IOC Report
CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe

loading gif

Files

File Path
Type
Category
Malicious
CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
 malicious
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\0f40a9a4-7ba9-4798-b98b-f18214009bbd.e7219a3a-5edb-4393-8e4b-a78a641e7e36.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\0f40a9a4-7ba9-4798-b98b-f18214009bbd.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\3843bffb-4eef-4da1-af04-618c0facc656.down_data
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1920x1080, components 3
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\3843bffb-4eef-4da1-af04-618c0facc656.e7219a3a-5edb-4393-8e4b-a78a641e7e36.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\3843bffb-4eef-4da1-af04-618c0facc656.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\4aa5b1fb-1301-4194-8203-1cbb67304ae7.down_data
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.1 (Windows), datetime=2021:11:11 06:55:38]
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\4aa5b1fb-1301-4194-8203-1cbb67304ae7.e160842f-d7d2-487c-becb-ff7f735e3216.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\4aa5b1fb-1301-4194-8203-1cbb67304ae7.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\585053d0-ba98-49e5-b1a4-c6f5d9974c26.efb8d39c-14d5-4f68-9688-1978db758a90.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\585053d0-ba98-49e5-b1a4-c6f5d9974c26.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\8086b025-ce16-4435-9cc3-d2a0f33fe026.down_data
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.1 (Windows), datetime=2021:11:11 06:54:34]
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\8086b025-ce16-4435-9cc3-d2a0f33fe026.efb8d39c-14d5-4f68-9688-1978db758a90.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\8086b025-ce16-4435-9cc3-d2a0f33fe026.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\8d48d2a6-6a56-420d-bb18-5dfe26c1259c.c22ac765-aa10-4c35-8f7c-a01d4239152c.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\8d48d2a6-6a56-420d-bb18-5dfe26c1259c.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\aa790838-db48-4eec-9b8a-be8242eb173a.56802ae0-e7ec-49c1-9ab4-e41cf1ffbd66.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\aa790838-db48-4eec-9b8a-be8242eb173a.down_data
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.2 (Windows), datetime=2022:03:03 09:46:40]
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\aa790838-db48-4eec-9b8a-be8242eb173a.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\b554ff5d-428f-46a5-8fa9-db35cc2cdf59.e160842f-d7d2-487c-becb-ff7f735e3216.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\b554ff5d-428f-46a5-8fa9-db35cc2cdf59.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\dd6a1354-220a-435c-9960-7f2e2f731c6f.5e70bb71-9767-4cfd-9295-d09782f797ca.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\dd6a1354-220a-435c-9960-7f2e2f731c6f.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\e9594213-9e57-49dd-91fb-0ee2aae6c086.56802ae0-e7ec-49c1-9ab4-e41cf1ffbd66.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\e9594213-9e57-49dd-91fb-0ee2aae6c086.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\f9e08879-735a-4e9f-beea-148234195053.c22ac765-aa10-4c35-8f7c-a01d4239152c.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\f9e08879-735a-4e9f-beea-148234195053.down_data
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1080x1920, components 3
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\f9e08879-735a-4e9f-beea-148234195053.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\fce64348-a319-4f43-89cb-85a2ff3766b6.5e70bb71-9767-4cfd-9295-d09782f797ca.down_meta
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\fce64348-a319-4f43-89cb-85a2ff3766b6.down_data
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.2 (Windows), datetime=2022:03:03 09:45:32]
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\AC\BackgroundTransferApi\fce64348-a319-4f43-89cb-85a2ff3766b6.up_meta_secure
data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338387\1667478730 (copy)
Unicode text, UTF-16, little-endian text, with very long lines (25333), with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338387\1667478730.~tmp
Unicode text, UTF-16, little-endian text, with very long lines (25333), with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338388\eventbeacons.dat (copy)
ASCII text, with very long lines (601), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338388\eventbeacons.dat.~tmp
ASCII text, with very long lines (601), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338388\eventbeacons.dat~RFf6a9d0.TMP (copy)
ASCII text, with very long lines (601), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338388\imprbeacons.dat (copy)
ASCII text, with very long lines (1749), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\338388\imprbeacons.dat.~tmp
ASCII text, with very long lines (1749), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\88000045\1667478730 (copy)
Unicode text, UTF-16, little-endian text, with very long lines (3298), with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\ContentManagementSDK\Creatives\88000045\1667478730.~tmp
