IOC Report
{89eeeac4-e4d3-40a8-9048-e7cecfc98851}.xml

loading gif

Files

File Path
Type
Category
Malicious
{89eeeac4-e4d3-40a8-9048-e7cecfc98851}.xml
ASCII text, with very long lines (7659)
initial sample
C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\017b284d-17a3-4626-99a4-38d66d64d7f8.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\05c08225-f68e-46f5-a0bb-e2c8363f3998.tmp
JSON data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0bfa69cb-79ae-400c-ac60-c550f1d28c4f.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\2d88f16d-3ffe-4531-8299-5ba45816fedc.tmp
JSON data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\2f324793-a4f4-4649-8a90-9091bf8e849f.tmp
JSON data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\4007b4cd-0a88-440e-83d0-8353dab4a06d.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\57598b1d-ac24-4984-a574-7ec0d85fa5d3.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\862953a6-02a7-46e9-9f22-91859d1c17cd.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\1ac46940-b78c-4400-9503-f7cb3ba58f2e.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-671A3214-157C.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-671A3215-1CA8.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-671A3229-205C.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-671A3231-1D00.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\35c28d2c-9d8b-4ee4-89b8-577652431996.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\45dea9a7-c02e-4625-a1d2-af3b73d2bcf9.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\4e07ada5-875f-48fe-918d-843b58e34c65.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\833d6eb3-21d3-406f-86b1-5113e6d4dd76.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AssistanceHome\AssistanceHomeSQLite
SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 1
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DawnCache\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db
SQLite 3.x database, last written using SQLite version 3042000, file counter 14, database pages 8, cookie 0xe, schema 4, UTF-8, version-valid-for 14
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
SQLite 3.x database, last written using SQLite version 3042000, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityComp
SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 1, cookie 0x1, schema 4, UTF-8, version-valid-for 1
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 8, cookie 0x8, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 39, 1st free page 10, free pages 4, cookie 0x45, schema 4, UTF-8, version-valid-for 3
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 28, cookie 0x1d, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network Action Predictor
SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 11, cookie 0x6, schema 4, UTF-8, version-valid-for 3
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\1c9e3a30-64e9-4696-9a6a-ed9848af15fe.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\3bdb7cfa-7271-41f9-b635-764bc4df9ab0.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\5ede73ee-fa80-4bc7-91ff-a04c0742b65b.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\85741f60-8010-44f6-b6b0-6a6065c54114.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF2ee2e.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF3d89e.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3035005, file counter 4, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 4
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF2cd77.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF2d920.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity~RF2ee2e.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Trust Tokens
SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 9, cookie 0x6, schema 4, UTF-8, version-valid-for 3
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\b75175f5-37f0-40c4-aa59-1115aa7851c3.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\f2f1dc0e-179e-4139-be3f-bb9d416584cc.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\fc04b53c-54ca-4b24-a922-9aadf29d9a5d.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF303f9.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF33d39.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF36dde.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF3c3ce.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\PreferredApps
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF31d8b.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Cache\Cache_Data\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\17f34b33-52aa-4e35-b1e9-9352c08d2517.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\76efb816-08fb-44e8-b0ff-d7f48cfe0ac5.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\8ffe178d-e86a-4b51-ab4e-0a585c248b1c.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\91c92e27-0daa-4221-ae09-6c06441a1433.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State~RF300bc.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State~RF3e1b6.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3035005, file counter 4, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 4
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF2d920.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens
SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 9, cookie 0x6, schema 4, UTF-8, version-valid-for 3
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\f1318ee9-5fa5-4265-9b89-820ca029e413.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Top Sites
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 7, 1st free page 5, free pages 2, cookie 0x5, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 4, database pages 87, cookie 0x66, schema 4, UTF-8, version-valid-for 4
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data-journal
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\aeef73ba-fbce-498e-9eaf-2cd8995fb36f.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json
ASCII text, with very long lines (3951), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\bfe73781-b033-4bdf-8dcc-4df17efa8c81.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\c68303cd-a593-414a-9578-fe73d4497155.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\d9116dac-1c16-464b-884a-51e528cb654f.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\e190d06f-d1fc-4bef-8a0e-8e91f4455185.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 4, cookie 0x2, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2b0a8.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2b2ac.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2b2bc.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2dd08.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF30291.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF302df.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF302ef.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF323e4.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF323f4.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF39c7f.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3c39f.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3fe37.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_0
FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_3
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\index
FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSynchronousLookupUris
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSynchronousLookupUris_0
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-0
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_636976985063396749.rel.v2
