IOC Report
dzfp_24912000000008328502_20240419143854.xml

loading gif

Files

File Path
Type
Category
Malicious
dzfp_24912000000008328502_20240419143854.xml
XML 1.0 document, Unicode text, UTF-8 text, with very long lines (830)
initial sample
C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\06a70737-864b-4546-8b1a-1d8c88628647.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\3fa66b0b-bf8e-4063-a590-d3f6b4b4830b.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\4629279e-b6ec-431f-bde1-2f35278d8ba4.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\62ef9b08-3af3-425f-a516-5ec99499cd84.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\9ac9227f-3399-4bc8-ac8b-3d846f3ad9c8.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\6db0f0e0-6274-4f85-8b7d-c0d12abd4eb8.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-66227DE0-1BA8.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-66227DE1-1CEC.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-66227DF2-23E8.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-66227DFA-1844.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\12694d3f-c08e-4cf9-b86e-35d1a8081f8b.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\35f4b563-c4e9-4e49-a848-f6a8e8827ce5.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AssistanceHome\AssistanceHomeSQLite
SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 1
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db
SQLite 3.x database, last written using SQLite version 3042000, file counter 14, database pages 8, cookie 0xe, schema 4, UTF-8, version-valid-for 14
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityComp
SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 1, cookie 0x1, schema 4, UTF-8, version-valid-for 1
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 8, cookie 0x8, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 39, 1st free page 10, free pages 4, cookie 0x45, schema 4, UTF-8, version-valid-for 3
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 28, cookie 0x1d, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network Action Predictor
SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 11, cookie 0x6, schema 4, UTF-8, version-valid-for 3
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\03898bcb-0fd2-47f6-8dda-fffc82f2fbac.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\13ae6ec4-df8f-4ace-87ab-bdb1d31ab436.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\255162c9-b550-424e-bbbe-fee59c2eb491.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\4c8aeb57-f17b-4be4-816d-edd647d9599b.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\6ff4db96-2905-40ef-9026-65080ecdfbf8.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\9c993cd8-bc59-47eb-91b0-0ac07fcff3b2.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF2d111.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF3bb62.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3035005, file counter 4, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 4
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF2ac05.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF2b8b7.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity~RF2d121.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Trust Tokens
SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 9, cookie 0x6, schema 4, UTF-8, version-valid-for 3
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\e9b6e2a9-9385-406d-a56a-a8be46ca8fb3.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF317a0.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF350c1.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF3a9ce.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\PreferredApps
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF302d0.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\0ec3ee9a-ef74-4093-917d-b7db1b8b4c64.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\2301286b-986c-44d4-83b0-61794e46eb40.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\852bc037-8b19-4cf2-b678-b2eddb8562a5.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State~RF3c70a.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3035005, file counter 4, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 4
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF2b8b7.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens
SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 9, cookie 0x6, schema 4, UTF-8, version-valid-for 3
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\e9575d4e-90e3-4f07-9e93-998495c95fc8.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Top Sites
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 7, 1st free page 5, free pages 2, cookie 0x5, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 4, database pages 87, cookie 0x66, schema 4, UTF-8, version-valid-for 4
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data-journal
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ae7894b1-fc40-43ca-b4a5-57987c431c24.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json
ASCII text, with very long lines (3951), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\bab5c480-888a-4677-87cc-502c484788d9.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\c0990947-29ad-460a-b078-db5473902c34.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ca59d9f0-43a8-4344-b4b2-03940791b0dd.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\dc6fc664-055c-4ae2-9226-ad5c52084db8.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\e17cfe26-8ab2-4016-9f6c-4ebecf758a09.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 4, cookie 0x2, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF29570.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2957f.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF298fa.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF29919.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2c181.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2d8c2.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2d97e.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2f93b.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2f94a.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3828f.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3a9ae.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3e446.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Safe Browsing\ChromeExtMalware.store (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Safe Browsing\ChromeExtMalware.store_new
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSynchronousLookupUris
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSynchronousLookupUris_0
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-0
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_636976985063396749.rel.v2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations
JSON data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\a1fae29d-a06d-4cca-a4ba-89dbc8f1df2d.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\aaee9ca1-e0f9-47d6-a277-44815ba65dd0.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ad6b345c-8ba9-4368-a94a-098f9e187118.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\c270fc58-e6ce-4521-82be-ca8ddcce2cf5.tmp