Unicode text, UTF-16, little-endian text, with very long lines (3298), with no line terminators
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280815\9dbf5cda030a4e60a261641156804856_1 (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\280815\9dbf5cda030a4e60a261641156804856_1.~tmp
JSON data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338388\96bc58feee9343f4adb4276226731ce3_1 (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338388\96bc58feee9343f4adb4276226731ce3_1.~tmp
JSON data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338389\03d0615dae6b45498e652e3e555b3e3d_1 (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\TargetedContentCache\v3\338389\03d0615dae6b45498e652e3e555b3e3d_1.~tmp
JSON data
dropped
C:\Users\user\AppData\Local\Temp\nsdCB34.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Shoved\Factorist\dialog-warning-symbolic.symbolic.png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Roaming\Shoved\skrupforelskede.bin
data
dropped
There are 39 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
 malicious
C:\Windows\System32\dllhost.exe
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
C:\Windows\System32\backgroundTaskHost.exe
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
C:\Windows\System32\dllhost.exe
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
C:\Windows\System32\BackgroundTransferHost.exe
"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1
C:\Windows\System32\BackgroundTransferHost.exe
"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.1
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ieinstal.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ielowutil.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ExtExport.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ExtExport.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ExtExport.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ExtExport.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ExtExport.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ExtExport.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ExtExport.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ExtExport.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Program Files (x86)\Internet Explorer\ExtExport.exe
C:\Users\user\Desktop\CONTRACT_REVISED-SHIPMENT-DOCUMENTS_EXPORTS_REFERENCE-QT63637-02993900299348.exe
C:\Windows\System32\backgroundTaskHost.exe
"C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:App.AppXmtcan0h2tfbfy7k9kn8hbxb6dmzz1zh0.mca
There are 27 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://nsis.sf.net/NSIS_ErrorError
unknown

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bestyrelsesformanden
Knsdiskriminering
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Unengrossed\assistance\Irrer36\Trasker
Gloomings
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Investigational\Phenomenally\Abortive
nettoprisens
HKEY_CURRENT_USER\SOFTWARE\Retssags\Minigolfens\Cerutterne\Pisset
Dactylopius
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common\TaskWatchdog
FlushPlacementsEventCacheTask
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common\TaskWatchdog
ContentDeliveryManager.Background.RefreshCacheTask
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common\TaskWatchdog
ContentDeliveryManager.Background.SubscribedContent-338389.UpdatePlacementTask
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common\TaskWatchdog
ContentDeliveryManager.Background.SubscribedContent-310091.UpdatePlacementTask
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common\TaskWatchdog
ContentDeliveryManager.Background.SubscribedContent-280815.UpdatePlacementTask
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common\TaskWatchdog
ContentDeliveryManager.Background.SubscribedContent-338388.UpdatePlacementTask
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\280815\Batches\1667478696\ImpressionRecords
128000000001627409
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338389\Batches\1667478696\ImpressionRecords
128000000001627409
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\280815\Batches\1667478696
LastSelectionEmpty
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338389\Batches\1667478696
LastSelectionEmpty
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338388\Batches\1667478697\ImpressionRecords
128000000000402926
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338388\Batches\1667478697
LastSelectionEmpty
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\338388\1667478697`128000000000402926`0
Availability
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\338388\1667478697`128000000000402926`0
TimeStamp
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\280815\1667478696`128000000001627409`0
Availability
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\280815\1667478696`128000000001627409`0
TimeStamp
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\338389\1667478696`128000000001627409`0
Availability
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\338389\1667478696`128000000001627409`0
TimeStamp
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\338388\1667478697`128000000000402926`0\Actions
