious
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:7228 CREDAT:9474 /prefetch:2
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe" --from-ie-to-edge=3 --ie-frame-hwnd=2045c
C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe
"C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --from-ie-to-edge=3 --ie-frame-hwnd=2045c
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2184,i,15901562358394142804,14852114464454871956,262144 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --from-ie-to-edge=3 --ie-frame-hwnd=2045c --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2040,i,7179378143065344435,10860389413713115392,262144 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6064 --field-trial-handle=2040,i,7179378143065344435,10860389413713115392,262144 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe" --from-ie-to-edge=3 --ie-frame-hwnd=10532
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe" --from-ie-to-edge=3 --ie-frame-hwnd=10532
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --from-ie-to-edge=3 --ie-frame-hwnd=10532
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2088,i,15221998807408934031,10471475139607618472,262144 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe" --from-ie-to-edge=3 --ie-frame-hwnd=30508
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe" --from-ie-to-edge=3 --ie-frame-hwnd=30508
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --from-ie-to-edge=3 --ie-frame-hwnd=30508
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1912 --field-trial-handle=2036,i,14915586609184742018,8314552712924505870,262144 /prefetch:3
There are 15 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://search.chol.com/favicon.ico
unknown
http://www.mercadolivre.com.br/
unknown
http://www.merlin.com.pl/favicon.ico
unknown
http://suche.aol.de/;
unknown
http://www.dailymail.co.uk/
unknown
http://search.yahoo.co.jp9
unknown
http://fr.search.yahoo.com/
unknown
https://docs.google.com/
unknown
http://in.search.yahoo.com/
unknown
http://img.shopzilla.com/shopzilla/shopzilla.ico
unknown
http://xml-us.amznxslt.com/onca/xml?Service=AWSECommerceService&Version=2008-06-26&Operation=ItemSea
unknown
http://search.msn.co.jp/results.aspx?q=%7BsearchTerms%7D&FORM=CBPW
unknown
http://search.aol.com/Y
unknown
http://search.msn.co.jp/results.aspx?q=%7BsearchTerms%7D&FORM=AS5
unknown
http://search.msn.co.jp/results.aspx?q=%7BsearchTerms%7D&FORM=AS6
unknown
http://www.alarabiya.net/U
unknown
http://www.neckermann.de/favicon.icoC
unknown
http://msk.afisha.ru/
unknown
http://www.etmall.com.tw/favicon.icoM
unknown
http://sads.myspace.com/J
unknown
http://busca.igbusca.com.br//app/static/images/favicon.ico
unknown
http://www.ya.com/favicon.ico
unknown
http://search.cn.yahoo.com/Z
unknown
http://www.etmall.com.tw/favicon.ico
unknown
http://www.amazon.co.jp/%
unknown
http://it.search.dada.net/favicon.ico
unknown
http://search.hanafos.com/favicon.ico
unknown
http://www.merlin.com.pl/B
unknown
http://cgi.search.biglobe.ne.jp/favicon.ico
unknown
https://drive-daily-2.corp.google.com/
unknown
http://search.msn.co.jp/results.aspx?q=
unknown
http://buscar.ozu.es/
unknown
http://www.shopzilla.com/:
unknown
http://busca.igbusca.com.br/L
unknown
https://drive-daily-5.corp.google.com/
unknown
http://search.live.com/results.aspx?FORM=SOLTDF&q=
unknown
http://www.google.it/
unknown
http://search.auction.co.kr/
unknown
http://www.amazon.de/
unknown
http://sads.myspace.com/
unknown
http://list.taobao.com/browse/search_visual.htm?n=15&q=
unknown
http://www.pchome.com.tw/favicon.ico
unknown
http://browse.guardian.co.uk/favicon.ico
unknown
https://chrome.google.com/webstore/
unknown
http://google.pchome.com.tw/
unknown
http://list.taobao.com/browse/search_visual.htm?n=15&q=
unknown
http://www.rambler.ru/favicon.ico
unknown
http://uk.search.yahoo.com/
unknown
http://www.ozu.es/favicon.ico
unknown
http://search.sify.com/
unknown
http://openimage.interpark.com/interpark.ico
unknown
http://search.yahoo.co.jp/favicon.ico
unknown
http://www.gmarket.co.kr/
unknown
http://search.lycos.com/favicon.icoW
unknown
http://search.nifty.com/
unknown
http://www.google.si/
unknown
http://www.soso.com/
unknown
http://www.univision.com/favicon.icoc
unknown
http://busca.orange.es/
unknown
http://cnweb.search.live.com/results.aspx?q=
unknown
http://www.target.com/
unknown
http://search.orange.co.uk/favicon.ico
unknown
http://www.iask.com/
unknown
http://search.centrum.cz/favicon.ico
unknown
http://service2.bfast.com/
unknown
http://ariadna.elmundo.es/
unknown
http://www.sify.com/favicon.ico:
unknown
http://www.news.com.au/favicon.ico
unknown
http://www.cdiscount.com/
unknown
http://www.tiscali.it/favicon.ico
unknown
http://it.search.yahoo.com/
unknown
http://www.ceneo.pl/favicon.ico
unknown
http://www.servicios.clarin.com/
unknown
http://search.daum.net/favicon.ico
unknown
http://www.kkbox.com.tw/
unknown
http://search.goo.ne.jp/favicon.ico
unknown
http://search.msn.com/results.aspx?q=
unknown
http://list.taobao.com/
unknown
http://www.taobao.com/favicon.ico
unknown
http://www.etmall.com.tw/
unknown
http://ie.search.yahoo.com/os?command=
unknown
http://www.cnet.com/favicon.ico
unknown
http://www.linternaute.com/favicon.ico
unknown
http://www.amazon.co.uk/
unknown
http://www.cdiscount.com/favicon.ico
unknown
http://www.orange.fr/h
unknown
http://www.asharqalawsat.com/favicon.ico
unknown
http://www.google.fr/
unknown
http://ie8.ebay.com/open
unknown
http://search.live.com/results.aspx?FORM=IEFM1&q=
unknown
http://search.gismeteo.ru/
unknown
http://www.rtl.de/
unknown
http://asp.usatoday.com/favicon.icoi
unknown
http://www.soso.com/favicon.ico
unknown
http://www.univision.com/favicon.ico
unknown
http://search.ipop.co.kr/
unknown
http://www.auction.co.kr/auction.ico
unknown
http://www.orange.fr/
unknown
http://video.globo.com/favicon.ico
unknown
http://www.google.co.uk/
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
chrome.cloudflare-dns.com
162.159.61.3
googlehosted.l.googleusercontent.com