JSON data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ced6613d-dbbc-469a-9a51-91c146e7e725.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\fa2be6e7-e6da-4559-bef6-f29537a1a8b3.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{1645AA50-FE58-11EE-8C2C-ECF4BBEA1588}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{1645AA52-FE58-11EE-8C2C-ECF4BBEA1588}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (313), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (311), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (317), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-314712940\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (334), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (307), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (313), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (311), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (313), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (315), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (311), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\favicon[1].ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\xmltreeview[1]
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\0a1dd9ab-abf3-49ce-9e95-05b95517d169.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\4f0d408c-d832-4268-82d0-f650ea03e250.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 276634
dropped
C:\Users\user\AppData\Local\Temp\56142b8a-ba2e-4bd4-890f-ff4d2eeb71f1.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Temp\86ac09a2-9b89-41b5-9532-0573cecb31fa.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\beabc124-d7fe-4bef-b464-6379d4c38320.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Temp\cv_debug.log
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_1145223150\0a1dd9ab-abf3-49ce-9e95-05b95517d169.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_1145223150\CRX_INSTALL\_metadata\verified_contents.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_1145223150\CRX_INSTALL\content.js
Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_1145223150\CRX_INSTALL\content_new.js
Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_1145223150\CRX_INSTALL\manifest.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\86ac09a2-9b89-41b5-9532-0573cecb31fa.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\af\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\am\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ar\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\az\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\be\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\bg\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\bn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ca\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\cs\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\cy\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\da\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\de\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\el\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\en\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\en_CA\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\en_GB\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\en_US\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\es\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\es_419\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\et\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\eu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\fa\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\fi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\fil\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\fr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\fr_CA\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\gl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\gu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\hi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\hr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\hu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\hy\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\id\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\is\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\it\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\iw\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ja\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ka\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\kk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\km\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\kn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ko\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\lo\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\lt\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\lv\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ml\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\mn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\mr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ms\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\my\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ne\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\nl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\no\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\pa\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\pl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\pt_BR\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\pt_PT\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ro\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ru\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\si\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\sk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\sl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\sr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\sv\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\sw\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ta\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\te\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\th\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\tr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\uk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\ur\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\vi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\zh_CN\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\zh_HK\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\zh_TW\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_locales\zu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\_metadata\verified_contents.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\dasherSettingSchema.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\manifest.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\offscreendocument.html
HTML document, ASCII text
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\offscreendocument_main.js
ASCII text, with very long lines (4369)
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\page_embed_script.js
ASCII text
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7404_358194000\CRX_INSTALL\service_worker_bin_prod.js
ASCII text, with very long lines (4369)
dropped
C:\Users\user\AppData\Local\Temp\~DF901DF1FC86737961.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFF8B75C9B10ACD5DD.TMP
data
dropped
There are 295 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --from-ie-to-edge=3 --ie-frame-hwnd=10446
 malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1996,i,10698612074870062609,12499821732164552685,262144 /prefetch:3
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --from-ie-to-edge=3 --ie-frame-hwnd=10446 --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2728 --field-trial-handle=2184,i,11594580017313890881,4442214113381102987,262144 /prefetch:3
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=5952 --field-trial-handle=2184,i,11594580017313890881,4442214113381102987,262144 /prefetch:8