//item[0]/property[onRender]
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338388\Batches\1667478697
ImpressionTimeForSelectedIndex
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\280815\1667478696`128000000001627409`0\Actions
//item[0]/property[noOp]
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\338389\1667478696`128000000001627409`0\Actions
//item[0]/property[noOp]
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\CacheState
OfflineImpressionCountDatapoints
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\CacheState
OfflineTimeDatapoints
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\CacheState
OfflineImpressionCountDatapoints
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\CacheState
OfflineTimeDatapoints
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\Batches\1667478730
DataSignature
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\Batches\1667478730
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\Batches\1667478730
DataSignature
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
2158c55723c14af0c30c7aafe4020aec95cb2eda148e7ca6a75034a8d5c5ae85
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
178764b5981a2aee4c1fc7d893b8a2d95269220d41eede955e9c867ff12350d5
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
32d6c3b77f79c994287f18a9e394a4c647daf89026c18d1d25ddcadc8a70b531
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
6be1c3a3d724301812ee103a5aec7433c46a3c9115c97fb13883704815c24367
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
86ff803d03a9f7dd72f32ca9f45f900b7e9007aa4de113108c9834e5cde15bba
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
d3eedb83164482c35b9bf5057a67514a6d30ccc1c43cadacc08c0526ac994779
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\Batches\1667478730
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common\TaskWatchdog
ContentDeliveryManager.Background.SubscribedContent-338387.HandleNewCreativesTask_ManualCleanup
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{8086b025-ce16-4435-9cc3-d2a0f33fe026}
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{4aa5b1fb-1301-4194-8203-1cbb67304ae7}
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{f9e08879-735a-4e9f-beea-148234195053}
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{3843bffb-4eef-4da1-af04-618c0facc656}
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{aa790838-db48-4eec-9b8a-be8242eb173a}
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{fce64348-a319-4f43-89cb-85a2ff3766b6}
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common\TaskWatchdog
ContentDeliveryManager.Background.SubscribedContent-338387.HandleNewCreativesTask
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common
TaskExecutionCountSinceLastReset
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338389
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338389
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-310091
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-310091
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-280815
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-280815
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338388
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338388
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\310091
PreviousContentRotationTime
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-310091
SupportedRenderTriggers
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-310091
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
RenderedCreativeIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\280815\Batches\1667478696
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338389\Batches\1667478696
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338388\Batches\1667478697
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338388\Batches\1632305937\ImpressionRecords
WW_128000000002831129_EN-US
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338388\Batches\1632305937
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\338388
PreviousContentRotationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\338388
ContentId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\338388
ShortContentId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\338388
Availability
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\338388
HasContent
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\338388
LastUpdated
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-310091
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-310091
ConsecutiveRenderFailureCount
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\280815\Batches\1632305936\ImpressionRecords
128000000001627409
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\280815\Batches\1632305936
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\280815
PreviousContentRotationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\280815
ContentId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\280815
ShortContentId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\280815
LastUpdated
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338389\Batches\1632305936\ImpressionRecords
128000000001627409
