IOC Report
563299efce875400a8d9b44b96597c8e-sample (1).zip

loading gif

Files

File Path
Type
Category
Malicious
563299efce875400a8d9b44b96597c8e-sample (1).zip
Zip archive data, at least v2.0 to extract, compression method=deflate
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\33CUD2J1\cz.seznam.software.libszndesktop-2.1.35-win32[1].zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\90SNK17T\cz.seznam.software.libfoxcub-3.3.8-win32[1].zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\90SNK17T\cz.seznam.software.sznsetup-1.2.7-win32[1].zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\AN5UOLP8\cz.seznam.software.libfoxcub64-3.3.8-win32[1].zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\AN5UOLP8\cz.seznam.software.szndesktop-2.0.32-win32[1].zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\AN5UOLP8\cz.seznam.software.szninstall-1.1.15-win32[1].zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\AN5UOLP8\szn-software-fflisticka-4.0.8-win32[1].zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\C7S8M5VS\cz.seznam.software.lightspeed-1210-12.10.18-win32[1].zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Temp\nsm983C.tmp\listicka.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
dropped
malicious
C:\Users\user\AppData\Local\Temp\nsm983C.tmp\setuppicasa39-setup.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
dropped
malicious
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\download\cz.seznam.software.szninstall-1.1.15-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\download\cz.seznam.software.sznsetup-1.2.7-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\REG.EXE
PE32 executable (console) Intel 80386, for MS Windows, UPX compressed
dropped
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\cz.seznam.software.libfoxcub-3.3.8-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\cz.seznam.software.libfoxcub64-3.3.8-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\cz.seznam.software.libszndesktop-2.1.35-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\cz.seznam.software.lightspeed-1210-12.10.18-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\cz.seznam.software.szndesktop-2.0.32-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\szn-software-fflisticka-4.0.8-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\com.microsoft.msdn.msvcr100-10.0.40219.325-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\com.microsoft.msdn.msvcr110-11.0.51106.1-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.libfoxcub-3.3.4-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.libfoxcub64-3.3.4-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.libszndesktop-2.1.29-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.lightspeed-1210-12.10.12-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.lightspeed-1210-12.10.17-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.pp-1.0.2-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.szndesktop-2.0.31-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.szninstall-1.1.14-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.sznsetup-1.2.6-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\install\szn-software-fflisticka-4.0.4-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\sznsetup-lt.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\sznsetup.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
malicious
C:\Windows\SysWOW64\GPhotos.scr
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
malicious
C:\Program Files (x86)\Google\Picasa3\MovieThumb.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\Picasa3.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\Picasa3i18n.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\PicasaPhotoViewer.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\buttons\core-lh2.pbz
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Program Files (x86)\Google\Picasa3\buttons\geotag.pbz
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Download Picasa.url
MS Windows 95 Internet shortcut text (URL=<http://www.google.com/picasa>), ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\GoogleBreakpad
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Resources
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\GoogleBreakpad
Mach-O universal binary with 2 architectures: [i386:Mach-O i386 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|WEAK_DEFINES|BINDS_TO_WEAK|NO_REEXPORTED_DYLIBS>] [ppc:Mach-O ppc dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|WEAK_DEFINES|BINDS_TO_WEAK|NO_REEXPORTED_DYLIBS>]
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Info.plist
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Inspector
Mach-O universal binary with 2 architectures: [i386:\012- Mach-O i386 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|BINDS_TO_WEAK>] [ppc:\012- Mach-O ppc executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|BINDS_TO_WEAK>]
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Info.plist
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\MacOS\Reporter
Mach-O universal binary with 2 architectures: [i386:\012- Mach-O i386 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ppc:\012- Mach-O ppc executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>]
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\PkgInfo
ASCII text, with no line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\English.lproj\Breakpad.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\English.lproj\Louserzable.strings
Unicode text, UTF-16, little-endian text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\de.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\en_GB.lproj\Louserzable.strings
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\es.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\fr.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\it.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\ja.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\nl.lproj\Louserzable.strings
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\zh_CN.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\zh_TW.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\Current
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Info.plist
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\MacOS\Picasa CD Slideshow
Mach-O i386 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|WEAK_DEFINES|BINDS_TO_WEAK>
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\PkgInfo
ASCII text, with no line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\Dialogs.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\Dialogs.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\Dialogs.nib\objects.xib
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\NESW.png
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\NWSE.png
PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\PicasaCD.icns
Mac OS X icon, 289087 bytes, "is32" type
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\bg.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\bg.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\bg.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ca.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ca.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ca.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\cdgo.tre
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\cdgo.ui
Adobe Photoshop Image, 800 x 600, RGB, 3x 8-bit channels
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\crosshairthin.png
PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\cs.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\cs.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\cs.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\da.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\da.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\da.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\de.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\de.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\de.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\deletecursor.png
PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\dropper.png