172.253.122.132
sni1gl.wpc.nucdn.net
152.195.19.97
clients2.googleusercontent.com
unknown

IPs

IP
Domain
Country
Malicious
162.159.61.3
chrome.cloudflare-dns.com
United States
239.255.255.250
unknown
Reserved
152.195.19.97
sni1gl.wpc.nucdn.net
United States
172.253.122.132
googlehosted.l.googleusercontent.com
United States
172.64.41.3
unknown
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
internet
malicious
HKEY_CURRENT_USER\SOFTWARE\WinRAR SFX
C%%Windows%system32
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing
NTPMigrationVer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListXMLVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListXMLVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
SoftwareFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
VendorId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
DeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
SubSysId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
Revision
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListDomainAttributeSet
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
StaleCompatCache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\VersionManager
FirstCheckForUpdateLowDateTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\VersionManager
FirstCheckForUpdateHighDateTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
CompatibilityFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
HomepagesUpgradeVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
SecuritySafe
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1e\417C44EB
@ieframe.dll,-12512
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\AdminActive
{D63CFB3C-EDBD-11EE-8C2C-ECF4BB570DC9}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
SearchBandMigrationVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
FullScreen
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery
AdminActive
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
SearchScopesUpgradeVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
DefaultScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
2BB20B33B4171CDAAB6469225AE6A582ED33D7B488
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435B-BC74-9C25C1C588A9}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MAO Settings
DiscardLoadTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
DisplayName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconURLFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconPath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
URL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURLFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
KnownProvidersUpgradeTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{00021493-0000-0000-C000-000000000046}\Enum
Implementing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{00021494-0000-0000-C000-000000000046}\Enum
Implementing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
DownloadRetries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion
NextUpdateDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
2BB20B33B4171CDAAB6469225AE6A582ED33D7B488
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LatestUpsellAttemptedSessionTime
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LastStubPath
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0034-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0034-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0041-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0052-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0054-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0054-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0055-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0057-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0057-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0059-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0059-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0061-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0061-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0062-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0062-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0064-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0065-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0065-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0072-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0072-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0072-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0072-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0074-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0091-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0092-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0092-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0092-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0092-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0093-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0093-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0098-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0098-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0048-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0048-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0049-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0049-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0051-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0051-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0052-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0053-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0053-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0054-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0054-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0054-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0054-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0055-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