IOC Report
WIN_DCA_2.4.0.10654_sursvc_qh.msi

loading gif

Files

File Path
Type
Category
Malicious
WIN_DCA_2.4.0.10654_sursvc_qh.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Intel(R) Computing Improvement Program, Author: Intel Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Intel(R) Computing Improvement Program., Template: x64;1033, Revision Number: {F5B334BC-EB98-42B1-9672-0E25B39E6D90}, Create Time/Date: Fri Oct 20 05:08:32 2023, Last Saved Time/Date: Fri Oct 20 05:08:32 2023, Number of Pages: 405, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2
initial sample
C:\Program Files\Intel\SUR\QUEENCREEK\x64\bertreader.sys
PE32+ executable (native) x86-64, for MS Windows
dropped
malicious
C:\Program Files\Intel\SUR\QUEENCREEK\x64\semav6msr64.sys
PE32+ executable (native) x86-64, for MS Windows
dropped
malicious
C:\Config.Msi\5c1379.rbs
data
dropped
C:\Program Files\Intel\SUR\ICIP\Config.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\ICIP\SURV8_ICIP.log
CSV text
dropped
C:\Program Files\Intel\SUR\ICIP\SurConsent.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\AnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\AudioAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\BatteryAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\BoundnessEventsAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\BrowserHistoryAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\CSMEAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\CapiEtlAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Common.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Config.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\CrashLogAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\DBAccessLayer.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\DBAccessLayer.dll.config
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\DSACoreInterop64.dll
PE32+ executable (DLL) (GUI) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\DSADcaIntegration.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\DevUseAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\DisplayAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\DisplayStateAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\DriverDetection.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\DttEtlAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\EntityFramework.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\EventLogCollection.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\FPSAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\FgndBackgrndAppsAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\GenericSqlATLSupport.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\HWMetaTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\HWPowerStatsTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\HeartBeatAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\IntelFgndAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\LICENSE.txt
Unicode text, UTF-8 text, with very long lines (17652), with no line terminators
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\NetworkBandwidthAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\OSPerfCounterAnalyzerTasks.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\OSPerfCounterAnalyzerTasks.dll.config
XML 1.0 document, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\OSSystemAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\PhatAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\ProcessAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\SleepStudyAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe.config
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\System.Data.SQLite.EF6.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\System.Data.SQLite.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\SystemPowerStateAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\SystemPowerStateAnalyzerTask.dll.config
XML 1.0 document, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\SystemUsageByFgndAppAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\TextExtractorAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\ScheduleUpdates.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\VCRUNTIME140.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\_ctypes.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\_decimal.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\_elementtree.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\_hashlib.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\_lzma.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\_multiprocessing.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\_queue.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\_socket.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\_ssl.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\api\x64\UpdateServiceProxy64.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\base_library.zip
Zip archive data, at least v2.0 to extract, compression method=store
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\libcrypto-3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\libffi-8.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\libssl-3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\pyexpat.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\python311.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\pywin32_system32\pythoncom311.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\pywin32_system32\pywintypes311.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\select.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\shell_executor.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\unicodedata.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\_win32sysloader.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\perfmon.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\servicemanager.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32api.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32event.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32evtlog.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32file.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32inet.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32pipe.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32process.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32profile.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32security.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32service.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32trace.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\win32ts.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\cacert.pem
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\config.ini
Generic INItialization configuration [ScheduledUpdate]
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\config_api.ini
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\licenses.txt
Unicode text, UTF-8 text, with very long lines (2404), with CRLF line terminators
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\logging_config.json
JSON data
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\UserWaitTimeAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\WifiAnalyzerTask.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\analyzer.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\apptable.csv
CSV text
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\lookup.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\policy.json
JSON data
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\SQLite.Interop.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\bertreader.cat
data
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\bertreader.inf
Windows setup INFormation
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\crashlog_extractor.exe
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\crashlog_options.txt