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\a23ab6e7-483d-442c-84f6-dbb5f579a887.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\bdd2a195-7279-4f5e-a328-f3d8c5be5c29.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\c72e97e5-da73-4840-9b70-921ddb6cfce0.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\dfa9a9d6-e6e6-4117-8dc4-04cf74c667ee.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\e47f7d0a-ac23-449f-9d41-59db2aef50f7.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\f711b50c-e61d-4d42-aa02-89d7a4a2a490.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DomainSuggestions\en-CH.1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{B42D271F-91FC-11EF-8C2C-ECF4BBEA1588}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{B42D2721-91FC-11EF-8C2C-ECF4BBEA1588}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (313), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (311), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (317), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-314712940\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (334), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (307), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (313), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (311), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (313), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (315), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (311), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\xmltreeview[1]
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\known_providers_download_v1[1].xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\suggestions[1].en-CH
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\favicon[1].ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
C:\Users\user\AppData\Local\Temp\26039923-c6a6-411e-a573-963f168cd084.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\2663cbca-37dd-4dbf-9047-82d4bb6a5eb9.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Temp\55c909c3-96d9-4024-83d6-ee613f57056b.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 276634
dropped
C:\Users\user\AppData\Local\Temp\949d793a-1a5f-4249-b979-098f1db817c0.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Temp\KnoC6F0.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\a049d533-5890-4fd0-9e81-3006dc0718ac.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\cv_debug.log
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_300838947\CRX_INSTALL\_metadata\verified_contents.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_300838947\CRX_INSTALL\content.js
Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_300838947\CRX_INSTALL\content_new.js
Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_300838947\CRX_INSTALL\manifest.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_300838947\a049d533-5890-4fd0-9e81-3006dc0718ac.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\26039923-c6a6-411e-a573-963f168cd084.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\af\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\am\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ar\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\az\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\be\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\bg\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\bn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ca\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\cs\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\cy\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\da\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\de\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\el\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\en\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\en_CA\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\en_GB\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\en_US\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\es\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\es_419\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\et\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\eu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\fa\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\fi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\fil\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\fr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\fr_CA\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\gl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\gu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\hi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\hr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\hu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\hy\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\id\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\is\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\it\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\iw\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ja\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ka\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\kk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\km\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\kn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ko\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\lo\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\lt\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\lv\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ml\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\mn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\mr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ms\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\my\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ne\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\nl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\no\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\pa\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\pl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\pt_BR\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\pt_PT\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ro\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ru\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\si\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\sk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\sl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\sr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\sv\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\sw\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ta\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\te\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\th\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\tr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\uk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\ur\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\vi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\zh_CN\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\zh_HK\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\zh_TW\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_locales\zu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\_metadata\verified_contents.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\dasherSettingSchema.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\manifest.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\offscreendocument.html
HTML document, ASCII text
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\offscreendocument_main.js
ASCII text, with very long lines (3700)
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\page_embed_script.js