0055-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0056-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0056-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0057-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0057-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0058-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0058-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0059-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0059-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0060-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0060-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0061-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0061-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0062-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0062-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0062-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0062-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0063-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0063-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0064-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0064-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0064-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0064-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0065-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0065-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0066-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0067-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0068-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0068-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0069-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0069-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0070-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0070-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0070-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0070-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0071-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0071-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0072-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0072-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0073-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0073-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0074-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0075-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0075-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0076-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0077-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0077-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0078-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0078-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0079-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0080-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0080-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0080-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
UpsellDisabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
QuietExpirationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
dgiklkfkllikcanfonkcabmbdfmgleag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
fikbjbembnmfhppjfnmfkahdhfohhjmg
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ghbmnnjooekpmoecnnnilnnbdlolhkhi
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
iglcjdemknebjbklcgkfaebgojjphkec
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ihmafllikibpmigkcoadcmckbfhibefp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jdiccldimpdaibmpdkjnbmckianbfold
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ncbjelpjchkpbikbpkcchkhkblodoama
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
prefs.preference_reset_time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
dgiklkfkllikcanfonkcabmbdfmgleag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
fikbjbembnmfhppjfnmfkahdhfohhjmg
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ghbmnnjooekpmoecnnnilnnbdlolhkhi
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
iglcjdemknebjbklcgkfaebgojjphkec
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ihmafllikibpmigkcoadcmckbfhibefp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jdiccldimpdaibmpdkjnbmckianbfold
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jmjflgjpcpepeafmmgdpfkogkghcpiha
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ncbjelpjchkpbikbpkcchkhkblodoama
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
media.cdm.origin_data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.reporting
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
media.storage_id_salt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_startup_urls
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.prompt_wave
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.account_id
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.prompt_seed
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_homepage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.last_username
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
default_search_provider_data.template_url_data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
safebrowsing.incidents_sent
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
pinned_tabs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
search_provider_overrides
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.last_account_id
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.prompt_version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
session.startup_urls
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
session.restore_on_startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_default_search
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
prefs.preference_reset_time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