PNG image data, 17 x 16, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\el.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\el.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\el.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\en_GB.lproj\i18n\cdgo.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\en_GB.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\en_GB.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\es.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\es.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\es.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\fi.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\fi.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\fi.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\fil.lproj\i18n\cdgo.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\fil.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\fil.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\fr.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\fr.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\fr.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\hr.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\hr.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\hr.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\hu.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\hu.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\hu.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\id.lproj\i18n\cdgo.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\id.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\id.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\it.lproj\i18n\cdgo.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\it.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\it.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ja.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ja.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ja.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ko.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ko.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ko.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\lt.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\lt.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\lt.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\lv.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\lv.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\lv.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\nl.lproj\i18n\cdgo.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\nl.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\nl.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\no.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\no.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\no.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pl.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pl.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pl.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pt.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pt.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pt.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pt_BR.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pt_BR.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pt_BR.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pt_PT.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pt_PT.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\pt_PT.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ro.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ro.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ro.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ru.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ru.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\ru.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sk.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sk.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sk.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sl.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sl.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sl.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sr.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sr.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sr.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sv.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sv.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\sv.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\tl.lproj\i18n\cdgo.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\tl.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\tl.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\tr.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\tr.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\tr.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\uk.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\uk.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\uk.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\zh_CN.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\zh_CN.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\zh_CN.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\zh_TW.lproj\i18n\cdgo.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\zh_TW.lproj\i18n\cdgo_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa CD Slideshow.app\Contents\Resources\zh_TW.lproj\i18n\cdgo_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\GoogleBreakpad
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Resources
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\GoogleBreakpad
Mach-O universal binary with 2 architectures: [i386:Mach-O i386 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|WEAK_DEFINES|BINDS_TO_WEAK|NO_REEXPORTED_DYLIBS>] [ppc:Mach-O ppc dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|WEAK_DEFINES|BINDS_TO_WEAK|NO_REEXPORTED_DYLIBS>]
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Info.plist
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Inspector
Mach-O universal binary with 2 architectures: [i386:\012- Mach-O i386 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|BINDS_TO_WEAK>] [ppc:\012- Mach-O ppc executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|BINDS_TO_WEAK>]
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Info.plist
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\MacOS\Reporter
Mach-O universal binary with 2 architectures: [i386:\012- Mach-O i386 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>] [ppc:\012- Mach-O ppc executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL>]
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\PkgInfo
ASCII text, with no line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\English.lproj\Breakpad.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\English.lproj\Louserzable.strings
Unicode text, UTF-16, little-endian text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\ReporterIcon.icns
Mac OS X icon, 170816 bytes, "is32" type
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\de.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\en_GB.lproj\Louserzable.strings
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\es.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\fr.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\goArrow.png
PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\it.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\ja.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\nl.lproj\Louserzable.strings
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\zh_CN.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\A\Resources\Reporter.app\Contents\Resources\zh_TW.lproj\Louserzable.strings
Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Frameworks\GoogleBreakpad.framework\Versions\Current
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Info.plist
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\MacOS\Picasa Restore
Mach-O i386 executable, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|BINDS_TO_WEAK>
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\PkgInfo
ASCII text, with no line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\English.lproj\InfoPlist.strings
Unicode text, UTF-16, little-endian text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\English.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\English.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\English.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\PicasaRestore.icns
Mac OS X icon, 188983 bytes, "is32" type