ASCII text
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir7336_602406375\CRX_INSTALL\service_worker_bin_prod.js
ASCII text, with very long lines (3705)
dropped
C:\Users\user\AppData\Local\Temp\~DF94EA510BB99C4B82.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFD6FD9B97F7FAE707.TMP
data
dropped
There are 305 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --from-ie-to-edge=3 --ie-frame-hwnd=1044c
 malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2148,i,17130950267540690854,13973253162782942083,262144 /prefetch:3
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --from-ie-to-edge=3 --ie-frame-hwnd=1044c --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2828 --field-trial-handle=2620,i,4059753573926837572,7725692899582869137,262144 /prefetch:3
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=5868 --field-trial-handle=2620,i,4059753573926837572,7725692899582869137,262144 /prefetch:8
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=5768 --field-trial-handle=2620,i,4059753573926837572,7725692899582869137,262144 /prefetch:8
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=5768 --field-trial-handle=2620,i,4059753573926837572,7725692899582869137,262144 /prefetch:8
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
 malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=2092,i,1275717734434222331,13943601166396774442,262144 /prefetch:3
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
 malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2200 --field-trial-handle=2176,i,13810906325023881848,113091338376837868,262144 /prefetch:3
malicious
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files (x86)\Microsoft Office\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\user\Desktop\{89eeeac4-e4d3-40a8-9048-e7cecfc98851}.xml"
C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\user\Desktop\{89eeeac4-e4d3-40a8-9048-e7cecfc98851}.xml
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1020 CREDAT:17410 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe" --from-ie-to-edge=3 --ie-frame-hwnd=1044c
C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe
"C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new
There are 6 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://id.search.yahoo.com/
unknown
http://in.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://uk.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
http://au.search.yahoo.com/search?p=
unknown
http://pe.search.yahoo.com/search?p=
unknown
http://br.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
http://es.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://search.yahoo.com/favicon.ico
unknown
http://hk.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
http://it.search.yahoo.com/search?p=
unknown
http://br.search.yahoo.com/
unknown
http://malaysia.search.yahoo.com/search?p=
unknown
http://ph.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://co.search.yahoo.com/search?p=
unknown
http://fr.search.yahoo.com/
unknown
https://docs.google.com/
unknown
http://sugg-ie.in.search.yahoo.com/os?market=in&appid=ie8&command=
unknown
http://search.live.com/results.aspx?FORM=SOLTDF&q=
unknown
http://sugg-ie.th.search.yahoo.com/os?market=th&appid=ie8&command=
unknown
http://ve.search.yahoo.com/search?p=
unknown
http://sugg-ie.sg.search.yahoo.com/os?market=sg&appid=ie8&command=
unknown
http://sugg-ie.es.search.yahoo.com/os?market=es&appid=ie8&command=
unknown
http://search.cn.yahoo.com/
unknown
http://sugg-ie.ar.search.yahoo.com/os?market=ar&appid=ie8&command=
unknown
https://drive.google.com/
unknown
http://ar.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
http://livesearch.msn.co.kr/
unknown
http://sg.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
http://au.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://ph.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
http://qc.search.yahoo.com/search?p=
unknown
http://www.reddit.com/
unknown
http://sugg-ie.vn.search.yahoo.com/os?market=vn&appid=ie8&command=
unknown
http://ca.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
https://www.office.com/
unknown
http://cf.search.yahoo.com/
unknown
http://tw.search.yahoo.com/search?p=
unknown
http://hk.search.yahoo.com/search?p=
unknown
http://espanol.search.yahoo.com/search?p=
unknown
http://tw.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
https://drive-daily-2.corp.google.com/
unknown
https://drive-daily-4.corp.google.com/
unknown
http://ar.search.yahoo.com/
unknown
http://search.msn.co.jp/results.aspx?q=
unknown
http://sugg-ie.ph.search.yahoo.com/os?market=ph&appid=ie8&command=
unknown
http://sg.search.yahoo.com/search?p=
unknown
http://kr.search.yahoo.com/
unknown
http://search.msn.co.uk/results.aspx?q=
unknown
http://sugg-ie.nz.search.yahoo.com/os?market=nz&appid=ie8&command=
unknown
http://espanol.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
http://fr.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://ca.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
http://ph.search.yahoo.com/search?p=
unknown
https://drive-daily-1.corp.google.com/
unknown
http://kr.search.yahoo.com/ei=UTF-8&fr=yie8ms&p=
unknown
https://drive-daily-5.corp.google.com/
unknown
http://cl.search.yahoo.com/search?p=
unknown
http://hk.search.yahoo.com/
unknown
http://uk.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://mx.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://sugg-ie.ca.search.yahoo.com/os?market=ca&appid=ie8&command=
unknown
http://sugg-ie.de.search.yahoo.com/os?market=de&appid=ie8&command=
unknown
http://vn.search.yahoo.com/search?p=
unknown
https://www.google.com/chrome
unknown
http://sugg-ie.au.search.yahoo.com/os?market=au&appid=ie8&command=
unknown
http://www.youtube.com/
unknown
http://malaysia.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
https://chromewebstore.google.com/
unknown
http://hk.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://tw.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://search.yahoo.com/search?p=
unknown
https://drive-preprod.corp.google.com/
unknown
https://chrome.google.com/webstore/
unknown
http://sugg-ie.it.search.yahoo.com/os?market=it&appid=ie8&command=
unknown
https://clients2.googleusercontent.com/crx/blobs/AYA8VyyVmiyWvldTRU0qGaR4RUSL6-YrG6uKRsMPsRWu4uzTWsENQ0Oe4TwjJlNxU5Vx3wW0XCsKQHAJ2XkWCO0eQ7UF3N9B6xg6w6N4ZQ_ezL5_s1EfR63s25vMOuhpdI4AxlKa5cntVqVuAOGwNK_pRVduNn5fPIzZ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_83_1_0.crx
216.58.206.65
http://ca.search.yahoo.com/search?p=
unknown
http://es.search.yahoo.com/search?p=
unknown
http://espanol.search.yahoo.com/
unknown
http://br.search.yahoo.com/search?p=
unknown
http://sugg-ie.mx.search.yahoo.com/os?market=mx&appid=ie8&command=
unknown
http://it.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
http://it.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://sugg-ie.hk.search.yahoo.com/os?market=hk&appid=ie8&command=
unknown
http://in.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
http://www.amazon.com/
unknown
http://th.search.yahoo.com/search?p=
unknown
http://cnweb.search.live.com/results.aspx?q=
unknown
http://co.search.yahoo.com/
unknown
http://www.twitter.com/
unknown
http://au.search.yahoo.com/
unknown
http://search.live.com/results.aspx?q=
unknown
http://sugg-ie.e1.search.yahoo.com/os?market=e1&appid=ie8&command=
unknown
http://sugg-ie.tw.search.yahoo.com/os?market=tw&appid=ie8&command=
unknown
http://malaysia.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://nz.search.yahoo.com/
unknown
http://es.search.yahoo.com/
unknown
https://drive-staging.corp.google.com/
unknown
http://sugg-ie.uk.search.yahoo.com/os?market=uk&appid=ie8&command=
unknown
http://de.search.yahoo.com/search?ei=UTF-8&fr=yie8ms&p=
unknown