browser.show_home_button
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
homepage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
homepage_is_newtabpage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
lastrun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
QuietExpirationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
lastrun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
QuietExpirationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
lastrun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\Active
{DE0D0E6F-EDBD-11EE-8C2C-ECF4BB570DC9}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery
Active
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\$RECYCLE.BIN
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\ProgramData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\ProgramData\Microsoft\Windows\DRM
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\Favorites
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\LocalLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\History
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\WER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Feeds
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Temp\Low
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\PlayReady
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Content
CachePrefix
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Content
CacheVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Content
CacheLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Cookies
CachePrefix
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Cookies
CacheVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Cookies
CacheLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\History
CachePrefix
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\History
CacheVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\History
CacheLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry
OperationalData
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LatestUpsellAttemptedSessionTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\Active
{E2DABCB2-EDBD-11EE-8C2C-ECF4BB570DC9}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery
Active
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery
Active
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LatestUpsellAttemptedSessionTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
There are 693 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
17AD6910000
unkown
page read and write
1D8E2A70000
unkown
page read and write
17AD6F59000
unkown
page read and write
17AD6F97000
unkown
page read and write
1D8E2C00000
unkown
page read and write
404000
unkown
page readonly
17AD8470000
unkown
page read and write
17AD85D0000
unkown
page read and write
425000
unkown
page read and write
1B77C5C0000
unkown
page read and write
17AD6BD2000
heap
page read and write
1B77C2A0000
unkown
page read and write
1D8E2920000
unkown
page read and write
17AD5880000
unkown
page read and write
26632625000
heap
page read and write
17AD6FAB000
unkown
page read and write
20E5059000
unkown
page read and write
17AD6D02000
heap
page read and write
17AD5D73000
heap
page read and write
1B77C230000
unkown
page read and write
1B778351000
unkown
page readonly
1B779882000
unkown
page read and write
530000
heap
page read and write
1D8E2AF0000
unkown
page read and write
17AD8330000
unkown
page read and write
51E000
heap
page read and write
1D8E2BC0000
unkown
page read and write
46A000
heap
page read and write
1B77AD65000
unkown
page read and write
307B9FE000
stack
page read and write
13022A8000
unkown
page read and write
A370AFC000
unkown
page read and write
1B77A95A000
unkown
page read and write
A370BFB000
unkown
page read and write
C8B24FE000
unkown
page readonly
1B77ACBE000
unkown
page read and write
1D8E29E0000
unkown
page read and write
17AD58B5000
heap
page read and write
2070000
heap
page read and write
403000
unkown
page read and write
402000
unkown
page readonly
1B77C0F0000
unkown
page read and write
210BDE88000
heap
page read and write
1D8E2910000
unkown
page read and write
17AD5D70000
heap
page read and write
1B77C1B0000
unkown
page read and write
5B0000
heap
page read and write
26632646000
heap
page read and write
51E000
stack
page read and write
1B77AD3E000
unkown
page read and write
21016D02000
heap
page read and write
1D8E2B20000
unkown
page read and write
17AD8460000
unkown
page read and write
20E5069000
unkown
page read and write
8AD6EFE000
stack
page read and write
1D8E0F20000
unkown
page read and write
210BF802000
heap
page read and write
17AD6CD6000
heap
page read and write
130229A000
unkown
page read and write
1B77C360000
unkown
page read and write
1B77A600000
unkown
page read and write
1B77A650000
unkown
page read and write
17AD83B0000
unkown
page read and write
1D8E0DAC000
unkown
page read and write
A3709FD000
unkown
page read and write
17AD6752000
unkown
page read and write
17AD6CCC000
heap
page read and write
400000
unkown
page readonly
17AD6FB6000
heap
page read and write
2663263C000
heap
page read and write
17AD6768000
unkown
page read and write
1B77C130000
unkown
page read and write
17AD6CB0000
remote allocation
page read and write
17AD6FC3000
heap
page read and write
401000
unkown
page execute read
17AD8250000
unkown
page read and write
1D8E0EB2000
unkown
page read and write
1B77C3B0000
unkown
page read and write
307B5A7000
stack
page read and write
1D8E0F30000
unkown
page read and write
401000
unkown
page execute and read and write
17AD8440000
unkown
page read and write
17AD3F4B000
heap
page read and write
17AD8580000
unkown
page read and write
3A8F000
stack
page read and write
2020000
heap
page read and write
1B77C300000
unkown
page read and write
1D8E2A80000
unkown
page read and write
710000
heap
page read and write
1B77C151000
unkown
page read and write
1B77C2D0000
unkown
page read and write
45E000
stack
page read and write
1D8E2C50000
unkown
page read and write
1B777DC0000
unkown
