Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
C:\Config.Msi\90cbe1.rbs
|
data
|
dropped
|
||
|
C:\Config.Msi\90cbe5.rbs
|
data
|
modified
|
||
|
C:\ProgramData\Logishrd\{6b7455ae-a32a-4c6f-8651-da4969097604}_logioptionsplus_setup\PageInstalled.gif
|
GIF image data, version 89a, 800 x 400
|
dropped
|
||
|
C:\ProgramData\Logishrd\{6b7455ae-a32a-4c6f-8651-da4969097604}_logioptionsplus_setup\PageLegacyOptions.gif
|
GIF image data, version 89a, 800 x 400
|
dropped
|
||
|
C:\ProgramData\Logishrd\{6b7455ae-a32a-4c6f-8651-da4969097604}_logioptionsplus_setup\PageUnsupportedOs.gif
|
GIF image data, version 89a, 800 x 400
|
dropped
|
||
|
C:\ProgramData\Logishrd\{6b7455ae-a32a-4c6f-8651-da4969097604}_logioptionsplus_setup\logi_installer_shared_optionsplus.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\ProgramData\Logishrd\{6b7455ae-a32a-4c6f-8651-da4969097604}_logioptionsplus_setup\vc_redist.x64.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\ProgramData\Package Cache\.unverified\cab2C04DDC374BD96EB5C8EB8208F2C7C92 (copy)
|
Microsoft Cabinet archive data, many, 5688889 bytes, 14 files, at 0x44 +A "mfc140.dll" +A "mfc140chs.dll", flags 0x4, number
1, extra bytes 20 in head, 380 datablocks, 0x1 compression
|
dropped
|
||
|
C:\ProgramData\Package Cache\.unverified\cab5046A8AB272BF37297BB7928664C9503 (copy)
|
Microsoft Cabinet archive data, many, 1505777 bytes, 51 files, at 0x44 +A "api_ms_win_core_console_l1_1_0.dll" +A "api_ms_win_core_datetime_l1_1_0.dll",
flags 0x4, number 1, extra bytes 20 in head, 130 datablocks, 0x1 compression
|
dropped
|
||
|
C:\ProgramData\Package Cache\.unverified\vcRuntimeAdditional_x64 (copy)
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation
Database, Subject: Visual C++ 2019 X64 Additional Runtime, Author: Microsoft Corporation, Keywords: Installer, Comments: This
installer database contains the logic and data required to install Microsoft Visual C++ 2019 X64 Additional Runtime - 14.24.28127.,
Template: x64;1033, Revision Number: {1FCB6B93-B382-48B7-9485-A319D74F4F84}, Create Time/Date: Sat Sep 28 04:34:06 2019, Last
Saved Time/Date: Sat Sep 28 04:34:06 2019, Number of Pages: 301, Number of Words: 2, Name of Creating Application: Windows
Installer XML Toolset (3.10.4.4718), Security: 2
|
dropped
|
||
|
C:\ProgramData\Package Cache\.unverified\vcRuntimeMinimum_x64 (copy)
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation
Database, Subject: Visual C++ 2019 X64 Minimum Runtime, Author: Microsoft Corporation, Keywords: Installer, Comments: This
installer database contains the logic and data required to install Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.24.28127.,
Template: x64;1033, Revision Number: {5302C21D-28E2-4694-AA81-CE2C11CA6D8B}, Create Time/Date: Sat Sep 28 04:31:14 2019, Last
Saved Time/Date: Sat Sep 28 04:31:14 2019, Number of Pages: 301, Number of Words: 2, Name of Creating Application: Windows
Installer XML Toolset (3.10.4.4718), Security: 2
|
dropped
|
||
|
C:\ProgramData\Package Cache\{282975d8-55fe-4991-bbbb-06a72581ce58}\VC_redist.x64.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\ProgramData\Package Cache\{282975d8-55fe-4991-bbbb-06a72581ce58}\state.rsm
|
data
|
dropped
|
||
|
C:\ProgramData\Package Cache\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}v14.24.28127\packages\vcRuntimeMinimum_amd64\cab1.cab (copy)
|
Microsoft Cabinet archive data, many, 1505777 bytes, 51 files, at 0x44 +A "api_ms_win_core_console_l1_1_0.dll" +A "api_ms_win_core_datetime_l1_1_0.dll",
flags 0x4, number 1, extra bytes 20 in head, 130 datablocks, 0x1 compression
|
dropped
|
||
|
C:\ProgramData\Package Cache\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}v14.24.28127\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi
(copy)
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation
Database, Subject: Visual C++ 2019 X64 Minimum Runtime, Author: Microsoft Corporation, Keywords: Installer, Comments: This
installer database contains the logic and data required to install Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.24.28127.,
Template: x64;1033, Revision Number: {5302C21D-28E2-4694-AA81-CE2C11CA6D8B}, Create Time/Date: Sat Sep 28 04:31:14 2019, Last
Saved Time/Date: Sat Sep 28 04:31:14 2019, Number of Pages: 301, Number of Words: 2, Name of Creating Application: Windows
Installer XML Toolset (3.10.4.4718), Security: 2
|
dropped
|
||
|
C:\ProgramData\Package Cache\{8678BA04-D161-45BE-ACA4-CC5D13073F35}v14.24.28127\packages\vcRuntimeAdditional_amd64\cab1.cab
(copy)
|
Microsoft Cabinet archive data, many, 5688889 bytes, 14 files, at 0x44 +A "mfc140.dll" +A "mfc140chs.dll", flags 0x4, number
1, extra bytes 20 in head, 380 datablocks, 0x1 compression
|
dropped
|
||
|
C:\ProgramData\Package Cache\{8678BA04-D161-45BE-ACA4-CC5D13073F35}v14.24.28127\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi
(copy)
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation
Database, Subject: Visual C++ 2019 X64 Additional Runtime, Author: Microsoft Corporation, Keywords: Installer, Comments: This
installer database contains the logic and data required to install Microsoft Visual C++ 2019 X64 Additional Runtime - 14.24.28127.,
Template: x64;1033, Revision Number: {1FCB6B93-B382-48B7-9485-A319D74F4F84}, Create Time/Date: Sat Sep 28 04:34:06 2019, Last
Saved Time/Date: Sat Sep 28 04:34:06 2019, Number of Pages: 301, Number of Words: 2, Name of Creating Application: Windows
Installer XML Toolset (3.10.4.4718), Security: 2
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\dd_vcredist_amd64_20240326163939.log
|
ASCII text, with very long lines (323), with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\dd_vcredist_amd64_20240326163939_000_vcRuntimeMinimum_x64.log
|
Unicode text, UTF-16, little-endian text, with very long lines (319), with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\dd_vcredist_amd64_20240326163939_001_vcRuntimeAdditional_x64.log
|
Unicode text, UTF-16, little-endian text, with very long lines (411), with CRLF line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\logioptionsplus_setup.exe
|
PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
|
dropped
|
||
|
C:\Users\user\Downloads\0d281a76-4c68-45b6-b4fa-575fcee7f44b.tmp
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\Downloads\Unconfirmed 521320.crdownload
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
||
|
C:\Users\user\Downloads\logioptionsplus_installer.exe (copy)
|
PE32+ executable (GUI) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\$PatchCache$\Managed\8B783CD72A6EC084E89F6A5EA18EC191\14.24.28127\concrt140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\$PatchCache$\Managed\8B783CD72A6EC084E89F6A5EA18EC191\14.24.28127\msvcp140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\$PatchCache$\Managed\8B783CD72A6EC084E89F6A5EA18EC191\14.24.28127\msvcp140_1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\$PatchCache$\Managed\8B783CD72A6EC084E89F6A5EA18EC191\14.24.28127\msvcp140_2.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\$PatchCache$\Managed\8B783CD72A6EC084E89F6A5EA18EC191\14.24.28127\msvcp140_codecvt_ids.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\$PatchCache$\Managed\8B783CD72A6EC084E89F6A5EA18EC191\14.24.28127\vccorlib140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\$PatchCache$\Managed\8B783CD72A6EC084E89F6A5EA18EC191\14.24.28127\vcruntime140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\$PatchCache$\Managed\8B783CD72A6EC084E89F6A5EA18EC191\14.24.28127\vcruntime140_1.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\Installer\90cbdf.msi
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation
Database, Subject: Visual C++ 2019 X64 Minimum Runtime, Author: Microsoft Corporation, Keywords: Installer, Comments: This
installer database contains the logic and data required to install Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.24.28127.,
Template: x64;1033, Revision Number: {5302C21D-28E2-4694-AA81-CE2C11CA6D8B}, Create Time/Date: Sat Sep 28 04:31:14 2019, Last
Saved Time/Date: Sat Sep 28 04:31:14 2019, Number of Pages: 301, Number of Words: 2, Name of Creating Application: Windows
Installer XML Toolset (3.10.4.4718), Security: 2
|
dropped
|
||
|
C:\Windows\Installer\90cbe2.msi
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation
Database, Subject: Visual C++ 2019 X64 Minimum Runtime, Author: Microsoft Corporation, Keywords: Installer, Comments: This
installer database contains the logic and data required to install Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.24.28127.,
Template: x64;1033, Revision Number: {5302C21D-28E2-4694-AA81-CE2C11CA6D8B}, Create Time/Date: Sat Sep 28 04:31:14 2019, Last
Saved Time/Date: Sat Sep 28 04:31:14 2019, Number of Pages: 301, Number of Words: 2, Name of Creating Application: Windows
Installer XML Toolset (3.10.4.4718), Security: 2
|
dropped
|
||
|
C:\Windows\Installer\90cbe3.msi
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation
Database, Subject: Visual C++ 2019 X64 Additional Runtime, Author: Microsoft Corporation, Keywords: Installer, Comments: This
installer database contains the logic and data required to install Microsoft Visual C++ 2019 X64 Additional Runtime - 14.24.28127.,