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\bg.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\bg.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\bg.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\bg.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\bg.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ca.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ca.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ca.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ca.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ca.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\cs.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\cs.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\cs.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\cs.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\cs.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\da.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\da.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\da.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\da.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\da.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\de.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\de.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\de.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\de.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\de.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\el.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\el.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\el.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\el.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\el.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\en_GB.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\en_GB.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\en_GB.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\en_GB.lproj\i18n\restore_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\en_GB.lproj\i18n\restore_stringres.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\es.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\es.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\es.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\es.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\es.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fi.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fi.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fi.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fi.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fi.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fil.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fil.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fil.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fil.lproj\i18n\restore_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fil.lproj\i18n\restore_stringres.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fr.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fr.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fr.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fr.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\fr.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\hr.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\hr.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\hr.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\hr.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\hr.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\hu.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\hu.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\hu.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\hu.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\hu.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\id.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\id.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\id.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\id.lproj\i18n\restore_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\id.lproj\i18n\restore_stringres.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\it.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\it.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\it.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\it.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\it.lproj\i18n\restore_stringres.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ja.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ja.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ja.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ja.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ja.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ko.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ko.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ko.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ko.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ko.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\lt.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\lt.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\lt.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\lt.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\lt.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\lv.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\lv.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\lv.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\lv.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\lv.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\nl.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\nl.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\nl.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\nl.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\nl.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\no.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\no.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\no.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\no.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\no.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pl.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pl.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pl.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pl.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pl.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt_BR.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt_BR.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt_BR.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt_BR.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt_BR.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt_PT.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt_PT.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt_PT.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt_PT.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\pt_PT.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ro.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ro.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ro.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ro.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ro.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ru.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ru.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ru.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ru.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\ru.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sk.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sk.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sk.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sk.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sk.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sl.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sl.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sl.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sl.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sl.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sr.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sr.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sr.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sr.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sr.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sv.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sv.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sv.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sv.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\sv.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\tl.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\tl.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\tl.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\tl.lproj\i18n\restore_resexport.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\tl.lproj\i18n\restore_stringres.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\tr.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\tr.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\tr.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\tr.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\tr.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\uk.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\uk.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\uk.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\uk.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\uk.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\zh_CN.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\zh_CN.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\zh_CN.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\zh_CN.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\zh_CN.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\zh_TW.lproj\PRMainMenu.nib\classes.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\zh_TW.lproj\PRMainMenu.nib\info.nib