ASCII text
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\devices_use_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_lib.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_lib_daq.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_lib_security.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_thread_monitor.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\etw_options_config.txt
ASCII text
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\installer.bat
DOS batch file, ASCII text, with very long lines (1006), with CRLF line terminators
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_acpi_battery_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_audio_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_crashlog_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_csme_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_desktop_mapper_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_display_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_etw_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_foreground_window_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_fps_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_heartbeat_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_hw_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_modeler.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_os_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_phat_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_process_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_process_watcher_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_sur_sysprep.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_system_power_state_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_user_waiting_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\intel_wifi_input.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\libcrypto-3-x64.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\pl_agent_lib.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\process_input_options.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\productivity_link.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\productivity_link_helper.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\semav6msr64.cat
data
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\semav6msr64.inf
Windows setup INFormation
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\sql_logger.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\sqlite3.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\sur_eqs.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\sur_hw_config.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\sur_os_counters.txt
ASCII text, with CRLF line terminators
dropped
C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.exe
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Windows\Installer\$PatchCache$\Managed\E73D8FD4A5508B94397103E5DCB1D9F1\2.4.10654\concrt140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Windows\Installer\$PatchCache$\Managed\E73D8FD4A5508B94397103E5DCB1D9F1\2.4.10654\msvcp140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Windows\Installer\$PatchCache$\Managed\E73D8FD4A5508B94397103E5DCB1D9F1\2.4.10654\msvcp140_1.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Windows\Installer\$PatchCache$\Managed\E73D8FD4A5508B94397103E5DCB1D9F1\2.4.10654\msvcp140_2.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Windows\Installer\$PatchCache$\Managed\E73D8FD4A5508B94397103E5DCB1D9F1\2.4.10654\msvcp140_atomic_wait.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Windows\Installer\$PatchCache$\Managed\E73D8FD4A5508B94397103E5DCB1D9F1\2.4.10654\msvcp140_codecvt_ids.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Windows\Installer\$PatchCache$\Managed\E73D8FD4A5508B94397103E5DCB1D9F1\2.4.10654\vccorlib140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Windows\Installer\$PatchCache$\Managed\E73D8FD4A5508B94397103E5DCB1D9F1\2.4.10654\vcruntime140.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Windows\Installer\$PatchCache$\Managed\E73D8FD4A5508B94397103E5DCB1D9F1\2.4.10654\vcruntime140_1.dll.DFEFC2FE_EEE6_424C_841B_D4E66F0C84A3
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Windows\Installer\5c1378.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Intel(R) Computing Improvement Program, Author: Intel Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Intel(R) Computing Improvement Program., Template: x64;1033, Revision Number: {F5B334BC-EB98-42B1-9672-0E25B39E6D90}, Create Time/Date: Fri Oct 20 05:08:32 2023, Last Saved Time/Date: Fri Oct 20 05:08:32 2023, Number of Pages: 405, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.2.4516), Security: 2
dropped
C:\Windows\Installer\MSI21C1.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI226E.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI227E.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI231B.tmp
data
dropped
C:\Windows\Installer\MSI234B.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI235C.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Windows\Installer\MSI24C4.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI2513.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Windows\Installer\MSI25D0.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI26AC.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI271A.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI27B7.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI2855.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI38D0.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
modified
C:\Windows\Installer\SourceHash{4DF8D37E-055A-49B8-9317-305ECD1B9D1F}
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Installer\inprogressinstallinfo.ipi
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\~DF768D4A25930D9F16.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DFBFC2FA65DAF65E8B.TMP
data
dropped
C:\Windows\Temp\~DFE2BAD0F3398D8842.TMP
data
dropped
C:\Windows\Temp\~DFFEA99DB12BF21297.TMP
data
dropped
There are 169 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\System32\msiexec.exe
"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\WIN_DCA_2.4.0.10654_sursvc_qh.msi"
malicious
C:\Windows\System32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
malicious
C:\Windows\System32\msiexec.exe
C:\Windows\System32\MsiExec.exe -Embedding 594B08B14BB53DA353B7B8C7CFA5C9EA
malicious
C:\Windows\SysWOW64\msiexec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding F1C809FEE972ABEAE39BB6DC6996D99E
C:\Windows\SysWOW64\msiexec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding 848F5E5D5CCFC7A033F45D33B8DB52E8 E Global\MSI0000
C:\Windows\System32\cmd.exe
"C:\Windows\system32\cmd.exe" /c cd "C:\Program Files\Intel\SUR\QUEENCREEK\" && if exist SurSvc.exe (start /b /wait /d "C:\Program Files\Intel\SUR\QUEENCREEK\" SurSvc.exe /uninstall)
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\system32\cmd.exe" /c if exist "%PROGRAMDATA%\\Intel\\SharedData\\SDID" (del /f "%PROGRAMDATA%\\Intel\\SharedData\\SDID")
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\SysWOW64\cmd.exe
"CMD" /C RMDIR /S /Q "C:\Program Files\Intel\SUR\QUEENCREEK\Updater\" && RMDIR /S /Q "C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\"
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\icacls.exe
"C:\Windows\system32\icacls.exe" "C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe" /inheritance:r /grant:r SYSTEM:F Administrators:R Users:R
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Program Files\Intel\SUR\ICIP\SurConsent.exe
"C:\Program Files\Intel\SUR\ICIP\SurConsent.exe" -install
There are 4 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://www.intel.co.jp/content/www/jp/ja/privacy/in
unknown
https://www.intel.com/content/www/us/en/support/topics/idsa-cip.html
unknown
http://www.fontbureau.com/designersG
unknown
https://intel.fr/privacy.