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338389\Batches\1632305936
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\SubscribedContent\338389
PreviousContentRotationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\338389
ContentId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\338389
ShortContentId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions\338389
LastUpdated
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common
UserIdentity
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common
HashedUserIdentity
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338388\Batches\1667478697\ImpressionRecords
128000000000402926
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\DeviceTokens\MSA
Value
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\DeviceTokens\MSA
TimeStamp
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\DeviceTokens\MSA
Value
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\DeviceTokens\MSA
TimeStamp
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-280815
SupportedRenderTriggers
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-280815
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
RenderedCreativeIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\280815\Batches\1667478696\ImpressionRecords
128000000001627409
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338388\Batches\1667478697\ImpressionRecords
128000000000402926
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-280815
SupportedRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
LastRenderedTimes
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338389
SupportedRenderTriggers
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338389
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
RenderedCreativeIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338389\Batches\1667478696\ImpressionRecords
128000000001627409
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
NextRotationTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-280815
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
LastRenderedTimes
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-280815
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-280815
ConsecutiveRenderFailureCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-280815
HealthEvaluation
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
NextRotationTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338389
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338388\Batches\1667478697\ImpressionRecords
128000000000402926
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338389
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338389
ConsecutiveRenderFailureCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338389
HealthEvaluation
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
LastImpressionTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338388
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338388
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ScheduledWorkItems\ContentDeliveryManager.Background.RefreshCacheTask\SubscribedContent-338388
DueDateTime
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
NextRefreshTimes
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
NextRotationTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338388
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338388
SupportedRenderTriggers
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338388
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338388
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
RenderedCreativeIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338388\Batches\1667478697\ImpressionRecords
128000000000402926
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\CacheState
FilledOpportunities
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\CacheState
MissedOpportunities
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\CacheState
OfflineImpressionCount
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\CacheState
LastSuccessfulAdRequestTime
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045
ExcludedEntities
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045
FeedbackProvidedEntities
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045
DeprecatedCreatives
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045
WithdrawnCreatives
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045
EventEntities
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338388
SupportedRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
LastRenderedTimes
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
NextRotationTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338388
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338388
RetryUpdateRenderTriggers
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338388
ConsecutiveRenderFailureCount
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338388
HealthEvaluation
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\CacheState
FilledOpportunities
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\CacheState
MissedOpportunities
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\CacheState