Template: x64;1033, Revision Number: {1FCB6B93-B382-48B7-9485-A319D74F4F84}, Create Time/Date: Sat Sep 28 04:34:06 2019, Last
Saved Time/Date: Sat Sep 28 04:34:06 2019, Number of Pages: 301, Number of Words: 2, Name of Creating Application: Windows
Installer XML Toolset (3.10.4.4718), Security: 2
|
dropped
|
||
|
C:\Windows\Installer\90cbe6.msi
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation
Database, Subject: Visual C++ 2019 X64 Additional Runtime, Author: Microsoft Corporation, Keywords: Installer, Comments: This
installer database contains the logic and data required to install Microsoft Visual C++ 2019 X64 Additional Runtime - 14.24.28127.,
Template: x64;1033, Revision Number: {1FCB6B93-B382-48B7-9485-A319D74F4F84}, Create Time/Date: Sat Sep 28 04:34:06 2019, Last
Saved Time/Date: Sat Sep 28 04:34:06 2019, Number of Pages: 301, Number of Words: 2, Name of Creating Application: Windows
Installer XML Toolset (3.10.4.4718), Security: 2
|
dropped
|
||
|
C:\Windows\Installer\MSICCF8.tmp
|
data
|
dropped
|
||
|
C:\Windows\Installer\MSID12F.tmp
|
data
|
dropped
|
||
|
C:\Windows\Installer\SourceHash{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Installer\SourceHash{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Installer\inprogressinstallinfo.ipi
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log
|
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\System32\mfc140.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfc140chs.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfc140cht.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfc140deu.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfc140enu.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfc140esn.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfc140fra.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfc140ita.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfc140jpn.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfc140kor.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfc140rus.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfc140u.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfcm140.dll
|
PE32+ executable (DLL) (GUI) x86-64 Mono/.Net assembly, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\mfcm140u.dll
|
PE32+ executable (DLL) (GUI) x86-64 Mono/.Net assembly, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\vcamp140.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\System32\vcomp140.dll
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1028\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1028\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1029\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1029\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1031\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1031\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1036\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1036\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1040\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1040\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1041\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1041\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1042\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1042\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1045\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1045\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1046\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1046\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1049\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1049\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1055\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\1055\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\2052\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\2052\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\3082\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\3082\thm.wxl
|
XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\BootstrapperApplicationData.xml
|
XML 1.0 document, Unicode text, UTF-16, little-endian text, with very long lines (591), with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\license.rtf
|
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\logo.png
|
PNG image data, 64 x 64, 8-bit colormap, non-interlaced
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\thm.wxl
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\thm.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.ba\wixstdba.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.be\VC_redist.x64.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
|
Microsoft Cabinet archive data, many, 5688889 bytes, 14 files, at 0x44 +A "mfc140.dll" +A "mfc140chs.dll", flags 0x4, number
1, extra bytes 20 in head, 380 datablocks, 0x1 compression
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\cab5046A8AB272BF37297BB7928664C9503
|
Microsoft Cabinet archive data, many, 1505777 bytes, 51 files, at 0x44 +A "api_ms_win_core_console_l1_1_0.dll" +A "api_ms_win_core_datetime_l1_1_0.dll",
flags 0x4, number 1, extra bytes 20 in head, 130 datablocks, 0x1 compression
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\vcRuntimeAdditional_x64
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation
Database, Subject: Visual C++ 2019 X64 Additional Runtime, Author: Microsoft Corporation, Keywords: Installer, Comments: This
installer database contains the logic and data required to install Microsoft Visual C++ 2019 X64 Additional Runtime - 14.24.28127.,
Template: x64;1033, Revision Number: {1FCB6B93-B382-48B7-9485-A319D74F4F84}, Create Time/Date: Sat Sep 28 04:34:06 2019, Last
Saved Time/Date: Sat Sep 28 04:34:06 2019, Number of Pages: 301, Number of Words: 2, Name of Creating Application: Windows
Installer XML Toolset (3.10.4.4718), Security: 2
|
dropped
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\vcRuntimeMinimum_x64
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation
Database, Subject: Visual C++ 2019 X64 Minimum Runtime, Author: Microsoft Corporation, Keywords: Installer, Comments: This
installer database contains the logic and data required to install Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.24.28127.,
Template: x64;1033, Revision Number: {5302C21D-28E2-4694-AA81-CE2C11CA6D8B}, Create Time/Date: Sat Sep 28 04:31:14 2019, Last
Saved Time/Date: Sat Sep 28 04:31:14 2019, Number of Pages: 301, Number of Words: 2, Name of Creating Application: Windows
Installer XML Toolset (3.10.4.4718), Security: 2
|
dropped
|
||
|
C:\Windows\Temp\{716D2A00-ED5F-4B2E-85FD-2F355FA256A9}\.cr\vc_redist.x64.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
|
C:\Windows\Temp\~DF003125CA79801861.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF0122170E34194D07.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF0201767296D34379.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF0C5A67D8846FDA91.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF21B07CAC25D40D4B.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF24318C64CAB6AE03.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF3282BDA4098B88A0.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF3730083EC0EDD02F.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF38EF24FE57896F6B.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF3A71E3447206F7E3.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF420BF3D4DAD4CB18.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF43C8DA185D7F3727.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF4633E650A552A41A.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF5FC6267473E01771.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF6E6B22D63F84A7FB.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF85BF376B9587917B.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DF8F0404517929DC51.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DF903ED78646017631.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DFB0FF1DC62ED73468.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Windows\Temp\~DFB3D23FCEF91FAE63.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DFB81CCD36517B1E9A.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DFBE53C4299B02849C.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DFC882F4703D093197.TMP
|
data
|
dropped
|
||
|
C:\Windows\Temp\~DFF2863EA49E235E47.TMP
|
data
|
dropped
|
There are 111 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1668,3226854870238447149,17782080952752134390,131072
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
--lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1996 /prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://download01.logi.com/web/ftp/pub/techsupport/optionsplus/logioptionsplus_installer.exe"
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1668,3226854870238447149,17782080952752134390,131072
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
--lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=2972 /prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1668,3226854870238447149,17782080952752134390,131072
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
--lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6164 /prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1668,3226854870238447149,17782080952752134390,131072
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
--lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3352 /prefetch:8
|
||
|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1668,3226854870238447149,17782080952752134390,131072
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
--lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5480 /prefetch:8
|
||
|
C:\Users\user\Downloads\logioptionsplus_installer.exe
|
"C:\Users\user\Downloads\logioptionsplus_installer.exe"
|
||
|
C:\Users\user\AppData\Local\Temp\logioptionsplus_setup.exe
|
--install-event=897bbe07-5e15-4275-a4f7-6d424b298ef0.optionsplus_install_finish_event
|
||
|
C:\ProgramData\Logishrd\{6b7455ae-a32a-4c6f-8651-da4969097604}_logioptionsplus_setup\vc_redist.x64.exe
|
"C:\ProgramData\Logishrd\{6b7455ae-a32a-4c6f-8651-da4969097604}_logioptionsplus_setup\vc_redist.x64.exe" /install /quiet /norestart
|
||
|
C:\Windows\Temp\{716D2A00-ED5F-4B2E-85FD-2F355FA256A9}\.cr\vc_redist.x64.exe
|
"C:\Windows\Temp\{716D2A00-ED5F-4B2E-85FD-2F355FA256A9}\.cr\vc_redist.x64.exe" -burn.clean.room="C:\ProgramData\Logishrd\{6b7455ae-a32a-4c6f-8651-da4969097604}_logioptionsplus_setup\vc_redist.x64.exe"
-burn.filehandle.attached=532 -burn.filehandle.self=528 /install /quiet /norestart
|
||
|
C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.be\VC_redist.x64.exe
|
"C:\Windows\Temp\{209FFBAC-C06D-4197-A955-92B5A16AC523}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{A922CA2A-29A1-4011-A158-7648632856CA}
{2230389D-DB71-45B4-9086-D875DD617B8B} 3740
|
||
|
C:\Windows\System32\msiexec.exe
|
C:\Windows\system32\msiexec.exe /V
|
There are 3 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://download01.logi.com/web/ftp/pub/techsupport/optionsplus/logioptionsplus_installer.exe
|
|||
|
http://foo/bar/resources/deviceimage1.png
|
unknown
|
||
|
https://logi-prestage-65.logitech.com/t
|
unknown
|
||
|
https://www.logitech.com/legal/product-privacy-policy.html
|
unknown
|
||
|
https://www.logitech.com/el-gr/my-account/email-preferences.html
|
unknown
|
||
|
http://wixtoolset.org/schemas/thmutil/2010
|
unknown
|
||
|
https://www.logitech.com/zh-tw/legal/web-privacy-policy.html
|
unknown
|
||
|
https://logitech.uservoice.com/widget_environment/O
|
unknown
|
||
|
https://www.logitech.com/no-no/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
https://stg-datapipeline.np.logitech.ioE
|
unknown
|
||
|
http://www.lineto.com/Lineto.com/Font
|
unknown
|
||
|
http://schemas.microsoft.c
|
unknown
|
||
|
https://www.logitech.com/pt-br/legal/web-privacy-policy.html
|
unknown
|
||
|
https://updates.logitech.comZ
|
unknown
|
||
|
https://www.logitech.com/it-it/legal/web-privacy-policy.html
|
unknown
|
||
|
https://stg.optionsbackup.logitech.com
|
unknown
|
||
|
https://www.logitech.com/fi-fi/my-account/email-preferences.html
|
unknown
|
||
|
https://updates.logitech.com
|
unknown
|
||
|
https://curl.se/docs/hsts.html
|
unknown
|
||
|
http://foo/Resources/DeviceImage2.png
|
unknown
|
||
|
https://www.logitech.com/zh-tw/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
https://datapipeline.logitech.ioB
|
unknown
|
||
|
https://www.logitech.com/it-it/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
https://www.logitech.com/pl-pl/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
https://www.logitech.com/de-de/legal/web-privacy-policy.html
|
unknown
|
||
|
http://www.lineto.comht
|
unknown
|
||
|
http://www.certum.pl/CPS0
|
unknown
|
||
|
https://www.logitech.com/da-dk/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
https://www.logitech.com/nl-nl/legal/web-privacy-policy.html
|
unknown
|
||
|
https://opensource.logitech.com
|
unknown
|
||
|
https://www.logitech.com/en-us/my-account/email-preferences.html
|
unknown
|
||
|
https://updates-beta.logitech.com
|
unknown
|
||
|
https://www.logitech.com/sv-se/legal/web-privacy-policy.html
|
unknown
|
||
|
http://crl.certum.pl/ctnca.crl0k
|
unknown
|
||
|
http://foo/Resources/DeviceImage5.png
|
unknown
|
||
|
https://www.logitech.com/en-us/legal/web-privacy-policy.html
|
unknown
|
||
|
https://support.logitech.com/response-center
|
unknown
|
||
|
https://cpgbackup.logitech.comt
|
unknown
|
||
|
http://defaultcontainer/logioptionsplus_setup;component/MainWindow.xaml
|
unknown
|
||
|
https://curl.se/docs/alt-svc.html
|
unknown
|
||
|
https://www.logitech.com/es-es/legal/web-privacy-policy.html
|
unknown
|
||
|
https://www.logitech.com/legal/web-privacy-policy.html
|
unknown
|
||
|
https://logitech.uservoice.com/widget_environment/
|
unknown
|
||
|
http://defaultcontainer/logioptionsplus_setup;component/Resources/DeviceImage1.png
|
unknown
|
||
|
https://www.logitech.com/zh-cn/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
https://custom.ultimateears.com
|
unknown
|
||
|
http://defaultcontainer/logioptionsplus_setup;component/Resources/DeviceImage3.png
|
unknown
|
||
|
http://foo/bar/mainwindow.baml
|
unknown
|
||
|
http://foo/MainWindow.xaml
|
unknown
|
||
|
http://www.lineto.comhttp:/
|
unknown
|
||
|
https://www.logitech.com/en-us/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
https://www.logitech.com/zh-cn/legal/web-privacy-policy.html
|
unknown
|
||
|
https://kiros.logitech.iow
|
unknown
|
||
|
https://updates.optionsplus.logitechg.com
|
unknown
|
||
|
https://www.logicool.co.jp/
|
unknown
|
||
|
https://www.logitech.com/my-account/email-preferences.html
|
unknown
|
||
|
https://www.logitech.com/es-es/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
https://www.logitech.com/fr-fr/my-account/email-preferences.html
|
unknown
|
||
|
http://www.lineto.
|
unknown
|
||
|
https://www.logitech.com/el-gr/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
https://www.logitech.com/pt-br/my-account/email-preferences.html
|
unknown
|
||
|
http://foo/bar/resources/deviceimage4.png
|
unknown
|
||
|
https://sandbox.id.logi.com/
|
unknown
|
||
|
https://id.logi.com/
|
unknown
|
||
|
http://appsyndication.org/2006/appsyn
|
unknown
|
||
|
https://kiros.logitech.iohttps://sandbox.accounts.logi.comhttps://accounts.logi.com547af993-8be7-44a
|
unknown
|
||
|
https://www.logitech.com/fi-fi/legal/web-privacy-policy.html
|
unknown
|
||
|
http://repository.certum.pl/ctsca2021.cer0A
|
unknown
|
||
|
http://crl.certum.pl/ctsca2021.crl0o
|
unknown
|
||
|
https://support.logi.com/hc/articles/360025297893
|
unknown
|
||
|
http://defaultcontainer/logioptionsplus_setup;component/Resources/DeviceImage5.png
|
unknown
|
||
|
https://www.logitech.com/de-de/my-account/email-preferences.html
|
unknown
|
||
|
https://www.logitech.com/legal/eula.html
|
unknown
|
||
|
https://logi-prestage-65.logitech.com/
|
unknown
|
||
|
http://foo/bar/resources/deviceimage2.png
|
unknown
|
||
|
https://www.logitech.com/fr-fr/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
http://opensource.logitech.com
|
unknown
|
||
|
https://www.logicool.co.jp/ja-jp/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
https://www.logitech.com/ko-kr/legal/web-privacy-policy.html
|
unknown
|
||
|
https://www.logicool.co.jp/ja-jp/legal/web-privacy-policy.html
|
unknown
|
||
|
https://www.logitech.com/fr-fr/legal/web-privacy-policy.html
|
unknown
|
||
|
https://www.logitech.com/el-gr/legal/web-privacy-policy.html
|
unknown
|
||
|
https://www.logitech.com/de-de/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
http://www.lineto.comhttp:
|
unknown
|
||
|
https://logitech.uservoice.com/widget_environment/api_keyOyZTk229rDJKPdsUFvzL5g.jslogitech_macros_us
|
unknown
|
||
|
https://datapipeline.logitech.io
|
unknown
|
||
|
http://subca.ocsp-certum.com05
|
unknown
|
||
|
https://www.logitech.com/sv-se/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
https://www.logitech.com/nl-nl/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
||
|
http://foo/Resources/DeviceImage1.png
|
unknown
|
||
|
http://subca.ocsp-certum.com02
|
unknown
|
||
|
http://subca.ocsp-certum.com01
|
unknown
|
||
|
https://updates.optionsplus.logitechg.compublicoptionsplus3invalid
|
unknown
|
||
|
http://crl.certum.pl/ctnca2.crl0l
|
unknown
|
||
|
http://repository.certum.pl/ctnca2.cer09
|
unknown
|
||
|
http://defaultcontainer/logioptionsplus_setup;component/app.xaml
|
unknown
|
||
|
http://util.logitech.io/brand
|
unknown
|
||
|
http://foo/Resources/DeviceImage3.png
|
unknown
|
||
|
http://foo/bar/app.baml
|
unknown
|
||
|
https://cpgbackup.logitech.com
|
unknown
|
||
|
https://www.logitech.com/fi-fi/legal/product-privacy-policy/product-privacy-policy-archive.html
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
www.google.com
|
142.250.72.164
|
||
|
d1q20hs7kavmn5.cloudfront.net
|
18.154.132.65
|
||
|
download01.logi.com
|
unknown
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.168.11.20
|
unknown
|
unknown
|
||
|
18.154.132.65
|
d1q20hs7kavmn5.cloudfront.net
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
142.250.72.164
|
www.google.com
|
United States
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
BundleCachePath
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
BundleUpgradeCode
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
BundleAddonCode
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
BundleDetectCode