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\zh_TW.lproj\PRMainMenu.nib\keyedobjects.nib
Apple binary property list
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\zh_TW.lproj\i18n\restore_resexport.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\Picasa Restore.app\Contents\Resources\zh_TW.lproj\i18n\restore_stringres.xml
XML 1.0 document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\PicasaCD.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\PicasaRestore.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\cdgo.tre
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\cdautorun\cdgo.ui
Adobe Photoshop Image, 800 x 600, RGB, 3x 8-bit channels
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_bg.html
HTML document, ISO-8859 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_ca.html
HTML document, ISO-8859 text, with very long lines (395)
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_cs.html
HTML document, Non-ISO extended-ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_da.html
HTML document, ISO-8859 text, with very long lines (387)
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_de.html
HTML document, ISO-8859 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_el.html
HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (458)
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_es.html
HTML document, ISO-8859 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_fi.html
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_fr.html
HTML document, ISO-8859 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_hi.html
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_hr.html
HTML document, Non-ISO extended-ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_hu.html
HTML document, ISO-8859 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_id.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_it.html
HTML document, ISO-8859 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_ja.html
HTML document, ASCII text, with very long lines (318)
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_ko.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_lt.html
HTML document, ISO-8859 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_lv.html
HTML document, ISO-8859 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_nl.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_no.html
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_pl.html
HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (495)
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_pt-BR.html
HTML document, ISO-8859 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_ro.html
HTML document, ISO-8859 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_ru.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_sk.html
HTML document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_sl.html
HTML document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_sr.html
HTML document, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_sv.html
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_th.html
HTML document, ASCII text, with very long lines (387)
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_tr.html
HTML document, Unicode text, UTF-8 text, with very long lines (373)
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_uk.html
HTML document, Unicode text, UTF-8 text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_vi.html
HTML document, ISO-8859 text, with very long lines (1543)
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_zh-CN.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\i18n\uninstall_zh-TW.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\licenses\adobe_xmp_toolkit.txt
Algol 68 source, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\licenses\lcms.txt
ASCII text, with very long lines (460)
dropped
C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\plugins\CDVDR\CDVDR.yti
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\plugins\Red.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\plugins\expwebsites\expwebsites.psd
Adobe Photoshop Image, 32 x 31, RGBA, 4x 8-bit channels
dropped
C:\Program Files (x86)\Google\Picasa3\plugins\expwebsites\expwebsites.yti
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\plugins\red.cfg
data
dropped
C:\Program Files (x86)\Google\Picasa3\plugins\ytITivo.yti
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\qtsupport.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\HelveticaNeue Condensed-20-1.000000-400-0.ytf
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\HelveticaNeue MediumCond-14-1.000000-400-0.ytf
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\HelveticaNeue MediumCond-28-1.000000-400-0.ytf
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\Praxis LT Regular-18-1.000000-400-0.ytf
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\Praxis Semi Bold-Heavy-11-1.000000-400-0.ytf
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\Praxis Semi Bold-Heavy-12-1.000000-400-0.ytf
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\Praxis Semi Bold-Heavy-12-1.000000-700-0.ytf
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\Praxis Semi Bold-Heavy-13-1.000000-700-0.ytf
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\Praxis Semi Bold-Heavy-14-1.000000-400-0.ytf
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\Praxis Semi Bold-Heavy-14-1.000000-700-0.ytf
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\Praxis Semi Bold-Heavy-16-1.000000-700-0.ytf
GLS_BINARY_LSB_FIRST
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\Praxis Semi Bold-Heavy-18-1.000000-700-0.ytf
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\about.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\addtogroup.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\album.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\auto_backup_prompt.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\autocomplete_errors.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\bezier.txt
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\cdchoose.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\compacting.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\confirm.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\confirmsync.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\constants.ui
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\contactmgr.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\customaspectratio.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\defaults.ini
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\eula.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\export.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\favicon.ico
MS Windows icon resource - 9 icons, 48x48, 16 colors, 4 bits/pixel, 32x32, 16 colors, 4 bits/pixel
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\filterdesc.xml
exported SGML document, ASCII text, with very long lines (398)
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\filters.txt
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\fliprtl.txt
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\genericlogin.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag.kml
XML 1.0 document, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag\addmarker.png
PNG image data, 27 x 26, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag\bottom_image.gif
GIF image data, version 89a, 24 x 24
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag\close.gif
GIF image data, version 89a, 14 x 13
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag\geopanelscript.html
HTML document, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag\geopanelscript_v3.html
HTML document, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag\mm_20_green.png
PNG image data, 12 x 20, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag\mm_20_red.png
PNG image data, 12 x 20, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag\mm_20_shadow.png
PNG image data, 22 x 20, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag\picasa_geopanel_bin.js
ASCII text, with very long lines (840)
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag\picasa_geopanel_bin_v3.js
ASCII text, with very long lines (724)
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\geotag\picasa_infowindow.css
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_about.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_advoptions.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_confirm.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_debug.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_download.fen