unknown
https://github.com/jquery/jquery
unknown
http://www.fontbureau.com/designers/?
unknown
http://www.founder.com.cn/cn/bThe
unknown
https://www.intel.com.br/content/www/br/pt/support/topics/idsa-cip.html
unknown
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
unknown
http://ocsp.sectigo.com0
unknown
http://www.fontbureau.com/designers?
unknown
https://www.intel.eu/content/www/eu/en/privacy/intel-privacy-notice.html
unknown
https://github.com/mhammond/pywin32
unknown
http://www.tiro.com
unknown
https://system.data.sqlite.org/X
unknown
https://www.intel.com/content/www/ru/ru/support/topics/idsa-cip.html
unknown
https://policy.system-usage-report.intel.com/faq/
unknown
http://www.fontbureau.com/designers
unknown
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
unknown
http://www.goodfont.co.kr
unknown
http://creativecommons.org/publicdomain/zero/1.0/
unknown
http://mozilla.org/MPL/2.0/.
unknown
https://www.intel.fr/content/www/fr/fr/support/topics/idsa-cip.html
unknown
http://www.sajatypeworks.com
unknown
http://www.typography.netD
unknown
http://www.founder.com.cn/cn/cThe
unknown
http://www.galapagosdesign.com/staff/dennis.htm
unknown
https://www.intel.co.jp/content/www/jp/ja/privacy/intel-privacy-notice.html)
unknown
http://wixtoolset.org
unknown
http://www.opensource.org).
unknown
https://www.intel.com.br/content/www
unknown
http://www.galapagosdesign.com/DPlease
unknown
https://www.intel.com/content/www/vn/vi/support/topics/idsa-cip.html
unknown
http://www.fonts.com
unknown
http://www.sandoll.co.kr
unknown
https://www.sqlite.org/lang_corefunc.html
unknown
http://www.urwpp.deDPlease
unknown
https://www.intel.com/content/www/tw/zh/support/topics/idsa-cip.html
unknown
http://www.zhongyicts.com.cn
unknown
https://policy.system-usage-report.
unknown
https://www.intel.it/content/www/it/it/privacy/intel-privacy-notice.html.
unknown
https://www.intel.com.br/content/www/br/pt/privacy/intel-privacy-notice.html.
unknown
http://www.sakkal.com
unknown
https://www.intel.es/content/www/es/es/support/topics/idsa-cip.html
unknown
http://www.sqlite.org/copyright.html.
unknown
https://www.intel.com/content/www/it/it/support/topics/idsa-cip.html
unknown
http://www.apache.org/licenses/LICENSE-2.0
unknown
http://www.fontbureau.com
unknown
https://sectigo.com/CPS0
unknown
https://www.intel.com/content/www/tw/zh/support/topics/idsa-cip.htmlH
unknown
https://www.intel.com/content/www/th/th/support/topics/idsa-cip.html
unknown
https://www.sqlite.org/lang_aggfunc.html
unknown
https://intel.com/privacy
unknown
https://www.intel.com/content/www/cn/zh/support/topics/idsa-cip.html
unknown
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
unknown
https://www.intel.com/content/www/us/en/support/topics/idsa-cip.html.
unknown
http://ocsp.sectigo.com0#
unknown
https://www.intel.co.kr/content/www/kr/ko/support/topics/idsa-cip.html
unknown
http://www.carterandcone.coml
unknown
https://www.intel.com.tr/content/www/tr/tr/support/topics/idsa-cip.html
unknown
https://intel.com/privacy.
unknown
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
unknown
http://www.fontbureau.com/designers/cabarga.htmlN
unknown
https://github.com/jquery/globalize
unknown
http://www.founder.com.cn/cn
unknown
https://jquery.org/
unknown
http://www.fontbureau.com/designers/frere-user.html
unknown
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
unknown
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
unknown
https://www.intel.com/content/www/us/en/support/topics/idsa-cip.html8
unknown
http://www.jiyu-kobo.co.jp/
unknown
https://www.sqlite.org/see
unknown
https://www.openssl.org/H
unknown
http://www.fontbureau.com/designers8
unknown
https://www.intel.co.jp/content/www/jp/ja/support/topics/idsa-cip.html
unknown
https://system.data.sqlite.org/
unknown
https://www.intel.com/content/www/pl/pl/support/topics/idsa-cip.html.