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
BundlePatchCode
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
BundleVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
BundleProviderKey
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
BundleTag
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
EngineVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
DisplayIcon
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
DisplayName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
DisplayVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
Publisher
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
ModifyPath
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
NoElevateOnModify
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
QuietUninstallString
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
UninstallString
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
EstimatedSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.24,bundle
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.24,bundle
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.24,bundle
|
DisplayName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
Resume
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce
|
{282975d8-55fe-4991-bbbb-06a72581ce58}
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
BundleResumeCommandLine
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
Installed
|
||
|
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SystemRestore
|
SrCreateRp (Enter)
|
||
|
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\VSS\Diag\SystemRestore
|
SrCreateRp (Leave)
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{282975d8-55fe-4991-bbbb-06a72581ce58}
|
Resume
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Config.Msi\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
|
C:\Config.Msi\90cbe1.rbs
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
|
C:\Config.Msi\90cbe1.rbsLow
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACCF93639695D613CA810E6C2B5B239E
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22D9592D7BD4FA231A0B48504C227194
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ECAE1C3074E724137A7E3F56800DB21D
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27942822A4C04B13EAFEF97C95F63150
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD7D722D8F9DFA339B53B42F4FF7E24A
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\vcamp140.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E9820507FCEB7C2398CD804C84E084B2
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\vcomp140.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D89E5FF7C37D7328F14EBB304D83B4
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\67A3D0AE64EA64F39BD403D905791A52
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8FA62F832D375A43B93B38EC91002AEA
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\303E1D40F0E81D63CBF12EE72E9091A8
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1352F35FC2724F93C9B513B213B8195E
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7863FF1350CEB6A38AECDA8DB11F05E6
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchGUID
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\8B783CD72A6EC084E89F6A5EA18EC191
|
MediaCabinet
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\8B783CD72A6EC084E89F6A5EA18EC191
|
File
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\8B783CD72A6EC084E89F6A5EA18EC191
|
ComponentVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\8B783CD72A6EC084E89F6A5EA18EC191
|
ProductVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchAttributes
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchSequence
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\8B783CD72A6EC084E89F6A5EA18EC191
|
SharedComponent
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF85233BC05724B3B84E35B5849ED74B\8B783CD72A6EC084E89F6A5EA18EC191
|
IsFullFile
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchGUID
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\8B783CD72A6EC084E89F6A5EA18EC191
|
MediaCabinet
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\8B783CD72A6EC084E89F6A5EA18EC191
|
File
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\8B783CD72A6EC084E89F6A5EA18EC191
|
ComponentVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\8B783CD72A6EC084E89F6A5EA18EC191
|
ProductVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchAttributes
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchSequence
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\8B783CD72A6EC084E89F6A5EA18EC191
|
SharedComponent
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321B7242231FB0F49A85057FDCCFAA65\8B783CD72A6EC084E89F6A5EA18EC191
|
IsFullFile
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27942822A4C04B13EAFEF97C95F63150\8B783CD72A6EC084E89F6A5EA18EC191
|
File
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8553176F1EDC3731AD2AB9E0064759F\8B783CD72A6EC084E89F6A5EA18EC191
|
File
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchGUID
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9\8B783CD72A6EC084E89F6A5EA18EC191
|
MediaCabinet
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9\8B783CD72A6EC084E89F6A5EA18EC191
|
File
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9\8B783CD72A6EC084E89F6A5EA18EC191
|
ComponentVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9\8B783CD72A6EC084E89F6A5EA18EC191
|
ProductVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchAttributes
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9\8B783CD72A6EC084E89F6A5EA18EC191
|
PatchSequence
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9\8B783CD72A6EC084E89F6A5EA18EC191
|
SharedComponent
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9340DAD3CDC2A3FA832B02388D36F9\8B783CD72A6EC084E89F6A5EA18EC191
|
IsFullFile
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EA31416F42045848B8DD1E28F10CE12\8B783CD72A6EC084E89F6A5EA18EC191
|
File
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D1C5B53B5BE965338BE873EF4C52345\8B783CD72A6EC084E89F6A5EA18EC191
|
File
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD7D722D8F9DFA339B53B42F4FF7E24A\8B783CD72A6EC084E89F6A5EA18EC191
|
File
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14
|
DisplayName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\X64
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\X64
|
Installed
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\X64
|
Major
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\X64
|
Minor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\X64
|
Bld
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\VisualStudio\14.0\VC\Runtimes\X64
|
Rbld
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0
|
SP
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0
|
SPIndex
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeMinimum
|
Install
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeMinimum
|
InstallerType
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeMinimum
|
SPName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeMinimum
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeMinimum
|
UpdateVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DevDiv\VC\Servicing\14.0
|
SP
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DevDiv\VC\Servicing\14.0
|
SPIndex
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeMinimum
|
Install
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeMinimum
|
InstallerType
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeMinimum
|
SPName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeMinimum
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeMinimum
|
UpdateVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
LocalPackage
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
AuthorizedCDFPrefix
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
Comments
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
Contact
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
DisplayVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
HelpLink
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
HelpTelephone
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
InstallDate
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
InstallLocation
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
InstallSource
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
ModifyPath
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
Publisher
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
Readme
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
Size
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
EstimatedSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
SystemComponent
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
UninstallString
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
URLInfoAbout
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
URLUpdateInfo
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
VersionMajor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
VersionMinor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
WindowsInstaller
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
Language
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