page read and write
1D8E2B80000
unkown
page read and write
2074000
heap
page read and write
17AD6BAA000
heap
page read and write
1B779C30000
unkown
page readonly
17AD6EE3000
unkown
page read and write
1B77C060000
unkown
page read and write
26634202000
heap
page read and write
17AD6D32000
heap
page read and write
13021A0000
stack
page read and write
401000
unkown
page execute read
424000
unkown
page write copy
A370CFE000
unkown
page read and write
1D8E0460000
unkown
page read and write
C8B1FFE000
stack
page read and write
17AD3F87000
heap
page read and write
17AD85F0000
trusted library section
page read and write
398E000
stack
page read and write
26632613000
heap
page read and write
21016C45000
heap
page read and write
20E58FD000
unkown
page read and write
17AD8361000
unkown
page read and write
1B77A7E0000
unkown
page read and write
307BCFE000
unkown
page readonly
1D8DE6F3000
heap
page read and write
17AD8560000
unkown
page read and write
17AD6FB6000
heap
page read and write
1D8E36F0000
unkown
page read and write
17AD66F2000
unkown
page read and write
17AD84C0000
unkown
page read and write
A3703BD000
unkown
page read and write
17AD6F61000
unkown
page read and write
17AD6790000
unkown
page read and write
210BDE3B000
heap
page read and write
1B77C370000
unkown
page read and write
A3703B5000
unkown
page read and write
17AD5D30000
unkown
page read and write
1D8E2A11000
unkown
page read and write
1B777E20000
unkown
page read and write
21016B90000
heap
page read and write
A3706FE000
unkown
page read and write
472000
heap
page read and write
17AD5C20000
unkown
page readonly
1D8E0FA0000
unkown
page read and write
1D8E2BF0000
unkown
page read and write
13022A2000
unkown
page read and write
17AD8310000
unkown
page read and write
20E57FD000
unkown
page read and write
650000
heap
page read and write
1B777E70000
unkown
page readonly
1B77C180000
unkown
page read and write
17AD6770000
unkown
page read and write
8AD6CFE000
stack
page read and write
17AD6730000
unkown
page read and write
43B000
heap
page read and write
8AD73FE000
unkown
page readonly
1B77C260000
unkown
page read and write
17AD6F97000
unkown
page read and write
1B77A7A0000
unkown
page read and write
1B7798C2000
unkown
page read and write
402000
unkown
page readonly
21016B80000
heap
page readonly
A3703C5000
unkown
page read and write
13027FB000
unkown
page read and write
17AD6BC3000
heap
page read and write
17AD82A0000
unkown
page read and write
C8B1EFE000
unkown
page readonly
1B77AD93000
unkown
page read and write
13028FB000
unkown
page read and write
17AD67E0000
unkown
page read and write
210BDD80000
heap
page read and write
17AD8490000
unkown
page read and write
1D8DE77A000
heap
page read and write
1D8E38D0000
unkown
page read and write
13031FD000
unkown
page read and write
1D8DE782000
heap
page read and write
1D8E0010000
unkown
page read and write
17AD6BB4000
heap
page read and write
1D8E2A40000
unkown
page read and write
1D8E2AC0000
unkown
page read and write
1B7798E5000
heap
page read and write
266325D0000
heap
page readonly
1B77C030000
unkown
page read and write
17AD6BAE000
heap
page read and write
1B77C020000
unkown
page read and write
1D8E0C80000
unkown
page read and write
1D8E0025000
heap
page read and write
1D8E2B30000
unkown
page read and write
C8B22FE000
unkown
page readonly
17AD6BC8000
heap
page read and write
1B77C1E0000
unkown
page read and write
1D8E2BE0000
unkown
page read and write
1D8E29F1000
unkown
page read and write
17AD5C30000
unkown
page readonly
17AD6BA7000
heap
page read and write
1B779760000
unkown
page read and write
1D8DE670000
unkown
page read and write
950000
heap
page read and write
1D8E28C0000
unkown
page read and write
17AD6D37000
heap
page read and write
17AD6D2E000
heap
page read and write
A3707FA000
unkown
page read and write
210BDF02000
heap
page read and write
1B77C220000
unkown
page read and write
1D8E2B60000
unkown
page read and write
1B777EF3000
heap
page read and write
17AD5DE0000
unkown
page write copy
1B77C161000
unkown
page read and write
401000
unkown
page execute read
1D8E0E34000
unkown
page read and write
1D8E0F50000
unkown
page read and write
21016C84000
heap
page read and write
17AD3F8B000
heap
page read and write
17AD8450000
unkown
page read and write
20E56FA000
unkown
page read and write
658000
heap
page read and write
210BDE2F000
heap
page read and write
1B777EE2000
heap
page read and write
1D8E1020000
unkown
page read and write
1D8E04E0000
heap
page read and write
1B77AD5F000
unkown
page read and write
1D8E2A30000
unkown
page read and write
1D8E001E000
unkown
page read and write
17AD84B0000
unkown
page read and write
19D000
stack
page read and write
1B77C040000
unkown
page read and write
1F0000
heap
page read and write
51E000
stack
page read and write
17AD3E96000
heap
page read and write
400000
unkown
page readonly
1D8DE7B0000
heap
page read and write
1D8E2BB0000
unkown
page read and write
18C000
stack
page read and write
1D8E2900000
unkown
page read and write
400000
unkown
page readonly
1D8DE6CB000
heap
page read and write
55E000
stack
page read and write
1B77CE40000
unkown
page read and write
17AD42A1000
unkown
page readonly
17AD6A4A000
heap
page read and write
17AD6F85000
unkown
page read and write
A370EFC000
unkown
page read and write
1B77C0D0000
unkown
page read and write
17AD6DA0000
heap
page read and write
1B77AD7F000
unkown
page read and write
17AD6808000
unkown
page read and write
17AD82F0000
unkown
page read and write
1D8E2A50000
unkown
page read and write
17AD6930000
unkown
page read and write
307C3FC000
stack
page read and write
17AD6F74000
unkown
page read and write
1D8E0D89000
unkown
page read and write
17AD87E0000
unkown
page read and write
1B77C330000
unkown
page read and write
35AE000
stack
page read and write
401000
unkown
page execute read
494000
heap
page read and write
1D8E2E70000
unkown
page read and write
84F000
stack
page read and write
17AD65F0000
unkown
page read and write
307C0FE000
unkown
page readonly
307C4FE000
unkown
page readonly
17AD8280000
unkown