unknown
http://www.intel.com/privacy
unknown
https://js.foundation/
unknown
https://www.intel.com/content/www/id/id/support/topics/idsa-cip.html
unknown
https://www.intel.de/content/www/de/de/support/topics/idsa-cip.html
unknown
There are 71 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
fp2e7a.wpc.phicdn.net
192.229.211.108

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349
Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349
Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Config.Msi\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
C:\Config.Msi\5c1379.rbs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
C:\Config.Msi\5c1379.rbsLow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C4DEBA2E65BA6854BB7D634412BD412E
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27942822A4C04B13EAFEF97C95F63150
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2EFD8F5E4F5484898282946C589AB1
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD7D722D8F9DFA339B53B42F4FF7E24A
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A457A50400326240B83AB05ED827BC1
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89E10FD6ED588704BBC519A4EF16AD80
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D7380DC82784E747AAAAF40F3C85E62
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\81D2FF7345DD32E4FB0BC1D6AB95A8F8
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\44FD3F3D30EAB934FB712C1525D30A53
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB383865201B01755A65E57310B03994
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\66EF3B7096064164DA6E29CD32BD9713
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FAF3B3F005E8476499D0ECCF93A35DD0
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\59D819A07EE7FA04488665671EF577B4
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AA9B0152CC4DBEB4B872B0CE96303478
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4EC4A2936BCA64D49A3500EB4DE6048B
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2C617C32366E93844AC1C1C8026DE8BE
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1716931E2879F846958884E4ED3C342
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B029EC9A3BB1CEE4CA492499EF9A14FF
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\673B96B5C2DB48041AA17C5E33954566
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\143F60E19EDC7E24BB5D9F8EE8B1C1FC
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9069B8E80857E3441B6244952C4461A3
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46B12AAFD3602104A83722882E893557
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C4C8FF969B4E6994FADE2516F06B135C
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1311C9158445E4B46930285F2D0A50C5
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\911246A35BD7C05459CA8225D0B13873
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D6529F359B161C49A5414AE4842CAD2
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B88F3D1011370EA4C8C69DF5EEBE0BFA
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4BAEBCD07BD8B1428F327D456503806
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FF8D343A3577B8845A1FC3775D95BE35
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B2C3C88066461D34AACE2A22EB836883
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0DFBD258FA5D2EC40A47D6E91565CDF4
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAC703297ED5DB242AC7245CEEF4D66A
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\83445E896893208459CEB9EAA5EBB40D
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A58DAB9F021695439ED7DBD34527191
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2A4C67D9D5A602E4BA74B0D3FDE40FFC
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB3B7A4A1E7F98C47B1CF1486A764C97
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75CF332BC52D9A842965163633DC20C9
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2A3837A39DC753F4C812EDA1372945A5
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4795441AE9C8ED14A9F89EA52DEEF2D2
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\25D05D9B76BF3FF4B9F831EB67DED320
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D7C8F63CF9026CE499570F8F90FCB17A
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DBC18B5CAE134D04EBF581BB909FA6C4
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5617A7BCC4D14C04E951AF419D06FDB2
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D2EBAFC725D1594C8426B92FF0277D5
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\19E1D75D96F633E4789EC766EDF426F8
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FE93458DE73175643AC17BF22974BC83
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EAFEE8D9084E6049B44ABD43A38D7D3
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0092D3FDE857A554AB056EB1D89C0163
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50C1A6BE7B2A10040AB96DF643A637C8
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3F60ED1F0E7FD584AB26AB222CDAC51B
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\58AFBC06248B0E9488A771DFCBAB108C
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\59A43E6F4591AE64E893A1411FC66642
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCF312CA0FB30384198685B87272A430
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AA83D6F51396F9A45A76C3B185CE6201
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\59C134B6552B33044B3A9EE93CE2412B
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\318A216D1EDC21F4A96A655CCA021DF9
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D4CD6141CA8253B498CC9F8E8113E6BB
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\157063085048EDA489A5631558EA130F
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\765056B4887A259408795F556BFA78FF
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0739B176751E31043911F7134643C05C
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\82EFFF336F63F8D4898B20DB6AE3F569
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EB0D343F59C8B7B44AAFBF1988B86588
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1B1A0468F0A166342913416A3D0AEFED
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38E6188EE5952024896EC193DED2E7C4