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=6480 --field-trial-handle=2184,i,11594580017313890881,4442214113381102987,262144 /prefetch:8
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=6480 --field-trial-handle=2184,i,11594580017313890881,4442214113381102987,262144 /prefetch:8
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
 malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1216 --field-trial-handle=2072,i,11293785848732824400,2409551121586848513,262144 /prefetch:3
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
 malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=2080,i,7567095657503735584,18263680576250926807,262144 /prefetch:3
malicious
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files (x86)\Microsoft Office\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\user\Desktop\dzfp_24912000000008328502_20240419143854.xml"
C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\user\Desktop\dzfp_24912000000008328502_20240419143854.xml
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6432 CREDAT:17410 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe" --from-ie-to-edge=3 --ie-frame-hwnd=10446
C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe
"C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new
There are 6 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://www.office.com/
unknown
https://chrome.cloudflare-dns.com
unknown
http://www.nytimes.com/
unknown
https://drive-daily-2.corp.google.com/
unknown
https://drive-autopush.corp.google.com/
unknown
https://drive-daily-4.corp.google.com/
unknown
https://www.office.com/Office
unknown
http://www.amazon.com/
unknown
http://www.twitter.com/
unknown
https://drive-daily-1.corp.google.com/
unknown
https://drive-daily-5.corp.google.com/
unknown
https://docs.google.com/
unknown
https://chrome.cloudflare-dns.com/dns-query
162.159.61.3
https://drive-staging.corp.google.com/
unknown
https://www.google.com/chrome
unknown
https://drive-daily-6.corp.google.com/
unknown
https://drive.google.com/
unknown
https://drive-daily-0.corp.google.com/
unknown
http://www.youtube.com/
unknown
https://chromewebstore.google.com/
unknown
http://www.wikipedia.com/
unknown
https://drive-preprod.corp.google.com/
unknown
https://clients2.googleusercontent.com
unknown
http://www.live.com/
unknown
https://chrome.google.com/webstore/
unknown
http://www.reddit.com/
unknown
https://clients2.googleusercontent.com/crx/blobs/AfQPRnlBHVf9QbAmjPnmJQnDwEcerxafOq8p01cAfJ5QoFk2s6gAMnMY_23BNiizXK2e-3smriJGTe2WOZO9s5X2xejbvoKpPILOKN2-0t9ZbrurACaLAMZSmuXX9slHldVQ07B5bvw6KCm_x6CONA/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_76_1_0.crx
142.250.9.132
http://www.google.com/
unknown
https://drive-daily-3.corp.google.com/
unknown
There are 19 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
chrome.cloudflare-dns.com
172.64.41.3
part-0013.t-0009.t-msedge.net
13.107.213.41
googlehosted.l.googleusercontent.com
142.250.9.132
sni1gl.wpc.nucdn.net
152.195.19.97
clients2.googleusercontent.com
unknown

IPs

IP
Domain
Country
Malicious
152.195.19.97
sni1gl.wpc.nucdn.net
United States
131.253.33.239
unknown
United States
162.159.61.3
unknown
United States
239.255.255.250
unknown
Reserved
13.107.213.41
part-0013.t-0009.t-msedge.net
United States
74.125.138.95
unknown
United States
142.250.9.132
googlehosted.l.googleusercontent.com
United States
172.64.41.3
chrome.cloudflare-dns.com
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing
NTPMigrationVer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListXMLVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListXMLVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
SoftwareFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
VendorId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
DeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
SubSysId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
Revision
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListDomainAttributeSet
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
StaleCompatCache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\VersionManager
FirstCheckForUpdateLowDateTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\VersionManager
FirstCheckForUpdateHighDateTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
CompatibilityFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
HomepagesUpgradeVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
SecuritySafe
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\24\417C44EB
@ieframe.dll,-12512
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\AdminActive
{1645AA50-FE58-11EE-8C2C-ECF4BBEA1588}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch
Version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
SearchBandMigrationVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
FullScreen
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery
AdminActive
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
SearchScopesUpgradeVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
DefaultScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
2BB20B33B4171CDAAB6469225AE6A582ED33D7B488
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
KnownProvidersUpgradeTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
DisplayName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconURLFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconPath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
URL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURLFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435B-BC74-9C25C1C588A9}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MAO Settings
DiscardLoadTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
ImageStoreRandomFolder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Suggested Sites
DataStreamEnabledState
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Suggested Sites
MigrationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
IEAppEolNotificationLastShownTimeStamp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{00021493-0000-0000-C000-000000000046}\Enum
Implementing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{00021494-0000-0000-C000-000000000046}\Enum
Implementing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
DownloadRetries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing
NTPFirstRun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
MFV
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion
NextUpdateDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
2BB20B33B4171CDAAB6469225AE6A582ED33D7B488
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LatestUpsellAttemptedSessionTime
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LastStubPath