http://kr.search.yahoo.com/search?ei=UTF-8&fr=yie7c&p=
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
chrome.cloudflare-dns.com
162.159.61.3
googlehosted.l.googleusercontent.com
216.58.206.65
sni1gl.wpc.nucdn.net
152.199.21.175
clients2.googleusercontent.com
unknown
198.187.3.20.in-addr.arpa
unknown
200.163.202.172.in-addr.arpa
unknown

IPs

IP
Domain
Country
Malicious
13.107.246.57
unknown
United States
216.58.206.65
googlehosted.l.googleusercontent.com
United States
142.250.114.95
unknown
United States
162.159.61.3
chrome.cloudflare-dns.com
United States
239.255.255.250
unknown
Reserved
23.218.232.182
unknown
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing
NTPMigrationVer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListXMLVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListXMLVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
SoftwareFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
VendorId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
DeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
SubSysId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
Revision
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListDomainAttributeSet
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
StaleCompatCache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\VersionManager
FirstCheckForUpdateLowDateTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\VersionManager
FirstCheckForUpdateHighDateTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
CompatibilityFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
HomepagesUpgradeVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
SecuritySafe
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\24\417C44EB
@ieframe.dll,-12512
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\AdminActive
{B42D271F-91FC-11EF-8C2C-ECF4BBEA1588}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\WindowsSearch
Version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
SearchBandMigrationVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
FullScreen
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery
AdminActive
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
SearchScopesUpgradeVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
DefaultScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
2BB20B33B4171CDAAB6469225AE6A582ED33D7B488
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435B-BC74-9C25C1C588A9}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MAO Settings
DiscardLoadTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
KnownProvidersUpgradeTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
ImageStoreRandomFolder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Suggested Sites
DataStreamEnabledState
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Suggested Sites
MigrationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
IEAppEolNotificationLastShownTimeStamp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
DisplayName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconURLFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconPath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
URL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURLFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{00021493-0000-0000-C000-000000000046}\Enum
Implementing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{00021494-0000-0000-C000-000000000046}\Enum
Implementing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
Version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
UpgradeTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
NTURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
NTTopResultURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
NTSuggestionsURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
NTLogoPath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
NTLogoURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing
NTPFirstRun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
MFV
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion\FileNames
en-CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\DomainSuggestion
NextUpdateDate
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
2BB20B33B4171CDAAB6469225AE6A582ED33D7B488
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
URL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURLFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
2BB20B33B4171CDAAB6469225AE6A582ED33D7B488
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LatestUpsellAttemptedSessionTime
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LastStubPath
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0034-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0034-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0041-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0041-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0052-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0052-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0054-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0054-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0055-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0055-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0057-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0059-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0059-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0061-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0061-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0062-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0064-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0064-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0065-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0065-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0072-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0072-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0074-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0074-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0074-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0074-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0091-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0091-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0092-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0092-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0093-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0093-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0098-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0098-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0048-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0048-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0049-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0051-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0051-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0052-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0052-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0053-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0054-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0055-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0056-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0057-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0057-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0058-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0058-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0058-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0058-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0059-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0060-