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\210D2A1751A466244BF7E33BA0724A9D
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\065ED7135231A2744932F9C1431C1C45
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9494C5D53B2AE3E41B4DCC58E896C7A6
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA2CA63530E2F5547BFECCD99CC5232A
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAA3FC32E97F0354891149C2B145D79A
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1A44BF4C0383844FBAD6D4FB292C189
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\391E40DF5EF3DE247AEFCA4921DAFE33
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\800D7E7C2949FE54CB2563CEE2AB08BA
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DA169A7FE97DFF40BA9254BBB4960A8
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\91F7AED177684E74AA909C18839158ED
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\32D95F5598828414BA4B70E36C18ADB1
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EADB6FC1644667409716F363ED08981
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C5AC066B1F7273E419E46BF18FDBC8DF
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\113B77C66D45064469AD355366EE0D6B
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE4F343D861EAE5408A9FC19928CA53F
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68D811F84D4D7314F980DF4A715CDB30
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CA68279A5A2B4D45A6CE3B86C7F189D
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DEB9BEC86A387E54985978902FE4AC62
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC4F1C420C109D64FA7B7E99E7E54FD6
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\865A308CCD6622A49A38E5490DBBE928
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4003235F430BC1479AF0AA373B5EA1A
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E04CA230D8BDBE45B6CE2DAACBC940A
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5054C78DFF7BA8B44A9EBE0C650F059C
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B38688E6A241C54BBD98CEF1C3B5230
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53FF405F6E5768A4D90C09DF6FB3E283
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DA34F36DA31AAD847A83CD914C878C30
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\341239E872322CD4CAFE7CA91C6699AD
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EDBD0D37B95989E459C6B361C6E935B9
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6CC40C0C77F753B49BD74F0AB9D11446
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E0BE702DDA04FAB459B6E0210D0A7BBE
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6E82C706B7E7961488A0FEA53FAF3564
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2690F7CA88C08945BF79362118FB3FC
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F59F9AFB6DF1794C964FB0E6B765C60
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27FAA7C0B40CB214593BF8E9FDAF1C15
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1D458AC2226B4A4BA87E3C2A8B44822
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E7714F1A75CD93E4A964F13629A1A963
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D98B46ED584DCBF44802133DB517D865
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7D879DE70DB70744489D859757EDF3E9
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A2B39980C2A0B79409A01B4C50ED1C4F
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2AC03EB24887DA24B88397BA02BCABB6
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\101B5D028480478468E7A5284F3BA15C
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\47378A5F615354A4AB55CC86105E30B8
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A50BCCC77F0EC9A47B88F24E2F7C0908
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AA4296C568776204291DED4954B7742B
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\63B436987A8836548A55DF395576A492
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4911F03FA9EA6334AA74F65A7E920EED
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51929DDDAA048AC40B0241EC188654B2
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F6F33A6B3D619A9409683023FB03FA31
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E05C23C3D7187146A654AD391021F10
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F8938054F81F367498CED7E47EA948D9
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB1C29067982D2846AD3E36E01854A11
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B68919596CD6026468DE75A70C23B431
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0EED3B711FE8B74449B2FB5AB51D41B3
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF76A7B85730F8242A4AF92DFD74BCBC
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\33663D809038FF24593A2C659E0D6D9B
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01EFF2CE57E6F6947AD4DEA782F99172
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8A198767D6CA46E4E9CEA860E4040B9E
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B665C9FDBC1B1774CA36D1BD6AA6FA74
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E827413F33346EE47B15D028514B3668
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\91F7888D2985AD844AD7E9D293CFF5BF
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C7C5E99FCA88B6B4FBFF27E4AEB0F0A4
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E71807ACEDAC9774D89021493C79E580
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D16FF08692BF5D942A3BAAD00C7EBD80
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C4A4C8FEA0160284DA67A4EC3F19A584
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7EACC3710B4A66D4081E21CBD91C6FE6
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\74978AB6B43E8F740ADC6B4B056B0495
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D803CF1BC4D07D4C86F6391E271F692
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE09DA1D3329F7F4486ABC596F5C87A7
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D9FBEF0926988034CB7D57532C25950E
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75EF7A346E176384080B3440E3DE5B57
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\893C63D482A285D44A4553334989F777
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27368B18985DE664F99D7A391A3A7BAA