AuthorizedCDFPrefix
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
Comments
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
Contact
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
DisplayVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
HelpLink
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
HelpTelephone
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
InstallDate
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
InstallLocation
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
InstallSource
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
ModifyPath
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
Publisher
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
Readme
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
Size
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
EstimatedSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
SystemComponent
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
UninstallString
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
URLInfoAbout
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
URLUpdateInfo
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
VersionMajor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
VersionMinor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
WindowsInstaller
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
Language
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\09A86F63C932FD435BC8463B1035EC53
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\InstallProperties
|
DisplayName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}
|
DisplayName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8B783CD72A6EC084E89F6A5EA18EC191
|
VC_Runtime_Minimum
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\Features
|
VC_Runtime_Minimum
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8B783CD72A6EC084E89F6A5EA18EC191
|
Provider
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\Features
|
Provider
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8B783CD72A6EC084E89F6A5EA18EC191
|
Servicing_Key
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\Features
|
Servicing_Key
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B783CD72A6EC084E89F6A5EA18EC191\Patches
|
AllPatches
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191
|
ProductName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191
|
PackageCode
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191
|
Language
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191
|
Assignment
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191
|
AdvertiseFlags
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191
|
InstanceType
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191
|
AuthorizedLUAApp
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191
|
DeploymentFlags
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\09A86F63C932FD435BC8463B1035EC53
|
8B783CD72A6EC084E89F6A5EA18EC191
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191\SourceList
|
PackageName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191\SourceList\Net
|
1
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191\SourceList\Media
|
1
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191
|
Clients
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8B783CD72A6EC084E89F6A5EA18EC191\SourceList
|
LastUsedSource
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Owner
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
SessionHash
|
||
|
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
|
Sequence
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
|
C:\Config.Msi\
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
|
C:\Config.Msi\90cbe5.rbs
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
|
C:\Config.Msi\90cbe5.rbsLow
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACCF93639695D613CA810E6C2B5B239E
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22D9592D7BD4FA231A0B48504C227194
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3E229A99F84673C3A86E8732F213B7E1
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140u.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51AD4298368ED8830AB67E3A39A17DB7
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfcm140.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\141252235EB0EFA389942D18DC59D434
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfcm140u.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C2A122DAB65961F3F846CF39C8FB1D9C
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140chs.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8888C9AC6EEC6D836AD433AD82762518
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140cht.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\585B296F66C15DB3CA1344E22412DE08
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140deu.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8EE841F7F16E26436B4D1E14A1E85C9C
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140enu.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F33968699A98DC30A17B21EC1AEE599
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140esn.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5CE4A476237FD6C30ABF82D916696356
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140fra.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88AB88A3087226237A9AA7113DDEA988
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140ita.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DA003D8A249FDE3AA30D344A29F2980
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140jpn.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD994C15A7DB9E13AAAFD5803147B134
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140kor.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1F22C6C2BEC6D132A9EF821A42824F8
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\mfc140rus.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D1620B12191585D3C9929B32B2726D61
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\67A3D0AE64EA64F39BD403D905791A52
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C72BD52213EE8FD34BBBCA55605C76A3
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\303E1D40F0E81D63CBF12EE72E9091A8
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\92998CBAE1E91F035A6A6C58DBDD7B3E
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB3240163111F293B8A04300001E0944
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14
|
NULL
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeAdditionalVSU_amd64,v14
|
DisplayName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeAdditional
|
Install
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeAdditional
|
InstallerType
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeAdditional
|
SP
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeAdditional
|
SPIndex
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeAdditional
|
SPName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\DevDiv\VC\Servicing\14.0\RuntimeAdditional
|
UpdateVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
LocalPackage
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
AuthorizedCDFPrefix
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
Comments
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
Contact
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
DisplayVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
HelpLink
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
HelpTelephone
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
InstallDate
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
InstallLocation
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
InstallSource
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
ModifyPath
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
Publisher
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
Readme
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
Size
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
EstimatedSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
SystemComponent
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
UninstallString
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
URLInfoAbout
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
URLUpdateInfo
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
VersionMajor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
VersionMinor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
WindowsInstaller
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
Language
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
AuthorizedCDFPrefix
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
Comments
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
Contact
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
DisplayVersion
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
HelpLink
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
HelpTelephone
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
InstallDate
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
InstallLocation
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
InstallSource
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
ModifyPath