exported SGML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_file_errors.fen
exported SGML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_filestatus.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_instructions.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_manage_devices.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_onboard.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_pinwheel_72.png
PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_pinwheel_72x2.png
PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_prefs.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_quota_error1.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_quota_error2.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_storage_notify.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\gpuploader_welcome.fen
exported SGML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\imageproperties.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\importweb.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\input.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\missing.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 96x72, components 3
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\move_database.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\moving_database.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\newbackupset.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\offsettime.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\options.fen
exported SGML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\orderprintsprefs.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\picasaweb_logo.gif
GIF image data, version 89a, 106 x 32
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\poster.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\properties.xml
XML 1.0 document, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\pwconfirm.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\quota.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\refresh_contacts_progress.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\rename.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\respack.yt
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\reviewprint.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\slingshot\respack.yt
data
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\splashbk.jpg
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2008:10:15 16:56:08], baseline, precision 8, 640x235, components 3
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\webexport.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\winedisable.txt
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\write_all_facetags.fen
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\xhairs.png
PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files (x86)\Google\Picasa3\runtime\youtube.fen
ASCII text, with very long lines (349)
dropped
C:\Program Files (x86)\Google\Picasa3\uninstall.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
dropped
C:\Program Files (x86)\Google\Picasa3\update\LifeScapeUpdater\currentVersion.ini
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\assets\maketext18.gif
GIF image data, version 87a, 397 x 22
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\assets\nav.gif
GIF image data, version 89a, 127 x 45
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\assets\prevnext.gif
GIF image data, version 89a, 70 x 45
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\assets\style.css
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\footer.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\header.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\imagelistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\imagelistfooter.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\imagelistheader.html
ASCII text, with no line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\imagetarget.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\includedtarget.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\index.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\itemheader.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\output_header.html
HTML document, ASCII text, with CR line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\style.css
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\targetlistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\examples\targetlistheader.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\index.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\documentation\style.css
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\TemplateNotes.txt
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\assets\style.css
assembler source, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\footer.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\frameset.htm
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\header.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\imagelistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\imagelistfooter.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\imagelistheader.html
ASCII text, with no line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\imagetarget.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\includedtarget.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\index.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\index.tpl
C source, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\itemheader.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\preview.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 280x390, components 3
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\style.css
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\targetlistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\targetlistheader.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackbg\verboseimagelistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\assets\style.css
assembler source, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\caption.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\footer.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\frameImageSet.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\frameIndex.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\framebase.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\framecaption.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\header.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\imageset.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\imagetarget.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\includedtarget.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\index.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\itemheader.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\preview.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 280x390, components 3
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\targetlistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\thumbnails.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\blackfrm\xLifescape.ini
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\assets\style.css
assembler source, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\footer.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\frameset.htm
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\header.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\imagelistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\imagelistfooter.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\imagelistheader.html
ASCII text, with no line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\imagetarget.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\includedtarget.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\index.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\index.tpl
C source, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\itemheader.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\preview.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 280x390, components 3
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\style.css
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\targetlistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\targetlistheader.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greybg\verboseimagelistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\assets\style.css