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\073ABCADAA5D3324BB5E747579D4B3EC
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C73F2FFC48834B542BE911BC3E8C9EC6
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\183D1B3E65B064C48B6276213A90634F
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9328A0EE9559D4C858B8DE270724D8
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D88FF908D9CF63F45861A006A382EAD6
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB014C22E9FAA74498A7D68F65B8894F
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FA353F7377DB584192AD52142D81ED6
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3E258774DC54A6744959F9C963A85107
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\783BC42FE79FF3C4F837CA4824D16148
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B396523DA722D1749905A433CA655D6B
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A53AB19AB3915143A6E5739ADE5B364
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\984B38B049549494E92A82AF683B50C1
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC24AD7E2588A9F4793015B1EF8B69B2
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E49AB7FC386CFE94FA8D7A5DB53F75BE
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8AB4640127ADD4C42AD8B6A384657322
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95606204077DAEC4196789FE8A424FF3
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5612F183EB0E8842B49F2E769060FF7
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D7A0F48C0C08F64EAEE925F7682304D
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\229203909A8DA9E4FAA7456AB474EC46
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5CCCDD52F6D8AC8419686E40576EA4E2
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53E9C9A1B66D7744799A792B4E75AF2D
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\294A0E37A871D4043BA77BD98A15D804
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95BB0BF8601E57943AC185B229060267
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2844711E418DFA8459AB8E5D34DD0E01
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F050FEBCCC76D9140A34178A0D38311A
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EFB7FBAC14265774594FA30D5E58A88A
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\03C3816185F528A4A85B036935DECADC
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0F99A18892E8EB04E9A58507293D53C5
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A2945EAF40CED7C448DB09C8DD6FA73D
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ACE58DEE2330AC47BB4280AF0F11A1E
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F22844DCDB5E9A448E8B3C6F22A049F
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B8898AAA8A929064288C524B88154AC9
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B7A244F532436EF4D8C5394E283B7B8B
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\47ACE18E33F06DC49A71A72EF7042359
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\654F71F1EF9E9124B957EDC5DF6F6FB9
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA30FAAC5DF656446906A474A5612ACF
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05C5AF8626471565D91C7C4C9D973ACD
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05C5AF8626471565D91C7C4C9D973ACD
00000000000000000000000000000000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EADC9DF05AF7E25EA97751B32B04513
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EADC9DF05AF7E25EA97751B32B04513
00000000000000000000000000000000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\79090D9DB41DC7E449DEB9BFA42F7424
E73D8FD4A5508B94397103E5DCB1D9F1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\Intel\SUR\ICIP\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\Intel\SUR\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\Intel\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\Intel\SUR\QUEENCREEK\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\Registry\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\AppData\downloads\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\AppData\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\AppData\history\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\AppData\update_events\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\AppData\persisted_updates\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Intel\SUR\QUEENCREEK\Updater\AppData\captured_logs\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\Intel\SUR\QUEENCREEK\x64\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\win32\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\pywin32_system32\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\api\x64\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\api\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\E73D8FD4A5508B94397103E5DCB1D9F1
PatchGUID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\E73D8FD4A5508B94397103E5DCB1D9F1
MediaCabinet
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\E73D8FD4A5508B94397103E5DCB1D9F1
File
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\E73D8FD4A5508B94397103E5DCB1D9F1
ComponentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\E73D8FD4A5508B94397103E5DCB1D9F1
ProductVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\E73D8FD4A5508B94397103E5DCB1D9F1
PatchAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSequence
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\E73D8FD4A5508B94397103E5DCB1D9F1
SharedComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\E73D8FD4A5508B94397103E5DCB1D9F1
IsFullFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\E73D8FD4A5508B94397103E5DCB1D9F1
PatchGUID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\E73D8FD4A5508B94397103E5DCB1D9F1
MediaCabinet
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\E73D8FD4A5508B94397103E5DCB1D9F1
File
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\E73D8FD4A5508B94397103E5DCB1D9F1
ComponentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\E73D8FD4A5508B94397103E5DCB1D9F1
ProductVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\E73D8FD4A5508B94397103E5DCB1D9F1
PatchAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSequence
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\E73D8FD4A5508B94397103E5DCB1D9F1
SharedComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\E73D8FD4A5508B94397103E5DCB1D9F1
IsFullFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27942822A4C04B13EAFEF97C95F63150\E73D8FD4A5508B94397103E5DCB1D9F1
File
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F\E73D8FD4A5508B94397103E5DCB1D9F1
PatchGUID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F\E73D8FD4A5508B94397103E5DCB1D9F1
MediaCabinet
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F\E73D8FD4A5508B94397103E5DCB1D9F1
File
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F\E73D8FD4A5508B94397103E5DCB1D9F1
ComponentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F\E73D8FD4A5508B94397103E5DCB1D9F1
ProductVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F\E73D8FD4A5508B94397103E5DCB1D9F1
PatchAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSequence
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F\E73D8FD4A5508B94397103E5DCB1D9F1
SharedComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F\E73D8FD4A5508B94397103E5DCB1D9F1
IsFullFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9\E73D8FD4A5508B94397103E5DCB1D9F1
File
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2EFD8F5E4F5484898282946C589AB1\E73D8FD4A5508B94397103E5DCB1D9F1
PatchGUID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2EFD8F5E4F5484898282946C589AB1\E73D8FD4A5508B94397103E5DCB1D9F1
MediaCabinet
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2EFD8F5E4F5484898282946C589AB1\E73D8FD4A5508B94397103E5DCB1D9F1
File
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2EFD8F5E4F5484898282946C589AB1\E73D8FD4A5508B94397103E5DCB1D9F1
ComponentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2EFD8F5E4F5484898282946C589AB1\E73D8FD4A5508B94397103E5DCB1D9F1
ProductVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2EFD8F5E4F5484898282946C589AB1\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2EFD8F5E4F5484898282946C589AB1\E73D8FD4A5508B94397103E5DCB1D9F1
PatchAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2EFD8F5E4F5484898282946C589AB1\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSequence
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2EFD8F5E4F5484898282946C589AB1\E73D8FD4A5508B94397103E5DCB1D9F1
SharedComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2EFD8F5E4F5484898282946C589AB1\E73D8FD4A5508B94397103E5DCB1D9F1
IsFullFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12\E73D8FD4A5508B94397103E5DCB1D9F1
PatchGUID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12\E73D8FD4A5508B94397103E5DCB1D9F1
MediaCabinet
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12\E73D8FD4A5508B94397103E5DCB1D9F1
File
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12\E73D8FD4A5508B94397103E5DCB1D9F1
ComponentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12\E73D8FD4A5508B94397103E5DCB1D9F1
ProductVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12\E73D8FD4A5508B94397103E5DCB1D9F1
PatchAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSequence
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12\E73D8FD4A5508B94397103E5DCB1D9F1
SharedComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12\E73D8FD4A5508B94397103E5DCB1D9F1
IsFullFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345\E73D8FD4A5508B94397103E5DCB1D9F1
PatchGUID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345\E73D8FD4A5508B94397103E5DCB1D9F1
MediaCabinet
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345\E73D8FD4A5508B94397103E5DCB1D9F1
File
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345\E73D8FD4A5508B94397103E5DCB1D9F1
ComponentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345\E73D8FD4A5508B94397103E5DCB1D9F1
ProductVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345\E73D8FD4A5508B94397103E5DCB1D9F1
PatchAttributes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345\E73D8FD4A5508B94397103E5DCB1D9F1
PatchSequence
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345\E73D8FD4A5508B94397103E5DCB1D9F1
SharedComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345\E73D8FD4A5508B94397103E5DCB1D9F1
IsFullFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD7D722D8F9DFA339B53B42F4FF7E24A\E73D8FD4A5508B94397103E5DCB1D9F1
File
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
C:\Windows\system32\vcruntime140.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
C:\Windows\system32\vcruntime140_1.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
C:\Windows\system32\msvcp140.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
C:\Windows\system32\msvcp140_1.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
C:\Windows\system32\msvcp140_2.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
C:\Windows\system32\msvcp140_atomic_wait.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
C:\Windows\system32\msvcp140_codecvt_ids.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
C:\Windows\system32\concrt140.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
C:\Windows\system32\vccorlib140.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Intel\SUR
GUID
There are 273 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7FF4F0D30000
trusted library allocation
page execute and read and write
7FFD9B314000
trusted library allocation
page read and write
2424B0B0000
heap
page read and write
16C79650000
heap
page execute and read and write
2424AEB6000
heap
page read and write
16C77C80000
trusted library allocation
page read and write
16C10007000
trusted library allocation
page read and write
16C10026000
trusted library allocation
page read and write
16C7BBE9000
heap
page read and write
7FFD9B30D000
trusted library allocation
page execute and read and write
16C77CF0000
heap
page read and write
16C79FBF000
heap
page read and write
16C7D00F000
trusted library allocation
page read and write
7FFD9B2FD000
trusted library allocation
page execute and read and write
7FFD9B4A0000
trusted library allocation
page execute and read and write
21369D80000
heap