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0060-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0061-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0061-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0062-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0062-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0063-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0063-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0063-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0063-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0064-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0064-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0064-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0064-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0065-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0065-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0065-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0065-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0065-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0065-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0066-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0066-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0066-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0067-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0067-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0068-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0069-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0069-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0069-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0069-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0070-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0070-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0070-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0070-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0070-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0070-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0071-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0071-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0071-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0071-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0072-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0072-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0072-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0072-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0073-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0073-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
media.cdm.origin_data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PrefsLightweight
lw_13bbe73648289fe96dfa1aa1bf23b3da
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
UpsellDisabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
QuietExpirationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
lastrun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\Clients\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\Commands\on-logon-autolaunch
Enabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MicrosoftEdgeAutoLaunch_C366A24065C39A1BE76E148DC2D0A868
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Profiles\Default
ShortcutName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Profiles\Default
ProfileErrorState
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Profiles
EnhancedLinkOpeningDefault
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
dgiklkfkllikcanfonkcabmbdfmgleag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
fikbjbembnmfhppjfnmfkahdhfohhjmg
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ghbmnnjooekpmoecnnnilnnbdlolhkhi
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
iglcjdemknebjbklcgkfaebgojjphkec
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ihmafllikibpmigkcoadcmckbfhibefp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jdiccldimpdaibmpdkjnbmckianbfold
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ncbjelpjchkpbikbpkcchkhkblodoama
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
prefs.preference_reset_time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
dgiklkfkllikcanfonkcabmbdfmgleag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
fikbjbembnmfhppjfnmfkahdhfohhjmg
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ghbmnnjooekpmoecnnnilnnbdlolhkhi
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
iglcjdemknebjbklcgkfaebgojjphkec
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ihmafllikibpmigkcoadcmckbfhibefp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jdiccldimpdaibmpdkjnbmckianbfold
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jmjflgjpcpepeafmmgdpfkogkghcpiha
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ncbjelpjchkpbikbpkcchkhkblodoama
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.reporting
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
media.storage_id_salt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_startup_urls
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.prompt_wave
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.account_id
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.prompt_seed
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_homepage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.last_username
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
default_search_provider_data.template_url_data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
safebrowsing.incidents_sent
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
pinned_tabs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
search_provider_overrides
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.last_account_id
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.prompt_version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
session.startup_urls
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
session.restore_on_startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_default_search
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
prefs.preference_reset_time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
browser.show_home_button
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
homepage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
homepage_is_newtabpage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
lastrun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
lastrun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
There are 658 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
2A803C02000
heap
page read and write
CF614FE000
stack
page read and write
2A803C45000
heap
page read and write
CF619FE000
unkown
page readonly
2A803C00000
heap
page read and write
2A805602000
heap
page read and write
2A803A30000
heap
page read and write
CF617FE000
unkown
page readonly
CF613FE000
unkown
page readonly
CF610FE000
stack
page read and write
CF618FB000
stack
page read and write
2A803D02000
heap
page read and write
CF616FE000
stack
page read and write
2A803B40000
heap
page read and write
2A803C26000
heap
page read and write
2A803B60000
heap
page read and write
CF60FFE000
unkown
page readonly
2A803A50000
heap
page read and write
CF615FE000
unkown
page readonly
2A803C64000
heap
page read and write
2A803C6E000
heap
page read and write
CF60CF7000
stack
page read and write
CF60EFE000
stack
page read and write
2A803C13000
heap
page read and write
2A803C3B000
heap
page read and write
2A803C2F000
heap
page read and write
2A803C84000
heap
page read and write
CF612FD000
stack
page read and write
CF611FE000
unkown
page readonly
2A803B30000
heap
page readonly
There are 20 hidden memdumps, click here to show them.