page read and write
17AD6FC1000
heap
page read and write
17AD6BC3000
heap
page read and write
1D8E1010000
unkown
page read and write
1D8DEB51000
unkown
page readonly
210BDE81000
heap
page read and write
3D0C000
stack
page read and write
C8B21FE000
stack
page read and write
8AD6FFE000
unkown
page readonly
C8B15D7000
stack
page read and write
1B77C050000
unkown
page read and write
8AD71FE000
unkown
page readonly
404000
unkown
page readonly
1D8E2A01000
unkown
page read and write
1B777F91000
heap
page read and write
307BAFE000
unkown
page readonly
17AD3F68000
heap
page read and write
17AD4441000
unkown
page readonly
1D8E2C20000
unkown
page read and write
402000
unkown
page readonly
1D8E2C60000
unkown
page read and write
1D8E2B50000
unkown
page read and write
1B779780000
unkown
page read and write
3C0C000
stack
page read and write
17AD6FC0000
heap
page read and write
17AD8570000
unkown
page read and write
17AD8530000
unkown
page read and write
1D8DE580000
unkown
page readonly
1B77C2B0000
unkown
page read and write
1D8DE77E000
heap
page read and write
1D8E0EC0000
unkown
page read and write
21016C13000
heap
page read and write
1E5B0000
remote allocation
page read and write
1B77C1D0000
unkown
page read and write
307BBFF000
stack
page read and write
1B77C380000
unkown
page read and write
17AD84A0000
unkown
page read and write
17AD6CB0000
remote allocation
page read and write
1B777F78000
heap
page read and write
A3701F0000
stack
page read and write
404000
unkown
page readonly
17AD6ED0000
unkown
page read and write
20E4F20000
stack
page read and write
17AD83E0000
unkown
page read and write
1D8E04E3000
heap
page read and write
17AD82D0000
unkown
page read and write
21016C00000
heap
page read and write
520000
heap
page read and write
403000
unkown
page read and write
17AD6F4F000
unkown
page read and write
6CF000
stack
page read and write
1B77C200000
unkown
page read and write
307BFFE000
stack
page read and write
1D8DFFC0000
unkown
page readonly
17AD84E0000
unkown
page read and write
1D8DFF80000
unkown
page read and write
C8B23FB000
stack
page read and write
1B777E30000
unkown
page read and write
1D8E2B40000
unkown
page read and write
403000
unkown
page write copy
401000
unkown
page execute read
1B77A790000
unkown
page read and write
9D000
stack
page read and write
1B77A680000
unkown
page read and write
1D8E2AB0000
unkown
page read and write
1D8E0F00000
unkown
page read and write
402000
unkown
page readonly
8AD6DFE000
unkown
page readonly
1B77C120000
unkown
page read and write
17AD6F8D000
heap
page read and write
1D8E0D9D000
unkown
page read and write
26632622000
heap
page read and write
26632668000
heap
page read and write
490000
heap
page read and write
21018602000
heap
page read and write
1F0000
heap
page read and write
1B777EC0000
heap
page read and write
17AD6D61000
heap
page read and write
1D8E0F10000
unkown
page read and write
1B77C3A0000
unkown
page read and write
17AD69B0000
unkown
page read and write
21016C2F000
heap
page read and write
1B77C0B0000
unkown
page read and write
1D8E0FF0000
unkown
page read and write
210BDD50000
heap
page readonly
1F9F000
stack
page read and write
1B77C320000
unkown
page read and write
210BDE25000
heap
page read and write
1B77A640000
unkown
page read and write
17AD69C0000
unkown
page read and write
1B7798A0000
unkown
page read and write
1D8E0EF8000
unkown
page read and write
1D8DE6B0000
unkown
page read and write
1B77A550000
unkown
page read and write
1D8E2AA0000
unkown
page read and write
1B779843000
heap
page read and write
1B77C270000
unkown
page read and write
21016C25000
heap
page read and write
1B777F53000
heap
page read and write
210BDE62000
heap
page read and write
1D8E0E82000
unkown
page read and write
210BDE13000
heap
page read and write
1D8E1030000
unkown
page read and write
41D000
unkown
page execute and write copy
1B77A450000
unkown
page read and write
17AD6BC5000
heap
page read and write
17AD85B0000
unkown
page read and write
17AD6960000
unkown
page read and write
17AD6F59000
unkown
page read and write
A370DFF000
unkown
page read and write
17AD83D0000
unkown
page read and write
410000
heap
page read and write
17AD6F4B000
unkown
page read and write
17AD4080000
unkown
page read and write
1B777ECB000
heap
page read and write
1B77C210000
unkown
page read and write
217F000
stack
page read and write
17AD3F90000
unkown
page readonly
400000
unkown
page readonly
87E000
stack
page read and write
1B77ACB0000
unkown
page read and write
1B777DE1000
unkown
page readonly
1B77978E000
unkown
page read and write
17AD8371000
unkown
page read and write
1D8E29B0000
unkown
page read and write
1B77A560000
unkown
page read and write
17AD8480000
unkown
page read and write
17AD6800000
unkown
page read and write
1D8E28D0000
unkown
page read and write
20E5061000
unkown
page read and write
17AD84F0000
unkown
page read and write
17AD6D47000
heap
page read and write
1D8E0EA2000
unkown
page read and write
37D00000
remote allocation
page read and write
17AD6BA0000
heap
page read and write
17AD69A0000
unkown
page read and write
2730000
trusted library allocation
page read and write
1B7798B2000
unkown
page read and write
266325C0000
heap
page read and write
90F000
stack
page read and write
307C1FE000
stack
page read and write
17AD6F97000
heap
page read and write
21016BB0000
heap
page read and write
1D8E28F0000
unkown
page read and write
17AD8270000
unkown
page read and write
17AD8400000
unkown
page read and write
1D8E2A60000
unkown
page read and write
1B77C1A0000
unkown
page read and write
1B777FAC000
heap
page read and write
20E54FE000
unkown
page read and write
1B77A630000
unkown
page read and write
94F000
stack
page read and write
1B77C1C0000
unkown
page read and write
4AE000
heap
page read and write
1D8E2C9A000
unkown
page read and write
210BDC70000
heap
page read and write
1D8E2A90000
unkown
page read and write
17AD3F48000
heap
page read and write
17AD6B9F000
heap
page read and write
1D8DFFE0000
unkown
page read and write
26632602000
heap
page read and write
400000
unkown