page read and write
16C79610000
heap
page read and write
342F000
unkown
page read and write
16C77CB2000
unkown
page readonly
16C77A50000
heap
page read and write
64BB53C000
stack
page read and write
16C77A9B000
heap
page read and write
16C79630000
trusted library allocation
page read and write
34F0000
heap
page read and write
16C77A00000
heap
page read and write
36EF000
stack
page read and write
7FFD9B2F3000
trusted library allocation
page execute and read and write
7FFD9B34C000
trusted library allocation
page execute and read and write
586FDA4000
stack
page read and write
16C77AA8000
heap
page read and write
16C00001000
trusted library allocation
page read and write
7FFD9B300000
trusted library allocation
page read and write
16C7B100000
trusted library allocation
page read and write
276F10F0000
heap
page read and write
16C77ABE000
heap
page read and write
16C77CB4000
unkown
page readonly
16C77A88000
heap
page read and write
7FFD9B2F4000
trusted library allocation
page read and write
21369F60000
heap
page read and write
34E0000
heap
page read and write
3310000
heap
page read and write
16C7BC01000
heap
page read and write
16C778E0000
unkown
page readonly
64BB5BF000
stack
page read and write
16C79F60000
heap
page read and write
34FB000
heap
page read and write
7FFD9B3A0000
trusted library allocation
page read and write
31F0000
heap
page read and write
16C796E0000
heap
page read and write
16C77AE8000
heap
page read and write
16C77D40000
heap
page read and write
58705FF000
stack
page read and write
21369E80000
heap
page read and write
16C77ABC000
heap
page read and write
925ADFF000
stack
page read and write
16C7A0A0000
heap
page execute and read and write
16C77B5E000
heap
page read and write
16C77915000
unkown
page readonly
16C10011000
trusted library allocation
page read and write
16C7D0F0000
trusted library allocation
page read and write
276F10B0000
heap
page read and write
16C77A80000
heap
page read and write
7FFD9B410000
trusted library allocation
page execute and read and write
16C77C70000
trusted library allocation
page read and write
16C77D15000
heap
page read and write
16C77908000
unkown
page readonly
16C00012000
trusted library allocation
page read and write
7FFD9B493000
trusted library allocation
page read and write
16C77D10000
heap
page read and write
16C7BC10000
heap
page read and write
276F10D0000
heap
page read and write
16C79E50000
heap
page execute and read and write
16C779D0000
heap
page read and write
2424AEA8000
heap
page read and write
16C0001C000
trusted library allocation
page read and write
925ACFE000
unkown
page read and write
16C77AEA000
heap
page read and write
16C7B122000
trusted library allocation
page read and write
58702FF000
stack
page read and write
16C77CB0000
unkown
page readonly
16C79600000
trusted library section
page readonly
4E785FF000
stack
page read and write
16C10019000
trusted library allocation
page read and write
7FFD9B3B0000
trusted library allocation
page execute and read and write
330E000
unkown
page read and write
16C778E2000
unkown
page readonly
7FFD9B2F2000
trusted library allocation
page read and write
16C79F50000
heap
page read and write
7FFD9B3D6000
trusted library allocation
page execute and read and write
16C7D02F000
trusted library allocation
page read and write
21369F6B000
heap
page read and write
16C002C2000
trusted library allocation
page read and write
4E7810D000
stack
page read and write
2424B0D0000
heap
page read and write
16C77B72000
heap
page read and write
16C79F9F000
heap
page read and write
7FFD9B3AC000
trusted library allocation
page execute and read and write
346E000
stack
page read and write
2424B080000
heap
page read and write
276F0FD0000
heap
page read and write
16C7793C000
unkown
page readonly
16C0017B000
trusted library allocation
page read and write
2136A1C5000
heap
page read and write
16C7CF45000
trusted library allocation
page read and write
16C77A55000
heap
page read and write
2424AE80000
heap
page read and write
3320000
heap
page read and write
16C79F70000
heap
page read and write
16C7D01F000
trusted library allocation
page read and write
16C7BBE0000
heap
page read and write
276F1275000
heap
page read and write
7FFD9B4B0000
trusted library allocation
page read and write
16C10001000
trusted library allocation
page read and write
7FFD9B302000
trusted library allocation
page read and write
2424AEA0000
heap
page read and write
7FFD9B31D000
trusted library allocation
page execute and read and write
16C77AA5000
heap
page read and write
276F1280000
heap
page read and write
16C77C50000
trusted library allocation
page read and write
16C79FB8000
heap
page read and write
318D000
stack
page read and write
16C7B500000
heap
page read and write
16C77B7D000
heap
page read and write
58707FC000
stack
page read and write
16C77B60000
heap
page read and write
2136A060000
heap
page read and write
308D000
stack
page read and write
276F1270000
heap
page read and write
16C77B7A000
heap
page read and write
7FFD9B3A6000
trusted library allocation
page read and write
16C77D45000
heap
page read and write
16C77A20000
heap
page read and write
925A97D000
stack
page read and write
2424B090000
heap
page read and write
58704FF000
stack
page read and write
16C7A0F0000
heap
page read and write
7FFD9B310000
trusted library allocation
page read and write
21369E60000
heap
page read and write
16C00288000
trusted library allocation
page read and write
16C7D047000
trusted library allocation
page read and write
276F10FB000
heap
page read and write
58703FC000
stack
page read and write
16C77B44000
heap
page read and write
16C779E0000
heap
page read and write
7FFD9B490000
trusted library allocation
page read and write
58706FE000
stack
page read and write
4E784FF000
unkown
page read and write
16C7D060000
trusted library allocation
page read and write
2136A1C0000
heap
page read and write
16C77C83000
trusted library allocation
page read and write
2424B085000
heap
page read and write
7FFD9B31B000
trusted library allocation
page execute and read and write
16C79E54000
heap
page execute and read and write
16C778E0000
unkown
page readonly
16C79F53000
heap
page read and write
There are 145 hidden memdumps, click here to show them.