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0034-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0034-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0041-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0052-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0052-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0054-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0054-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0055-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0055-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0057-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0057-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0059-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0059-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0061-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0062-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0062-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0064-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0064-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0065-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0065-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0072-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0072-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0074-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0074-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0091-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0092-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0092-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0093-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0093-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0098-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0098-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0048-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0048-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0049-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0049-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0051-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0051-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0052-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0052-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0053-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0053-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0053-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0053-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0054-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0054-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0055-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0055-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0055-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0055-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0056-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0056-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0057-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0057-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0058-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0058-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0059-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0059-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0060-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0060-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
media.cdm.origin_data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PrefsLightweight
lw_13bbe73648289fe96dfa1aa1bf23b3da
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
UpsellDisabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
QuietExpirationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
lastrun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\Clients\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\Commands\on-logon-autolaunch
Enabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MicrosoftEdgeAutoLaunch_C366A24065C39A1BE76E148DC2D0A868
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Profiles\Default
ShortcutName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Profiles\Default
ProfileErrorState
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Profiles
EnhancedLinkOpeningDefault
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
dgiklkfkllikcanfonkcabmbdfmgleag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
fikbjbembnmfhppjfnmfkahdhfohhjmg
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ghbmnnjooekpmoecnnnilnnbdlolhkhi
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
iglcjdemknebjbklcgkfaebgojjphkec
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ihmafllikibpmigkcoadcmckbfhibefp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jdiccldimpdaibmpdkjnbmckianbfold
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ncbjelpjchkpbikbpkcchkhkblodoama
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
prefs.preference_reset_time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
dgiklkfkllikcanfonkcabmbdfmgleag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
fikbjbembnmfhppjfnmfkahdhfohhjmg
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ghbmnnjooekpmoecnnnilnnbdlolhkhi
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
iglcjdemknebjbklcgkfaebgojjphkec
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ihmafllikibpmigkcoadcmckbfhibefp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jdiccldimpdaibmpdkjnbmckianbfold
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jmjflgjpcpepeafmmgdpfkogkghcpiha
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ncbjelpjchkpbikbpkcchkhkblodoama
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.reporting
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
media.storage_id_salt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_startup_urls
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.prompt_wave
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.account_id
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.prompt_seed
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_homepage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.last_username
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
default_search_provider_data.template_url_data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
safebrowsing.incidents_sent
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
pinned_tabs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
search_provider_overrides
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.last_account_id
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.prompt_version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
session.startup_urls
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
session.restore_on_startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_default_search
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
prefs.preference_reset_time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
browser.show_home_button
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
homepage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
homepage_is_newtabpage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
lastrun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
lastrun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
There are 646 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
150489D0000
heap
page readonly
15048A00000
heap
page read and write
101F9FE000
unkown
page readonly
101F5FE000
unkown
page readonly
101F8FE000
stack
page read and write
15048B02000
heap
page read and write
101F6FD000
stack
page read and write
101FBFE000
unkown
page readonly
15048A3B000
heap
page read and write
1504A602000
heap
page read and write
150489C0000
heap
page read and write
101F4FE000
stack
page read and write
101FDFE000
unkown
page readonly
101F0F7000
stack
page read and write
15048A13000
heap
page read and write
15048A7F000
heap
page read and write
15048A2F000
heap
page read and write
150489A0000
heap
page read and write
15048A45000
heap
page read and write
101FAFE000
stack
page read and write
15048A60000
heap
page read and write
101FCFB000
stack
page read and write
101F2FF000
stack
page read and write
15048A88000
heap
page read and write
101F7FE000
unkown
page readonly
150489E0000
heap
page read and write
1504A470000
heap
page read and write
101F3FE000
unkown
page readonly
15048A51000
heap
page read and write
15048A25000
heap
page read and write
There are 20 hidden memdumps, click here to show them.