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
Publisher
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
Readme
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
Size
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
EstimatedSize
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
SystemComponent
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
UninstallString
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
URLInfoAbout
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
URLUpdateInfo
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
VersionMajor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
VersionMinor
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
WindowsInstaller
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
Language
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\88AAB0B9F51EF1A3CA0C2B609EDD7FC1
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\InstallProperties
|
DisplayName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8678BA04-D161-45BE-ACA4-CC5D13073F35}
|
DisplayName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\40AB8768161DEB54CA4ACCD53170F353
|
VC_Runtime_Additional
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\Features
|
VC_Runtime_Additional
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\40AB8768161DEB54CA4ACCD53170F353
|
Provider
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\Features
|
Provider
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\40AB8768161DEB54CA4ACCD53170F353
|
Servicing_Key
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\Features
|
Servicing_Key
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\40AB8768161DEB54CA4ACCD53170F353\Patches
|
AllPatches
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353
|
ProductName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353
|
PackageCode
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353
|
Language
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353
|
Version
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353
|
Assignment
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353
|
AdvertiseFlags
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353
|
InstanceType
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353
|
AuthorizedLUAApp
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353
|
DeploymentFlags
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\88AAB0B9F51EF1A3CA0C2B609EDD7FC1
|
40AB8768161DEB54CA4ACCD53170F353
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353\SourceList
|
PackageName
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353\SourceList\Net
|
1
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353\SourceList\Media
|
1
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353
|
Clients
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40AB8768161DEB54CA4ACCD53170F353\SourceList
|
LastUsedSource
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\vcruntime140.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\vcruntime140_1.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\msvcp140.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\msvcp140_1.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\msvcp140_2.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\msvcp140_codecvt_ids.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\concrt140.dll
|
||
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs
|
C:\Windows\system32\vccorlib140.dll
|
||
|
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings
|
StringCacheGeneration
|
||
|
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings
|
StringCacheGeneration
|
There are 306 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
3ACC000
|
trusted library allocation
|
page read and write
|
||
|
1660000
|
trusted library allocation
|
page read and write
|
||
|
1F5EE1E9000
|
heap
|
page read and write
|
||
|
1650000
|
heap
|
page read and write
|
||
|
3250000
|
heap
|
page read and write
|
||
|
1F590001000
|
trusted library allocation
|
page read and write
|
||
|
1F5EE230000
|
heap
|
page read and write
|
||
|
E7B000
|
heap
|
page read and write
|
||
|
7FFCB343D000
|
trusted library allocation
|
page execute and read and write
|
||
|
1F5EE269000
|
heap
|
page read and write
|
||
|
EC8000
|
heap
|
page read and write
|
||
|
135E000
|
stack
|
page read and write
|
||
|
2FF0000
|
trusted library allocation
|
page read and write
|
||
|
3330000
|
heap
|
page read and write
|
||
|
1110000
|
trusted library allocation
|
page read and write
|
||
|
520000
|
unkown
|
page readonly
|
||
|
3B98000
|
trusted library allocation
|
page read and write
|
||
|
1F5EE470000
|
heap
|
page read and write
|
||
|
7FFCB34E0000
|
trusted library allocation
|
page execute and read and write
|
||
|
BFC000
|
heap
|
page read and write
|
||
|
3500000
|
heap
|
page read and write
|
||
|
7FFCB3433000
|
trusted library allocation
|
page read and write
|
||
|
7FFCB3440000
|
trusted library allocation
|
page read and write
|
||
|
10A0000
|
heap
|
page read and write
|
||
|
125E000
|
heap
|
page read and write
|
||
|
F01000
|
heap
|
page read and write
|
||
|
7FFCB34D6000
|
trusted library allocation
|
page read and write
|
||
|
1282000
|
heap
|
page read and write
|
||
|
1F5F0F90000
|
trusted library allocation
|
page read and write
|
||
|
1F5F08F1000
|
heap
|
page read and write
|
||
|
1F5EE3E0000
|
trusted library allocation
|
page read and write
|
||
|
3560000
|
heap
|
page read and write
|
||
|
BF1000
|
heap
|
page read and write
|
||
|
1F5EE2A5000
|
heap
|
page read and write
|
||
|
3620000
|
heap
|
page read and write
|
||
|
3ACD000
|
trusted library allocation
|
page read and write
|
||
|
E68000
|
heap
|
page read and write
|
||
|
26ECD8E0000
|
heap
|
page read and write
|
||
|
3AC3000
|
trusted library allocation
|
page read and write
|
||
|
3F90000
|
trusted library allocation
|
page read and write
|
||
|
3430000
|
heap
|
page read and write
|
||
|
7FF61C628000
|
unkown
|
page readonly
|
||
|
1150000
|
heap
|
page read and write
|
||
|
115A000
|
heap
|
page read and write
|
||
|
1220000
|
heap
|
page read and write
|
||
|
1282000
|
heap
|
page read and write
|
||
|
1F5F04D0000
|
heap
|
page read and write
|
||
|
2C47000
|
heap
|
page read and write
|
||
|
1F5ECD72000
|
unkown
|
page readonly
|
||
|
E9F000
|
heap
|
page read and write
|
||
|
1284000
|
heap
|
page read and write
|
||
|
632B000
|
stack
|
page read and write
|
||
|
3510000
|
heap
|
page read and write
|
||
|
7FFCB3424000
|
trusted library allocation
|
page read and write
|
||
|
2C40000
|
heap
|
page read and write
|
||
|
3850000
|
heap
|
page read and write
|
||
|
365E000
|
stack
|
page read and write
|
||
|
488F000
|
stack
|
page read and write
|
||
|
1110000
|
trusted library allocation
|
page read and write
|
||
|
EA1000
|
heap
|
page read and write
|
||
|
6AC000
|
stack
|
page read and write
|
||
|
EC7000
|
heap
|
page read and write
|
||
|
F01000
|
heap
|
page read and write
|
||
|
7FFCDBB58000
|
unkown
|
page readonly
|
||
|
1460000
|
heap
|
page read and write
|
||
|
3470000
|
heap
|
page read and write
|
||
|
58E000
|
unkown
|
page readonly
|
||
|
7FFCDBB12000
|
unkown
|
page read and write
|
||
|
7FFCDBB56000
|
unkown
|
page read and write
|
||
|
7FF61CC33000
|
unkown
|
page readonly
|
||
|
7FF61CD93000
|
unkown
|
page readonly
|
||
|
3820000
|
heap
|
page read and write
|
||
|
25657FB000
|
stack
|
page read and write
|
||
|
F9E000
|
unkown
|
page readonly
|
||
|
2FF0000
|
trusted library allocation
|
page read and write
|
||
|
EC2000
|
heap
|
page read and write
|
||
|
7FF61CDA2000
|
unkown
|
page readonly
|
||
|
3AC0000
|
trusted library allocation
|
page read and write
|
||
|
1F5914F3000
|
trusted library allocation
|
page read and write
|
||
|
F1E000
|
stack
|
page read and write
|
||
|
A20000
|
unkown
|
page readonly
|
||
|
14DE000
|
stack
|
page read and write
|
||
|
2E60000
|
heap
|
page read and write
|
||
|
1F5F058D000
|
heap
|
page read and write
|
||
|
1F5EDFD0000
|
heap
|
page read and write
|
||
|
7FFCB35E0000
|
trusted library allocation
|
page execute and read and write
|
||
|
3B94000
|
trusted library allocation
|
page read and write
|
||
|
7FFCB3540000
|
trusted library allocation
|
page execute and read and write
|
||
|
3478000
|
heap
|
page read and write
|
||
|
118E000
|
stack
|
page read and write
|
||
|
7FFCDB986000
|
unkown
|
page readonly
|
||
|
7FFCB3444000
|
trusted library allocation
|
page read and write
|
||
|
3B93000
|
trusted library allocation
|
page read and write
|
||
|
3010000
|
heap
|
page read and write
|
||
|
2FF0000
|
trusted library allocation
|
page read and write
|
||
|
1F5F0890000
|
heap
|
page read and write
|
||
|
123E000
|
heap
|
page read and write
|
||
|
33B0000
|
heap
|
page read and write
|
||
|
3060000
|
heap
|
page read and write
|
||
|
EC8000
|
heap
|
page read and write
|
||
|
E88000
|
heap
|
page read and write
|
||
|
1700000
|
heap
|
page read and write
|
||
|
26ECD8D0000
|
heap
|
page read and write
|
||
|
7FFCB35D0000
|
trusted library allocation
|
page read and write
|
||
|
3BA1000
|
trusted library allocation
|
page read and write
|
||
|
7FF61B201000
|
unkown
|
page readonly
|
||
|
A8260FF000
|
stack
|
page read and write
|
||
|
A7D000
|
stack
|