OfflineImpressionCount
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\CacheState
LastSuccessfulAdRequestTime
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387
ExcludedEntities
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387
FeedbackProvidedEntities
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387
DeprecatedCreatives
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387
WithdrawnCreatives
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387
EventEntities
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\Batches\1632305954
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
LastRefreshTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000045
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\Batches\1631232806
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\Batches\1631232806\ImpressionRecords
128000000001627409
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\88000045\Batches\1631232806
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common
TaskExecutionCountSinceLastReset
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\Batches\1632305955
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
LastRefreshTimes
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
NextRotationTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000045
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000045
HealthEvaluation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338387
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-88000045
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ScheduledWorkItems\ContentDeliveryManager.Background.RefreshCacheTask\SubscribedContent-88000045
DueDateTime
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
NextRefreshTimes
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
e4b6cf7835c0c61248be30e9e9baacb20c910d31f24fa2476cc35ab2c9acbf4c
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
b676c9116b9d2b1bc57089f522ce3b52b9a6c056406b202e6787b5016e9c1ee7
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
a05ddd36a35d41d8407134ded41b831916b63e04ccbdc3de114173546de66693
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
add4030fae0a96ceed0ed5039e46b6296e894fb2f988c98e4e9808b37b6bc5e2
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
feaf479fee2db539bb09977f9fa4c4d24d0fde25baeabb179e9c56c329739841
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
66b709cc80355e2d89ab31396d3ba991c013e5bb352f80dbf3b8537f5cd01192
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\Batches\1631232806
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\Batches\1631232806\ImpressionRecords
WW_128000000002396809_EN-US
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\Batches\1631232806\ImpressionRecords
WW_128000000002364389_EN-US
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\Batches\1631232806\ImpressionRecords
WW_128000000001729149_EN-US
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Creatives\338387\Batches\1631232806
BatchState
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-88000045
ConsecutiveRefreshCacheFailureCount
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
2158c55723c14af0c30c7aafe4020aec95cb2eda148e7ca6a75034a8d5c5ae85
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
178764b5981a2aee4c1fc7d893b8a2d95269220d41eede955e9c867ff12350d5
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
32d6c3b77f79c994287f18a9e394a4c647daf89026c18d1d25ddcadc8a70b531
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
6be1c3a3d724301812ee103a5aec7433c46a3c9115c97fb13883704815c24367
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
86ff803d03a9f7dd72f32ca9f45f900b7e9007aa4de113108c9834e5cde15bba
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
d3eedb83164482c35b9bf5057a67514a6d30ccc1c43cadacc08c0526ac994779
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{8086b025-ce16-4435-9cc3-d2a0f33fe026}
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{4aa5b1fb-1301-4194-8203-1cbb67304ae7}
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{f9e08879-735a-4e9f-beea-148234195053}
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{3843bffb-4eef-4da1-af04-618c0facc656}
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{aa790838-db48-4eec-9b8a-be8242eb173a}
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387\CurrentDownloadIds
{fce64348-a319-4f43-89cb-85a2ff3766b6}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338387
NULL
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ScheduledWorkItems\ContentDeliveryManager.Background.RefreshCacheTask\SubscribedContent-338387
DueDateTime
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
NextRefreshTimes
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements\SubscribedContent-338387
ConsecutiveRefreshCacheFailureCount
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Common
TaskExecutionCountSinceLastReset
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
037c36f003651fb9c10e544af926af8dd51fa017892c82b2d8c8f3a6ab154a25
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
124330a1567d1db69164b489c9f5cdb5e52962e0856ddcfed23198380eba958c
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