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\caption.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\footer.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\frameImageSet.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\frameIndex.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\framebase.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\framecaption.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\header.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\imageset.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\imagetarget.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\includedtarget.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\index.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\itemheader.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\preview.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 280x390, components 3
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\targetlistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\greyfrm\thumbnails.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\assets\style.css
assembler source, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\footer.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\frameset.htm
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\header.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\imagelistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\imagelistfooter.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\imagelistheader.html
ASCII text, with no line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\imagetarget.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\includedtarget.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\index.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\index.tpl
C source, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\itemheader.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\preview.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 280x390, components 3
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\style.css
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\targetlistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\targetlistheader.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitebg\verboseimagelistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\assets\style.css
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\caption.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\footer.html
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\frameImageSet.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\frameIndex.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\framebase.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\framecaption.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\header.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\imageset.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\imagetarget.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\includedtarget.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\index.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\itemheader.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\preview.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 280x390, components 3
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\targetlistelement.html
HTML document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\whitefrm\thumbnails.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\xml\footer.xml
ASCII text, with no line terminators
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\xml\header.xml
XML 1.0 document, ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\xml\imagelistelement.xml
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\xml\imagelistfooter.xml
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\xml\imagelistheader.xml
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\xml\index.tpl
ASCII text
dropped
C:\Program Files (x86)\Google\Picasa3\web\templates\xml\preview.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 280x390, components 3
dropped
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3310a4fa6cb9c60504498d7eea986fc2_9e146be9-c76a-4720-bcdb-53011b87bd06
Matlab v4 mat-file (little endian) , sparse, rows 0, columns 10
dropped
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3\Configure Picasa Photo Viewer.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Archive, ctime=Fri Oct 9 16:37:42 2015, mtime=Wed Oct 2 09:16:00 2024, atime=Fri Oct 9 16:37:42 2015, length=4806984, window=hide
dropped
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3\Picasa 3.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Fri Oct 9 16:37:40 2015, mtime=Wed Oct 2 09:15:58 2024, atime=Fri Oct 9 16:37:40 2015, length=10160456, window=hide
dropped
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3\Uninstall.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Fri Oct 9 16:37:44 2015, mtime=Wed Oct 2 09:16:00 2024, atime=Fri Oct 9 16:37:44 2015, length=212240, window=hide
dropped
C:\Users\Public\Desktop\Picasa 3.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Fri Oct 9 16:37:40 2015, mtime=Wed Oct 2 09:16:07 2024, atime=Fri Oct 9 16:37:40 2015, length=10160456, window=hide
dropped
C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
C:\Users\user\AppData\Local\Google\Picasa2\cache\cacheindex_0
ISO-8859 text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Picasa2\cache\feeds\cbc8c166b3afe4a32114ae7882d0efb0
XML 1.0 document, Unicode text, UTF-8 text, with very long lines (33882)
dropped
C:\Users\user\AppData\Local\Google\Picasa2\db3\albumdata_0
ISO-8859 text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Picasa2\db3\albums_0.db
ISO-8859 text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Picasa2\db3\bigthumbs_0.db
ISO-8859 text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Picasa2\db3\catdata_0
ISO-8859 text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Picasa2\db3\facetemplatesV2_0.db
ISO-8859 text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Picasa2\db3\imagedata_0
ISO-8859 text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Picasa2\db3\previews_0.db
ISO-8859 text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Picasa2\db3\profilephotos_0.db
ISO-8859 text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Picasa2\db3\thumbs2_0.db
ISO-8859 text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Picasa2\db3\thumbs_0.db
ISO-8859 text, with no line terminators
dropped
C:\Users\user\AppData\Local\Google\Picasa2\runtime\Arial Bold-24-1.000000-400-0.ytf
data
dropped
C:\Users\user\AppData\Local\Google\Picasa2\runtime\Arial-12-1.000000-400-0.ytf
DIY-Thermocam raw data (Lepton 3.x), scale -10357--29841, spot sensor temperature 88393864543792942064807408981155774464.000000, unit celsius, color scheme 0, userbration: offset 0.000000, slope 137438953472.000000
dropped
C:\Users\user\AppData\Local\Google\Picasa2\runtime\Arial-14-1.000000-400-0.ytf
data
dropped
C:\Users\user\AppData\Local\Google\Picasa2\runtime\Arial-14-1.000000-700-0.ytf
data
dropped
C:\Users\user\AppData\Local\Google\Picasa2\runtime\Arial-14-1.000000-800-0.ytf
data
dropped
C:\Users\user\AppData\Local\Google\Picasa2\runtime\Arial-16-1.000000-700-0.ytf
GLS_BINARY_LSB_FIRST
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0669b119-acba-4bbe-8e70-c93881f82d72.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\eda23fc5-6e01-4b7f-8cb1-3e8fdf6a9606.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-66FD1D7A-810.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\1c2cfe16-ae4e-4feb-9961-ec9a0f2fb63e.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\23c5afa6-3bae-4a3a-a1a4-7faada5d420c.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\65f918b5-5577-4073-b6c3-22298e62bbdf.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks (copy)
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS
SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json
JSON data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 11, cookie 0x8, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\4e3b9932-969c-43c1-ada0-407cedf14c36.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\601b84e4-7239-48ed-ae02-5132d10d6273.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\7d9354db-2a90-4016-b6e4-541cf526db27.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\7ffcda32-34ac-43e3-9780-958e440e6cc7.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\881ce1e4-5dc8-41e8-a792-00ab68e2422e.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
SQLite 3.x database, last written using SQLite version 3042000, file counter 8, database pages 7, cookie 0x5, schema 4, UTF-8, version-valid-for 8
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF33e62.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 6
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF2c171.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF31222.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\b5d4c9a3-46d7-4bec-8998-10c4f40f3760.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\df7b5d81-f66f-4355-ad09-d82fb52355d2.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF30c94.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF33c20.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF363eb.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF32200.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RF3710a.TMP (copy)