page read and write
|
||
|
C2A000
|
heap
|
page read and write
|
||
|
7FF61BC28000
|
unkown
|
page readonly
|
||
|
145E000
|
stack
|
page read and write
|
||
|
9CE000
|
stack
|
page read and write
|
||
|
1F5EE410000
|
heap
|
page read and write
|
||
|
A825CFC000
|
stack
|
page read and write
|
||
|
F5B000
|
stack
|
page read and write
|
||
|
1F5F0F1F000
|
trusted library allocation
|
page read and write
|
||
|
2E00000
|
heap
|
page read and write
|
||
|
7FFCDBB26000
|
unkown
|
page write copy
|
||
|
BF0000
|
heap
|
page read and write
|
||
|
EFD000
|
heap
|
page read and write
|
||
|
EE3000
|
heap
|
page read and write
|
||
|
3ACB000
|
trusted library allocation
|
page read and write
|
||
|
2DA0000
|
heap
|
page read and write
|
||
|
A6B000
|
unkown
|
page readonly
|
||
|
F0F000
|
heap
|
page read and write
|
||
|
7FFCDBB4D000
|
unkown
|
page read and write
|
||
|
1F5EE3C0000
|
trusted library allocation
|
page read and write
|
||
|
128F000
|
stack
|
page read and write
|
||
|
EC8000
|
heap
|
page read and write
|
||
|
B78000
|
heap
|
page read and write
|
||
|
1F591662000
|
trusted library allocation
|
page read and write
|
||
|
7FFCB344D000
|
trusted library allocation
|
page execute and read and write
|
||
|
B7F000
|
heap
|
page read and write
|
||
|
1F590A21000
|
trusted library allocation
|
page read and write
|
||
|
7FFCDB341000
|
unkown
|
page execute read
|
||
|
1F5EC370000
|
unkown
|
page readonly
|
||
|
2564BFE000
|
stack
|
page read and write
|
||
|
3770000
|
heap
|
page read and write
|
||
|
1245000
|
heap
|
page read and write
|
||
|
1260000
|
heap
|
page read and write
|
||
|
BDC000
|
heap
|
page read and write
|
||
|
EF4000
|
heap
|
page read and write
|
||
|
2562BF9000
|
stack
|
page read and write
|
||
|
3230000
|
trusted library allocation
|
page read and write
|
||
|
3B9E000
|
trusted library allocation
|
page read and write
|
||
|
61F0000
|
heap
|
page read and write
|
||
|
A825EFE000
|
stack
|
page read and write
|
||
|
E98000
|
heap
|
page read and write
|
||
|
A825FFF000
|
stack
|
page read and write
|
||
|
3B96000
|
trusted library allocation
|
page read and write
|
||
|
7FF61B220000
|
unkown
|
page read and write
|
||
|
32CB000
|
stack
|
page read and write
|
||
|
B9B000
|
stack
|
page read and write
|
||
|
EFD000
|
heap
|
page read and write
|
||
|
7FFCB34DC000
|
trusted library allocation
|
page execute and read and write
|
||
|
3AC7000
|
trusted library allocation
|
page read and write
|
||
|
3460000
|
heap
|
page read and write
|
||
|
A8A000
|
unkown
|
page write copy
|
||
|
A8E000
|
unkown
|
page readonly
|
||
|
1F5F0B00000
|
heap
|
page read and write
|
||
|
AF0000
|
heap
|
page read and write
|
||
|
E9F000
|
heap
|
page read and write
|
||
|
2E30000
|
heap
|
page read and write
|
||
|
B91000
|
heap
|
page read and write
|
||
|
7FF61B201000
|
unkown
|
page readonly
|
||
|
2D40000
|
unkown
|
page read and write
|
||
|
25667FB000
|
stack
|
page read and write
|
||
|
EDE000
|
heap
|
page read and write
|
||
|
2566BFD000
|
stack
|
page read and write
|
||
|
3AC4000
|
trusted library allocation
|
page read and write
|
||
|
7FF61B222000
|
unkown
|
page readonly
|
||
|
1F5EE3F0000
|
trusted library allocation
|
page read and write
|
||
|
36A0000
|
heap
|
page read and write
|
||
|
E98000
|
heap
|
page read and write
|
||
|
138E000
|
stack
|
page read and write
|
||
|
1260000
|
heap
|
page read and write
|
||
|
3260000
|
heap
|
page read and write
|
||
|
16D0000
|
heap
|
page read and write
|
||
|
1F5EE320000
|
heap
|
page read and write
|
||
|
1284000
|
heap
|
page read and write
|
||
|
7FF61B21E000
|
unkown
|
page read and write
|
||
|
A21000
|
unkown
|
page execute read
|
||
|
7FFCDBB36000
|
unkown
|
page read and write
|
||
|
1F5EE1BE000
|
heap
|
page read and write
|
||
|
F86000
|
heap
|
page read and write
|
||
|
26ECDA80000
|
heap
|
page read and write
|
||
|
3AD1000
|
trusted library allocation
|
page read and write
|
||
|
F7B000
|
unkown
|
page readonly
|
||
|
BEA000
|
heap
|
page read and write
|
||
|
3570000
|
heap
|
page read and write
|
||
|
BB1000
|
heap
|
page read and write
|
||
|
3ACF000
|
stack
|
page read and write
|
||
|
1F5F0623000
|
heap
|
page read and write
|
||
|
2FC0000
|
heap
|
page read and write
|
||
|
1114000
|
trusted library allocation
|
page read and write
|
||
|
3B90000
|
trusted library allocation
|
page read and write
|
||
|
56B000
|
unkown
|
page readonly
|
||
|
2DE0000
|
heap
|
page read and write
|
||
|
125E000
|
heap
|
page read and write
|
||
|
3070000
|
heap
|
page read and write
|
||
|
125E000
|
heap
|
page read and write
|
||
|
1259000
|
heap
|
page read and write
|
||
|
4270000
|
heap
|
page read and write
|
||
|
642C000
|
stack
|
page read and write
|
||
|
BD8000
|
heap
|
page read and write
|
||
|
321E000
|
stack
|
page read and write
|
||
|
7FFCDBB27000
|
unkown
|
page read and write
|
||
|
26ECDAF8000
|
heap
|
page read and write
|
||
|
7FFCB3423000
|
trusted library allocation
|
page execute and read and write
|
||
|
A825DFE000
|
stack
|
page read and write
|
||
|
F80000
|
heap
|
page read and write
|
||
|
1F5EE189000
|
heap
|
page read and write
|
||
|
2D50000
|
heap
|
page read and write
|
||
|
A20000
|
unkown
|
page readonly
|
||
|
1F5EFD30000
|
heap
|
page read and write
|
||
|
1F5F08E7000
|
heap
|
page read and write
|
||
|
3B9D000
|
trusted library allocation
|
page read and write
|
||
|
E60000
|
heap
|
page read and write
|
||
|
E98000
|
heap
|
page read and write
|
||
|
3ACF000
|
trusted library allocation
|
page read and write
|
||
|
3A70000
|
trusted library allocation
|
page read and write
|
||
|
37F0000
|
heap
|
page read and write
|
||
|
7FFCDBBA7000
|
unkown
|
page readonly
|
||
|
F9A000
|
unkown
|
page write copy
|
||
|
26ECDAF0000
|
heap
|
page read and write
|
||
|
EF9000
|
heap
|
page read and write
|
||
|
26ECDA10000
|
heap
|
page read and write
|
||
|
123E000
|
heap
|
page read and write
|
||
|
2564FFD000
|
stack
|
page read and write
|
||
|
1F5F0870000
|
heap
|
page read and write
|
||
|
E9F000
|
heap
|
page read and write
|
||
|
640000
|
heap
|
page read and write
|
||
|
2EA0000
|
heap
|
page read and write
|
||
|
5FBE000
|
stack
|
page read and write
|
||
|
25653FD000
|
stack
|
page read and write
|
||
|
1F5F08F5000
|
heap
|
page read and write
|
||
|
3BA0000
|
trusted library allocation
|
page read and write
|
||
|
7FFCB34D0000
|
trusted library allocation
|
page read and write
|
||
|
123B000
|
heap
|
page read and write
|
||
|
520000
|
unkown
|
page readonly
|
||
|
BDE000
|
stack
|
page read and write
|
||
|
3BA4000
|
trusted library allocation
|
page read and write
|
||
|
38C0000
|
heap
|
page read and write
|
||
|
B8F000
|
heap
|
page read and write
|
||
|
B91000
|
heap
|
page read and write
|
||
|
1F5F0800000
|
heap
|
page read and write
|
||
|
1F5EE2A0000
|
heap
|
page read and write
|
||
|
B50000
|
heap
|
page read and write
|
||
|
7AA000
|
stack
|
page read and write
|
||
|
3AB0000
|
heap
|
page read and write
|
||
|
2FB0000
|
trusted library allocation
|
page read and write
|
||
|
1F5F05AD000
|
heap
|
page read and write
|
||
|
1259000
|
heap
|
page read and write
|
||
|
3230000
|
heap
|
page read and write
|
||
|
BB3000
|
heap
|
page read and write
|
||
|
3B91000
|
trusted library allocation
|
page read and write
|
||
|
1143000
|
heap
|
page read and write
|
||
|
7FF61B228000
|
unkown
|
page readonly
|
||
|
EE9000
|
heap
|
page read and write
|
||
|
1F5F0883000
|
heap
|
page read and write
|
||
|
1F5EC372000
|
unkown
|
page readonly
|
||
|
F9E000
|
unkown
|
page readonly
|
||
|
A6B000
|
unkown
|
page readonly
|
||
|
3ACE000
|
trusted library allocation
|
page read and write
|
||
|
2EB0000
|
heap
|
page read and write
|
||
|
ED3000
|
heap
|
page read and write
|
||
|
7FFCB3430000
|
trusted library allocation
|
page read and write
|
||
|
1F5EE1E6000
|
heap
|
page read and write
|
||
|
1282000
|
heap
|
page read and write
|
||
|
B85000
|
heap
|
page read and write
|
||
|
E7E000
|
heap
|
page read and write
|
||
|
F31000
|
unkown
|
page execute read
|
||
|
56B000
|
unkown
|
page readonly
|
||
|
3090000
|
heap
|
page read and write
|
||
|
3570000
|
heap
|
page read and write
|
||
|
3AC6000
|
trusted library allocation
|
page read and write
|
||
|
3B9A000
|
trusted library allocation
|
page read and write
|
||
|
60FE000
|
stack
|
page read and write
|
||
|
2563FFD000
|
stack
|
page read and write
|
||
|
3220000
|
heap
|
page read and write
|
||
|
7FF61CD93000
|
unkown
|
page readonly
|
||
|
1F5F04F7000
|
heap
|
page read and write
|
||
|
A0E000
|
stack
|
page read and write
|
||
|
58A000
|
unkown
|
page write copy
|
||
|
FB6000
|
heap
|
page read and write
|
||
|
BB3000
|
heap
|
page read and write
|
||
|
7FFCB342D000
|
trusted library allocation
|
page execute and read and write
|
||
|
E98000
|
heap
|
page read and write
|
||
|
7FF45ADB0000
|
trusted library allocation
|
page execute and read and write
|
||
|
2565BFE000
|
stack
|
page read and write
|
||
|
FB0000
|
heap
|
page read and write
|
||
|
1F5F09F0000
|
heap
|
page read and write
|
||
|
F7B000
|
unkown
|
page readonly
|
||
|
3550000
|
heap
|
page read and write
|
||
|
7FFCDBB1D000
|
unkown
|
page write copy
|
||
|
1F5EE1A6000
|
heap
|
page read and write
|
||
|
1F590021000
|
trusted library allocation
|
page read and write
|
||
|