1247a657fb7ca61cda4214de9c943daaebada7b739fe43a43074c015ba0b4455
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
178764b5981a2aee4c1fc7d893b8a2d95269220d41eede955e9c867ff12350d5
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
1b0fc0397057d19440ddd8b0978739c887718998213fdd424b0f7e130d03dc84
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
1bcd41517ed0bc63bb85b376a9f8fffc3273cad2542b1080f6d963050c7074d8
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
1e29434802ce1e4aaa7ca8e8d09830cdd3386a82de207c017fe769b3fc334422
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
2158c55723c14af0c30c7aafe4020aec95cb2eda148e7ca6a75034a8d5c5ae85
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
2e2695a085e8e1333cf0c6577d784d631b0a0a4718813b957d58b384174dd19a
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
329de9feb1c1f1b8b0cd24b8d9fb181a6c2260a73aeeaa1a93e5889f73360e01
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
32d6c3b77f79c994287f18a9e394a4c647daf89026c18d1d25ddcadc8a70b531
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
3582a64d9911f28ec0c3cd731aeca3759e4a9b15f2e1f0cca4a3fbf3c8ecb37f
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
3b00aab82c38ed8a417bb06cb23c4a4601e603274db062b7a86f3d6a063121db
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
438dd2253fdfd743b50f0240d03e48ab81b476fef32a6abd665fa7ccb2a37014
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
43d8ffcd6502649c92ba1968a079358fc892619a43ea312956848f410a81b9c0
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
44fbc92b30a0574dbcaee0283493b21720e0701cc02f2774e3c02a097b7ec873
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
483204ee83c47b98c9dc14028a08d447208e898c22de8102e0d5a2f4019690fb
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
4d37196bc735aaeee1b7479ffd7be02fd8efaaa4175d538e592c451486a1643c
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
543e5e4bd2ce106236c6cfa6badd58b93c9081df0c809dd462172bf9e0695e02
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
5610f11de7cf25b1d4545692939ff7a97061024c9a742ef1b02e3ef6c7d7f0cc
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
5a97f7b966428142752537dd75f9b201e0049294b876e3f4f2a9a55676c0f2d7
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
5c8a2166dbfbd8903e112bb8b56e80318bbce952fdbcfb408c4121bc73b813a5
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
602a1146dfab66bddf10eb6ef54fbaff7c71ccfffb7ac43b21e6e0e3348370b9
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
6694292562b8278f722fccadbe11f33bd66a4e3eb075a2783d9a5c5736738099
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
6be1c3a3d724301812ee103a5aec7433c46a3c9115c97fb13883704815c24367
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
6d63c6516ae1a7e40eea65da02de168692eb5c3f1bf44f97063858c3198e0171
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
7581a8393b159a6ebfaef1e9425d1af2b352933f574353b73d73e0ae87a28702
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
82034fce4c0cc2c715e07bd60ec5799e40a9f510e49bec0181cae522d73a585c
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
86ff803d03a9f7dd72f32ca9f45f900b7e9007aa4de113108c9834e5cde15bba
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
93aef802584855accbd164af76d2ec709425a8ff6d9c14b32bb4602916bb90fc
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
9511e5e0a9d328dc1aceabc9e9eef27035aa872d65a5e2a1f519204e75e017e6
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
9a647e84eb19e07ff880b901f9fe63bdd0b3398077d29ad0451ea29af2eecd50
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
9c56fbe6911e0cc3dd9ee7c5db9aceae4d89fc0a024d1853aef99bfe34841b74
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
a3df3c6e117ce742bdc04f12fca107bfa132234a19693292047aff0caf4a4623
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
b1672d54f7a2d514515e7df5ec73e6ccfee19e9b6d1b6c9d7b5ab0646b336f00
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
b42047dd6a7d01fa1ed28c41dd260199cde6f48975f871301701fcaf747efd95
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
b78338a9ebe9729a31ddf960212a7e5a85989e1544809f7d064de2732bb1ce7b
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
b7ad662c8eece40bedf5d527b3481c3a43df659de9699fbd1b687e15eb4df0fc
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
b80853f7463642ea10db625d8f3a9559e0892b4f80fcc2d6f326c3ec6b342428
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
b83a362010bc5d3da0bb84a4425245d61c025ecc09a50b34a2c282856cb7b13f
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
c3a6938f7873041b8da235f89746644a718d2686e171798507391b8d923d59c3
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
c98c468bdf4e58c042ff0ba015cb7b9a579701c06cf9d1508c0eed76ecabf796
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
cf502df8101535af9189bef1c74c6c16010496a80cffcb9fa9ae182ebf8f70bd
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
d3eedb83164482c35b9bf5057a67514a6d30ccc1c43cadacc08c0526ac994779
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
db13e6613606261e295c366b3400b7db9497f7721833709005687624cef2c870
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
df0d0984d439371960407f90ea85fb0ccfd3c500d5bb9a55eb375305d2a3b0e3
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