page readonly
1D8E1000000
unkown
page read and write
1B779862000
unkown
page read and write
17AD83A0000
unkown
page read and write
17AD6CB0000
remote allocation
page read and write
1D8E0ED2000
unkown
page read and write
1B77A780000
unkown
page read and write
A3703C3000
unkown
page read and write
1D8E2B00000
unkown
page read and write
1D8DE6D7000
heap
page read and write
1D8DFF60000
unkown
page read and write
1D8E0E65000
unkown
page read and write
97000
stack
page read and write
404000
unkown
page readonly
1D8E2AE0000
unkown
page read and write
59E000
stack
page read and write
1B77A5A0000
unkown
page read and write
1B777EC6000
heap
page read and write
20E55FC000
unkown
page read and write
17AD6D04000
heap
page read and write
1D8DFFA0000
unkown
page readonly
1D8E0FE0000
unkown
page read and write
20E5063000
unkown
page read and write
1B77A660000
unkown
page read and write
26632620000
heap
page read and write
17AD6D5F000
heap
page read and write
A3703B9000
unkown
page read and write
1B777CD0000
unkown
page readonly
A3708FA000
unkown
page read and write
17AD8410000
unkown
page read and write
1D8E0E29000
unkown
page read and write
17AD6FAA000
heap
page read and write
1D8E2B70000
unkown
page read and write
17AD6722000
unkown
page read and write
17AD83C0000
unkown
page read and write
C8B1CFE000
unkown
page readonly
17AD8550000
unkown
page read and write
7DF000
stack
page read and write
1B77C340000
unkown
page read and write
17AD8540000
unkown
page read and write
1B777E50000
unkown
page readonly
17AD3F7A000
heap
page read and write
17AD6990000
unkown
page read and write
17AD6A40000
heap
page read and write
13032FC000
stack
page read and write
2010000
heap
page read and write
13EC0000
remote allocation
page read and write
1B77C110000
unkown
page read and write
17AD6FB6000
unkown
page read and write
5C0000
heap
page read and write
17AD85C0000
unkown
page read and write
17AD6A42000
heap
page read and write
17AD8600000
trusted library section
page read and write
1B77A688000
unkown
page read and write
1D8E0FC0000
unkown
page read and write
1302BF7000
unkown
page read and write
17AD8320000
unkown
page read and write
1302AFE000
unkown
page read and write
1B77A610000
unkown
page read and write
26632682000
heap
page read and write
C8B1DFD000
stack
page read and write
1B77A670000
unkown
page read and write
400000
unkown
page readonly
1D8E2B10000
unkown
page read and write
1B77A5C0000
unkown
page read and write
17AD8240000
unkown
page read and write
1B77C190000
unkown
page read and write
13026FE000
unkown
page read and write
1D8DE7BD000
heap
page read and write
1B777F7B000
heap
page read and write
880000
heap
page read and write
26634070000
heap
page read and write
1B777E40000
unkown
page read and write
1D8E2B90000
unkown
page read and write
1B777F7E000
heap
page read and write
1D8E0E3C000
unkown
page read and write
17AD83F0000
unkown
page read and write
1FE0000
heap
page read and write
1B77A7D0000
unkown
page read and write
17AD6CC8000
heap
page read and write
1D8E2AD0000
unkown
page read and write
17AD6FAA000
heap
page read and write
17AD6BCD000
heap
page read and write
307BEFE000
unkown
page readonly
346E000
stack
page read and write
1B77AD2D000
unkown
page read and write
17AD5860000
unkown
page read and write
1D8E28E0000
unkown
page read and write
19D000
stack
page read and write
C8B19FE000
stack
page read and write
1B77C310000
unkown
page read and write
17AD3E90000
heap
page read and write
210BDC50000
heap
page read and write
1D8E0020000
heap
page read and write
17AD5D80000
unkown
page read and write
20E59FE000
unkown
page read and write
1B779840000
heap
page read and write
17AD8430000
unkown
page read and write
1D8E2BD0000
unkown
page read and write
17AD6970000
unkown
page read and write
17AD85A0000
unkown
page read and write
590000
heap
page read and write
1D8E1150000
unkown
page read and write
8AD72FE000
stack
page read and write
5B5000
heap
page read and write
17AD8350000
unkown
page read and write
1D8E3750000
unkown
page read and write
1D8E2C10000
unkown
page read and write
1B77ACCF000
unkown
page read and write
1B77C100000
unkown
page read and write
17AD3EC2000
heap
page read and write
210BDE45000
heap
page read and write
17AD6980000
unkown
page read and write
1B779870000
unkown
page read and write
20E5AFF000
unkown
page read and write
17AD67C0000
unkown
page read and write
307C2FE000
unkown
page readonly
17AD6780000
unkown
page read and write
1B77A945000
unkown
page read and write
C8B1BFE000
stack
page read and write
17AD6F61000
unkown
page read and write
1D8E2960000
unkown
page read and write
404000
unkown
page readonly
17AD8260000
unkown
page read and write
1D8E0E55000
unkown
page read and write
21016C67000
heap
page read and write
1B777F48000
heap
page read and write
1B777ED7000
heap
page read and write
1B77A5F0000
unkown
page read and write
1B77C290000
unkown
page read and write
17AD8300000
unkown
page read and write
1D8E0F60000
unkown
page read and write
21016C3B000
heap
page read and write
17AD5D20000
unkown
page readonly
17AD6F86000
heap
page read and write
20E5057000
unkown
page read and write
1B77A5B0000
unkown
page read and write
419000
unkown
page execute and read and write
266325E0000
heap
page read and write
56E000
stack
page read and write
3BCF000
stack
page read and write
20E5055000
unkown
page read and write
1D8E1140000
unkown
page read and write
266325A0000
heap
page read and write
1B77C070000
unkown
page read and write
21016AA0000
heap
page read and write
404000
unkown
page readonly
21016C89000
heap
page read and write
1B77C170000
unkown
page read and write
1B77C080000
unkown
page read and write
1D8E0F40000
unkown
page read and write
1F0000
heap
page read and write
1B7798D8000
unkown
page read and write
44D000
heap
page read and write
540000
heap
page read and write
1D8E1130000
unkown
page read and write
1B777E80000
unkown
page readonly
307BDFE000
stack
page read and write
1D8E0F70000
unkown
page read and write
71B000
heap
page read and write
1D8DE7A2000
heap
page read and write