AA0000
|
heap
|
page read and write
|
||
|
2FF0000
|
trusted library allocation
|
page read and write
|
||
|
A8A000
|
unkown
|
page read and write
|
||
|
EF7000
|
heap
|
page read and write
|
||
|
1F5F08BC000
|
heap
|
page read and write
|
||
|
1F5EFE00000
|
heap
|
page execute and read and write
|
||
|
4370000
|
trusted library allocation
|
page read and write
|
||
|
E87000
|
heap
|
page read and write
|
||
|
7FF61B1B0000
|
unkown
|
page readonly
|
||
|
5FFD000
|
stack
|
page read and write
|
||
|
F89000
|
heap
|
page read and write
|
||
|
1F590011000
|
trusted library allocation
|
page read and write
|
||
|
1F5EE180000
|
heap
|
page read and write
|
||
|
E5C000
|
stack
|
page read and write
|
||
|
1F5EDFAA000
|
unkown
|
page readonly
|
||
|
BE0000
|
heap
|
page read and write
|
||
|
1F5EFE40000
|
trusted library allocation
|
page read and write
|
||
|
E88000
|
heap
|
page read and write
|
||
|
26ECDB19000
|
heap
|
page read and write
|
||
|
7FF61B1B1000
|
unkown
|
page execute read
|
||
|
1F5F08EA000
|
heap
|
page read and write
|
||
|
3BA2000
|
trusted library allocation
|
page read and write
|
||
|
1F5F0620000
|
heap
|
page read and write
|
||
|
1F5F0593000
|
heap
|
page read and write
|
||
|
BB1000
|
heap
|
page read and write
|
||
|
3530000
|
heap
|
page read and write
|
||
|
BC6000
|
heap
|
page read and write
|
||
|
E00000
|
heap
|
page read and write
|
||
|
1F5EE1BC000
|
heap
|
page read and write
|
||
|
EC2000
|
heap
|
page read and write
|
||
|
25637FE000
|
stack
|
page read and write
|
||
|
F9A000
|
unkown
|
page read and write
|
||
|
ED7000
|
heap
|
page read and write
|
||
|
A21000
|
unkown
|
page execute read
|
||
|
1F5ED772000
|
unkown
|
page readonly
|
||
|
8E0000
|
heap
|
page read and write
|
||
|
31E0000
|
heap
|
page read and write
|
||
|
ED4000
|
heap
|
page read and write
|
||
|
AA6000
|
heap
|
page read and write
|
||
|
2563BFE000
|
stack
|
page read and write
|
||
|
7FFCB344B000
|
trusted library allocation
|
page execute and read and write
|
||
|
3240000
|
heap
|
page read and write
|
||
|
B8F000
|
heap
|
page read and write
|
||
|
7FF61C628000
|
unkown
|
page readonly
|
||
|
361E000
|
stack
|
page read and write
|
||
|
7FFCB347C000
|
trusted library allocation
|
page execute and read and write
|
||
|
3670000
|
trusted library allocation
|
page read and write
|
||
|
10EE000
|
stack
|
page read and write
|
||
|
25647FE000
|
stack
|
page read and write
|
||
|
3B80000
|
heap
|
page read and write
|
||
|
3B99000
|
trusted library allocation
|
page read and write
|
||
|
B86000
|
heap
|
page read and write
|
||
|
3430000
|
heap
|
page read and write
|
||
|
B58000
|
heap
|
page read and write
|
||
|
7FF61B1B0000
|
unkown
|
page readonly
|
||
|
1F5EDEB7000
|
unkown
|
page readonly
|
||
|
3230000
|
trusted library allocation
|
page read and write
|
||
|
3B9C000
|
trusted library allocation
|
page read and write
|
||
|
521000
|
unkown
|
page execute read
|
||
|
3160000
|
heap
|
page read and write
|
||
|
3580000
|
heap
|
page read and write
|
||
|
3B92000
|
trusted library allocation
|
page read and write
|
||
|
3AC9000
|
trusted library allocation
|
page read and write
|
||
|
7FFCDBB2B000
|
unkown
|
page write copy
|
||
|
EE2000
|
heap
|
page read and write
|
||
|
7FFCDBB37000
|
unkown
|
page write copy
|
||
|
C2C000
|
heap
|
page read and write
|
||
|
1F591652000
|
trusted library allocation
|
page read and write
|
||
|
3B97000
|
trusted library allocation
|
page read and write
|
||
|
ED7000
|
heap
|
page read and write
|
||
|
3ACA000
|
trusted library allocation
|
page read and write
|
||
|
498E000
|
stack
|
page read and write
|
||
|
E8F000
|
heap
|
page read and write
|
||
|
1246000
|
heap
|
page read and write
|
||
|
1F5EE475000
|
heap
|
page read and write
|
||
|
BB3000
|
heap
|
page read and write
|
||
|
3660000
|
heap
|
page read and write
|
||
|
BD9000
|
heap
|
page read and write
|
||
|
1140000
|
heap
|
page read and write
|
||
|
7FF61B21E000
|
unkown
|
page write copy
|
||
|
1F5EE110000
|
heap
|
page read and write
|
||
|
1F5F0571000
|
heap
|
page read and write
|
||
|
2FD0000
|
unkown
|
page read and write
|
||
|
39C0000
|
heap
|
page read and write
|
||
|
4990000
|
heap
|
page read and write
|
||
|
E1F000
|
stack
|
page read and write
|
||
|
7FF61B1B1000
|
unkown
|
page execute read
|
||
|
125E000
|
heap
|
page read and write
|
||
|
3B9B000
|
trusted library allocation
|
page read and write
|
||
|
7FFCDBB21000
|
unkown
|
page read and write
|
||
|
C03000
|
heap
|
page read and write
|
||
|
EC2000
|
heap
|
page read and write
|
||
|
25643F2000
|
stack
|
page read and write
|
||
|
3170000
|
heap
|
page read and write
|
||
|
1284000
|
heap
|
page read and write
|
||
|
1F5EDEC6000
|
unkown
|
page readonly
|
||
|
E7E000
|
heap
|
page read and write
|
||
|
1F591421000
|
trusted library allocation
|
page read and write
|
||
|
1F5F0F10000
|
trusted library allocation
|
page read and write
|
||
|
F30000
|
unkown
|
page readonly
|
||
|
16C0000
|
heap
|
page read and write
|
||
|
3230000
|
trusted library allocation
|
page read and write
|
||
|
BF9000
|
heap
|
page read and write
|
||
|
C2A000
|
heap
|
page read and write
|
||
|
1F5EE2B0000
|
heap
|
page read and write
|
||
|
1680000
|
heap
|
page read and write
|
||
|
2FF0000
|
trusted library allocation
|
page read and write
|
||
|
A3D000
|
stack
|
page read and write
|
||
|
2F10000
|
heap
|
page read and write
|
||
|
1F5F1020000
|
heap
|
page read and write
|
||
|
58A000
|
unkown
|
page read and write
|
||
|
7FF61B228000
|
unkown
|
page readonly
|
||
|
1156000
|
heap
|
page read and write
|
||
|
3BA3000
|
trusted library allocation
|
page read and write
|
||
|
328E000
|
stack
|
page read and write
|
||
|
3AD3000
|
trusted library allocation
|
page read and write
|
||
|
1281000
|
heap
|
page read and write
|
||
|
2565FFB000
|
stack
|
page read and write
|
||
|
7FFCDBB54000
|
unkown
|
page read and write
|
||
|
C36000
|
heap
|
page read and write
|
||
|
1248000
|
heap
|
page read and write
|
||
|
AEE000
|
stack
|
page read and write
|
||
|
124F000
|
heap
|
page read and write
|
||
|
3700000
|
heap
|
page read and write
|
||
|
3AC2000
|
trusted library allocation
|
page read and write
|
||
|
EE4000
|
heap
|
page read and write
|
||
|
25663FE000
|
stack
|
page read and write
|
||
|
2FE0000
|
heap
|
page read and write
|
||
|
7FF61B222000
|
unkown
|
page readonly
|
||
|
25633FE000
|
stack
|
page read and write
|
||
|
F30000
|
unkown
|
page readonly
|
||
|
7FFCB35C0000
|
trusted library allocation
|
page read and write
|
||
|
3AD2000
|
trusted library allocation
|
page read and write
|
||
|
5EBF000
|
stack
|
page read and write
|
||
|
3B9F000
|
trusted library allocation
|
page read and write
|
||
|
EDE000
|
heap
|
page read and write
|
||
|
36E0000
|
heap
|
page read and write
|
||
|
C2B000
|
heap
|
page read and write
|
||
|
2FF0000
|
trusted library allocation
|
page read and write
|
||
|
3AC5000
|
trusted library allocation
|
page read and write
|
||
|
EC3000
|
heap
|
page read and write
|
||
|
1F5F0A00000
|
heap
|
page read and write
|
||
|
7FFCDB340000
|
unkown
|
page readonly
|
||
|
2562FFE000
|
stack
|
page read and write
|
||
|
1F5EE3F3000
|
trusted library allocation
|
page read and write
|
||
|
B8F000
|
heap
|
page read and write
|
||
|
15DF000
|
stack
|
page read and write
|
||
|
A8E000
|
unkown
|
page readonly
|
||
|
3AD4000
|
trusted library allocation
|
page read and write
|
||
|
10AE000
|
stack
|
page read and write
|
||
|
1F5F08DE000
|
heap
|
page read and write
|
||
|
EF7000
|
heap
|
page read and write
|
||
|
7FF61BC28000
|
unkown
|
page readonly
|
||
|
58E000
|
unkown
|
page readonly
|
||
|
F0F000
|
heap
|
page read and write
|
||
|
11EE000
|
stack
|
page read and write
|
||
|
1F5F0588000
|
heap
|
page read and write
|
||
|
1F5F0C92000
|
heap
|
page read and write
|
||
|
EA1000
|
heap
|
page read and write
|
||
|
7FFCB3506000
|
trusted library allocation
|
page execute and read and write
|
||
|
7FFCDB9B5000
|
unkown
|
page readonly
|
||
|
B91000
|
heap
|
page read and write
|
||
|
3B95000
|
trusted library allocation
|
page read and write
|
||
|
1227000
|
heap
|
page read and write
|
||
|
BE0000
|
heap
|
page read and write
|
||
|
F31000
|
unkown
|
page execute read
|
||
|
1F580001000
|
trusted library allocation
|
page read and write
|
||
|
94B000
|
stack
|
page read and write
|
||
|
1F5EFC25000
|
heap
|
page read and write
|
||
|
1F5EE22E000
|
heap
|
page read and write
|
||
|
3000000
|
heap
|
page read and write
|
||
|
3230000
|
trusted library allocation
|
page read and write
|
||
|
C03000
|
heap
|
page read and write
|
||
|
16B0000
|
heap
|
page read and write
|
||
|
3AC1000
|
trusted library allocation
|
page read and write
|
||
|
7FF61CDA2000
|
unkown
|
page readonly
|
||
|
521000
|
unkown
|
page execute read
|
||
|
3AD0000
|
trusted library allocation
|
page read and write
|
||
|
1F5EFDF0000
|
heap
|
page execute and read and write
|
||
|
BC5000
|
heap
|
page read and write
|
||
|
BB1000
|
heap
|
page read and write
|
||
|
7FF61CC33000
|
unkown
|
page readonly
|
||
|
7FF61B21F000
|
unkown
|
page write copy
|
||
|
3230000
|
trusted library allocation
|
page read and write
|
||
|
3AC8000
|
trusted library allocation
|
page read and write
|
There are 472 hidden memdumps, click here to show them.