f27db0ddb4efcdc9841f1fd896e5e35cab177fa46785e52c629d27f568a7a4fa
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
ff2a6839090e2655d227919e453fab8d338997d2981012e5cdf256c84fb626ce
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
2158c55723c14af0c30c7aafe4020aec95cb2eda148e7ca6a75034a8d5c5ae85
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
178764b5981a2aee4c1fc7d893b8a2d95269220d41eede955e9c867ff12350d5
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
32d6c3b77f79c994287f18a9e394a4c647daf89026c18d1d25ddcadc8a70b531
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
6be1c3a3d724301812ee103a5aec7433c46a3c9115c97fb13883704815c24367
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
86ff803d03a9f7dd72f32ca9f45f900b7e9007aa4de113108c9834e5cde15bba
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\ContentManagementSDK\Assets
d3eedb83164482c35b9bf5057a67514a6d30ccc1c43cadacc08c0526ac994779
\REGISTRY\A\{636c0231-0539-21c6-b16a-a85938a8f88e}\LocalState\Placements
NextRotationTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338387
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Health\Placement-SubscribedContent-338387
HealthEvaluation
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Common\TaskWatchdog
FlushPlacementsEventCacheTask
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Common
TaskExecutionCountSinceLastReset
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
\REGISTRY\A\{3a05e644-9c9b-aa2c-4a20-0099f9e6e2e0}\LocalState\Placements
SelectedPlacementIds
There are 277 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
2B90000
trusted library allocation
page execute and read and write
 malicious
6B3000
heap
page read and write
2E40000
unkown
page readonly
22E4000
heap
page read and write
6B3000
heap
page read and write
3250000
unkown
page read and write
2FF0000
unkown
page readonly
2B90000
unkown
page readonly
6B3000
heap
page read and write
6B3000
heap
page read and write
3240000
unkown
page readonly
180000
remote allocation
page read and write
180000
remote allocation
page read and write
2B90000
unkown
page readonly
6B3000
heap
page read and write
6B3000
heap
page read and write
6B3000
heap
page read and write
3250000
remote allocation
page read and write
2EB0000
unkown
page read and write
2F70000
unkown
page readonly
2A90000
unkown
page read and write
6B3000
heap
page read and write
2BF0000
unkown
page readonly
4B0000
unkown
page readonly
73844000
unkown
page readonly
408000
unkown
page readonly
2BA0000
unkown
page read and write
2BA0000
unkown
page read and write
2B80000
unkown
page readonly
2630000
heap
page read and write
2DE0000
unkown
page readonly
2700000
remote allocation
page read and write
2CF0000
unkown
page readonly
4B0000
unkown
page readonly
2DF0000
unkown
page read and write
6B3000
heap
page read and write
401000
unkown
page execute read
1C400000
heap
page read and write
27F0000
remote allocation
page read and write
2E50000
unkown
page read and write
2FC0000
remote allocation
page read and write
40A000
unkown
page write copy
22B0000
heap
page read and write
410000
remote allocation
page read and write
6B3000
heap
page read and write
150000
remote allocation
page read and write
410000
remote allocation
page read and write
6B3000
heap
page read and write
3250000
unkown
page read and write
1C570000
trusted library allocation
page read and write
2E40000
unkown
page readonly
47B000
unkown
page read and write
2BF0000
remote allocation
page read and write
2AC0000
trusted library allocation
page read and write
3250000
remote allocation
page read and write
2DE0000
unkown
page readonly
40A000
unkown
page read and write
2B80000
unkown
page readonly
4B0000
unkown
page readonly
27F0000
remote allocation
page read and write
6B3000
heap
page read and write
6B3000
heap
page read and write
96000
stack
page read and write
6B3000
heap
page read and write
2CE0000
unkown
page readonly
370000
remote allocation
page read and write
1C3F0000
heap
page read and write
28E0000
remote allocation
page read and write
73846000
unkown
page readonly
431000
unkown
page read and write
27F0000
unkown
page readonly
6B3000
heap
page read and write
27F0000
unkown
page readonly
2BF0000
unkown
page readonly
517000
heap
page read and write
6B3000
heap
page read and write
6B3000
heap
page read and write
440000
unkown
page read and write
3250000
remote allocation
page read and write
1D0000
unclassified section
page readonly
2FC0000
unkown
page read and write
2620000
remote allocation
page read and write
2EA0000
unkown
page readonly
30B0000
remote allocation
page read and write
2FA0000
unkown
page readonly
2FC0000
unkown
page read and write
150000
remote allocation
page read and write
6DD000
heap
page read and write
20000
unclassified section
page readonly
67F000
heap
page read and write
408000
unkown
page readonly
2620000
remote allocation
page read and write
29E0000
remote allocation
page read and write
2EA0000
unkown
page readonly
2FF0000
unkown
page readonly
6B3000
heap
page read and write
2FA0000
unkown
page readonly
460000
unkown
page read and write
3250000
unkown
page read and write
6B3000
heap
page read and write
5D0000
remote allocation
page read and write
2F80000
unkown
page readonly