1302292000
unkown
page read and write
17AD6F54000
unkown
page read and write
384E000
stack
page read and write
C8B1AFE000
unkown
page readonly
400000
unkown
page readonly
1B77C250000
unkown
page read and write
1B77A590000
unkown
page read and write
4A0000
heap
page read and write
17AD67A0000
unkown
page read and write
1D8E0E2B000
unkown
page read and write
17AD3F21000
heap
page read and write
17AD6F89000
unkown
page read and write
1D8E0370000
unkown
page readonly
1B777CE0000
heap
page read and write
1D8E0EE2000
unkown
page read and write
1D8DE6C0000
heap
page read and write
41B000
unkown
page execute and read and write
227F000
stack
page read and write
17AD6ED8000
unkown
page read and write
8AD70FE000
stack
page read and write
36AF000
stack
page read and write
17AD6B90000
heap
page read and write
17AD6F54000
unkown
page read and write
26632687000
heap
page read and write
17AD58A0000
unkown
page read and write
21016C5F000
heap
page read and write
26632661000
heap
page read and write
1D8E2C85000
unkown
page read and write
403000
unkown
page write copy
1D8DE7B8000
heap
page read and write
1D8DE74E000
heap
page read and write
1B77C2C0000
unkown
page read and write
20E5EFD000
unkown
page read and write
1D8E2C30000
unkown
page read and write
403000
unkown
page write copy
1B777F9D000
heap
page read and write
2663262F000
heap
page read and write
17AD6A00000
heap
page read and write
210BDD60000
heap
page read and write
26632702000
heap
page read and write
1D8E2980000
unkown
page read and write
1D8E2A20000
unkown
page read and write
1D8E0DA0000
unkown
page read and write
17AD9060000
unkown
page read and write
1D8E2930000
unkown
page read and write
13029FC000
unkown
page read and write
17AD84D0000
unkown
page read and write
1FDE000
stack
page read and write
17AD6712000
unkown
page read and write
910000
heap
page read and write
1D8DFF90000
unkown
page read and write
26632600000
heap
page read and write
17AD3FA0000
heap
page read and write
560000
heap
page read and write
510000
heap
page read and write
8AD75FE000
unkown
page readonly
1B77C0E0000
unkown
page read and write
1D8DE6C6000
heap
page read and write
17AD6BAB000
heap
page read and write
1302DFC000
unkown
page read and write
17AD6BBC000
heap
page read and write
17AD6FB6000
unkown
page read and write
21016A80000
heap
page read and write
17AD6FC1000
unkown
page read and write
21016C02000
heap
page read and write
17AD6742000
unkown
page read and write
1D8E2C40000
unkown
page read and write
1D8E2990000
unkown
page read and write
17AD6920000
unkown
page read and write
17AD67B0000
unkown
page read and write
1B77AD46000
unkown
page read and write
210BDE00000
heap
page read and write
17AD6FC1000
heap
page read and write
1D8E0FB0000
unkown
page read and write
1D8E0E90000
unkown
page read and write
1D8E3740000
unkown
page read and write
17AD8290000
unkown
page read and write
17AD8390000
unkown
page read and write
17AD8230000
unkown
page read and write
394F000
stack
page read and write
1D8E29A0000
unkown
page read and write
17AD8381000
unkown
page read and write
9D000
stack
page read and write
1B77C1F0000
unkown
page read and write
4DE000
stack
page read and write
1D8E1038000
unkown
page read and write
1B77A580000
unkown
page read and write
1D8DE6E2000
heap
page read and write
1D8E29C0000
unkown
page read and write
1B77C280000
unkown
page read and write
8AD6AFD000
stack
page read and write
1B77C2E0000
unkown
page read and write
356F000
stack
page read and write
A3703B7000
unkown
page read and write
402000
unkown
page readonly
401000
unkown
page execute read
C8B20FE000
unkown
page readonly
17AD3F4F000
heap
page read and write
403000
unkown
page read and write
1D8DFFD0000
unkown
page readonly
1D8DE590000
heap
page read and write
17AD6BC6000
heap
page read and write
1B77C010000
unkown
page read and write
2C30000
trusted library allocation
page read and write
17AD8340000
unkown
page read and write
17AD6BAB000
heap
page read and write
1302CFF000
unkown
page read and write
1302294000
unkown
page read and write
8AD68F7000
stack
page read and write
17AD8590000
unkown
page read and write
8AD6BFE000
unkown
page readonly
1D8DE79B000
heap
page read and write
17AD58B0000
heap
page read and write
1B77A570000
unkown
page read and write
17AD6950000
unkown
page read and write
17AD6FB6000
heap
page read and write
9D000
stack
page read and write
1D8DE743000
heap
page read and write
1B779892000
unkown
page read and write
88A000
heap
page read and write
17AD8420000
unkown
page read and write
1D8E0D80000
unkown
page read and write
17AD6EDD000
unkown
page read and write
17AD6BA6000
heap
page read and write
17AD8500000
unkown
page read and write
1B777FB7000
heap
page read and write
8DF000
stack
page read and write
17AD8520000
unkown
page read and write
20E5BFE000
unkown
page read and write
3ACE000
stack
page read and write
17AD5C00000
unkown
page readonly
1B777E00000
unkown
page read and write
51A000
heap
page read and write
430000
heap
page read and write
1B777E90000
unkown
page read and write
885000
heap
page read and write
17AD6BC3000
heap
page read and write
402000
unkown
page readonly
A80000
heap
page read and write
17AD3EB2000
heap
page read and write
19D000
stack
page read and write
17AD6BD4000
heap
page read and write
17AD67D0000
unkown
page read and write
1B77C350000
unkown
page read and write
8AD74FB000
stack
page read and write
1B7798E0000
heap
page read and write
1B77C390000
unkown
page read and write
26B0000
trusted library allocation
page read and write
1B77C141000
unkown
page read and write
1302EFE000
unkown
page read and write
17AD3F75000
heap
page read and write
17AD6BAD000
heap
page read and write
17AD5890000
unkown
page read and write
17AD6BB6000
heap
page read and write
17AD6700000
unkown
page read and write
17AD6F85000
unkown
page read and write
1B77C240000
unkown
page read and write
1D8DE691000
unkown
page readonly
1D8E29D0000
unkown
page read and write
17AD6BD7000
heap
page read and write
There are 727 hidden memdumps, click here to show them.