6B3000
heap
page read and write
27F0000
remote allocation
page read and write
3240000
unkown
page readonly
6B3000
heap
page read and write
2F80000
unkown
page readonly
2E50000
unkown
page read and write
4A0000
unkown
page readonly
2A80000
trusted library allocation
page read and write
370000
remote allocation
page read and write
2DD0000
unkown
page readonly
6B1000
heap
page read and write
2FB0000
unkown
page readonly
2D00000
unkown
page read and write
47E000
unkown
page readonly
2BF0000
remote allocation
page read and write
510000
heap
page read and write
47E000
unkown
page readonly
2A80000
unkown
page readonly
2A90000
unkown
page read and write
29D0000
remote allocation
page read and write
2CB0000
remote allocation
page read and write
950000
trusted library allocation
page read and write
2D00000
unkown
page read and write
5D0000
remote allocation
page read and write
6B3000
heap
page read and write
6B3000
heap
page read and write
6A0000
heap
page read and write
3240000
unkown
page readonly
22E0000
heap
page read and write
2FF0000
unkown
page readonly
29E0000
remote allocation
page read and write
6B3000
heap
page read and write
2DF0000
unkown
page read and write
2F70000
unkown
page readonly
27F0000
unkown
page readonly
2F90000
unkown
page read and write
29E0000
remote allocation
page read and write
29D0000
remote allocation
page read and write
6D0000
heap
page read and write
6B3000
heap
page read and write
2B90000
unkown
page readonly
2A40000
trusted library allocation
page read and write
68D000
heap
page read and write
C75000
heap
page read and write
400000
unkown
page readonly
6B3000
heap
page read and write
6B3000
heap
page read and write
6B3000
heap
page read and write
150000
remote allocation
page read and write
401000
unkown
page execute read
5D0000
remote allocation
page read and write
6B3000
heap
page read and write
6B3000
heap
page read and write
73841000
unkown
page execute read
28E0000
remote allocation
page read and write
2F70000
unkown
page readonly
27F0000
remote allocation
page read and write
2A80000
unkown
page readonly
437000
unkown
page read and write
2EB0000
unkown
page read and write
2700000
remote allocation
page read and write
1C3F1000
heap
page read and write
27D0000
remote allocation
page read and write
400000
unkown
page readonly
28E0000
remote allocation
page read and write
650000
heap
page read and write
2F90000
unkown
page read and write
2CE0000
unkown
page readonly
2BF0000
unkown
page readonly
2FA0000
unkown
page readonly
6B3000
heap
page read and write
2DD0000
unkown
page readonly
2BA0000
unkown
page read and write
6B3000
heap
page read and write
2BF0000
unkown
page readonly
657000
heap
page read and write
2DD0000
unkown
page readonly
2BF0000
unkown
page readonly
2EA0000
unkown
page readonly
6B3000
heap
page read and write
2FB0000
unkown
page readonly
2620000
remote allocation
page read and write
2B80000
unkown
page readonly
2A80000
unkown
page readonly
6B3000
heap
page read and write
2E40000
unkown
page readonly
27D0000
remote allocation
page read and write
2DE0000
unkown
page readonly
6B3000
heap
page read and write
6B3000
heap
page read and write
27F0000
remote allocation
page read and write
2F80000
unkown
page readonly
2CF0000
unkown
page readonly
2EB0000
unkown
page read and write
2D00000
unkown
page read and write
4A0000
unkown
page readonly
2FC0000
remote allocation
page read and write
2CB0000
remote allocation
page read and write
180000
remote allocation
page read and write
29D0000
remote allocation
page read and write
2BF0000
unkown
page readonly
30B0000
remote allocation
page read and write
27F0000
remote allocation
page read and write
2990000
remote allocation
page read and write
19A000
stack
page read and write
6B3000
heap
page read and write
4C0000
unkown
page read and write
2A90000
unkown
page read and write
370000
remote allocation
page read and write
2CE0000
unkown
page readonly
6B3000
heap
page read and write
2CB0000
remote allocation
page read and write
30000
heap
page read and write
410000
remote allocation
page read and write
516000
heap
page read and write
6B3000
heap
page read and write
2990000
remote allocation
page read and write
2CB0000
remote allocation
page read and write
2FC0000
remote allocation
page read and write
2F90000
unkown
page read and write
2CE0000
trusted library allocation
page read and write
4C0000
unkown
page read and write
2FB0000
unkown
page readonly
2CF0000
unkown
page readonly
6B3000
heap
page read and write
2BF0000
remote allocation
page read and write
C70000
heap
page read and write
2700000
remote allocation
page read and write
30B0000
remote allocation
page read and write
2DF0000
unkown
page read and write
2CB0000
remote allocation
page read and write
4A0000
unkown
page readonly
2FC0000
unkown
page read and write
6B3000
heap
page read and write
27D0000
remote allocation
page read and write
2E50000
unkown
page read and write
2CB0000
remote allocation
page read and write
4C0000
unkown
page read and write
1C530000
trusted library allocation
page read and write
73840000
unkown
page readonly
2D19000
trusted library allocation
page read and write
2990000
remote allocation
page read and write
There are 234 hidden memdumps, click here to show them.