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13372337794869855
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts
SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\SiteList.xml
XML 1.0 document, ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\0a69fb75-6943-4da7-b741-1ba32a5a4c45.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\151c5496-0e8e-4ff6-9105-59d259de04f1.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\3380c30b-a59b-430d-852a-3e1d8d2ea1e0.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State~RF33e62.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF31222.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\b0a06899-c52e-45cc-a036-d2d8b36b4dbb.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\c71b5993-5ba1-408c-9af4-c031f06e92db.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 10
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager
SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager-journal
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\a6fbbf97-fb83-4e5b-92f9-2554eff2ce17.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json
ASCII text, with very long lines (3951), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\bdd519c3-512d-435b-8663-94b60fb7b788.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ce7cf232-da26-474f-b5bc-1e0b7dc80123.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db
SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\e27d3cc5-ff20-4445-9e6a-e77e8ad4bb29.tmp
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ee694d66-5cfd-4210-83bf-4a37bdb1d283.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\f9554e92-be77-4883-a95c-09a3ccf576be.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal
SQLite Write-Ahead Log, version 3007000
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF2e593.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF346af.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 4
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\bc77f66e-1350-4777-a31a-c767634be11d.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\c054c7f1-c047-4457-b7ca-5139e435e1d7.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{60923290-80A7-11EF-8C2E-ECF4BBFF258A}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{60923292-80A7-11EF-8C2E-ECF4BBFF258A}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{60923293-80A7-11EF-8C2E-ECF4BBFF258A}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (312), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (310), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (316), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-314712940\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (333), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (306), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (312), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (310), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (312), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (314), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines (310), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\zzotjdg\imagestore.dat
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\33CUD2J1\favicon[1].ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\33CUD2J1\packages[1].inf
Unicode text, UTF-8 text, with very long lines (16520), with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\90SNK17T\cz.seznam.software.ielisticka3-3.3.5-win32[1].zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\90SNK17T\favicon[1].ico
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\AN5UOLP8\packages[1].inf
Unicode text, UTF-8 text, with very long lines (16520), with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\C7S8M5VS\default[1]
gzip compressed data, from Unix, original size modulo 2^32 58543
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\C7S8M5VS\update2[1].xml
gzip compressed data, original size modulo 2^32 277
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\30EN40B2\93773[1].htm
HTML document, ASCII text, with CRLF, LF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\30EN40B2\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Web Open Font Format, TrueType, length 20012, version 1.1
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\30EN40B2\analytics[1].js
ASCII text, with very long lines (2343)
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\30EN40B2\js[1].js
ASCII text, with very long lines (5945)
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\A6YW1NKY\6383491[1].htm
HTML document, Unicode text, UTF-8 text, with very long lines (62332)
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\A6YW1NKY\answer[1].htm
HTML document, ASCII text, with CRLF, LF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\A6YW1NKY\cb=gapi[1].js
ASCII text, with very long lines (1885)
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\A6YW1NKY\rs=AA2YrTu4yKUthdSOsX4mIF3MpnvWpdwnvw[1].css
ASCII text, with very long lines (3223), with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\HN3J204T\157000[1].htm
HTML document, ASCII text, with CRLF, LF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\HN3J204T\al-icon[1].png
PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\HN3J204T\js[1].js
ASCII text, with very long lines (2345)
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\XVDYWN9F\156347[1].htm
HTML document, ASCII text, with CRLF, LF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\XVDYWN9F\4UaGrENHsxJlGDuGo1OIlL3Owpg[1].woff
Web Open Font Format, TrueType, length 26228, version 1.1
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\XVDYWN9F\4UabrENHsxJlGDuGo1OIlLU94YtzCwA[1].woff
Web Open Font Format, TrueType, length 26464, version 1.1
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\XVDYWN9F\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff
Web Open Font Format, TrueType, length 19888, version 1.1
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\XVDYWN9F\KFOmCnqEu92Fr1Mu4mxM[1].woff
Web Open Font Format, TrueType, length 19824, version 1.1
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\XVDYWN9F\rs=AA2YrTs7yJgcuKgg907WfmLvLVlxIh60vw[1].js
ASCII text, with very long lines (1913)
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\IE\XVDYWN9F\unnamed[1].png
PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low\MSIMGSIZ.DAT
data
dropped
C:\Users\user\AppData\Local\Temp\4f85221c-75d0-4487-a258-184d8c64933e.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\6c7ce5d1-770d-4ec3-a2ae-567f38878ca3.tmp
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
dropped
C:\Users\user\AppData\Local\Temp\9a902492-30d1-4a1d-8d4f-7dc54dc087d6.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Temp\Importer_0_4\RecoveryStore.{60923290-80A7-11EF-8C2E-ECF4BBFF258A}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Temp\Importer_0_4\{60923292-80A7-11EF-8C2E-ECF4BBFF258A}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Temp\Importer_0_Importer_0_4_4\cookies.json
JSON data
modified
C:\Users\user\AppData\Local\Temp\Low\JavaDeployReg.log
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\aa06e7f6-4aa9-4dd9-a175-bcc9f132bc6a.tmp
PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\cedb937c-0229-4a61-a410-85deb5d517dd.tmp
PNG image data, 301 x 310, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\cv_debug.log
JSON data
dropped
C:\Users\user\AppData\Local\Temp\effbbae1-73cb-496b-8203-13248af4d378.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\nsrF0EA.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\nsrF139.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\nsrF139.tmp\UserInfo.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\nsrF139.tmp\nsExec.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\nst9CA0.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\nst9CEF.tmp\NSIS_Picasa_Unicode.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\nst9CEF.tmp\StdUtils.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\nst9CEF.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\nst9CEF.tmp\modern-wizard.bmp
PC bitmap, Windows 3.x format, 164 x 314 x 4, image size 26376, resolution 2834 x 2834 px/m, cbSize 26494, bits offset 118
dropped
C:\Users\user\AppData\Local\Temp\nst9CEF.tmp\nsDialogs.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\nsu8781.tmp\ButtonEvent.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\nsu8781.tmp\System.dll
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\nsu8781.tmp\nsDialogs.dll
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\nsu8781.tmp\pozadi.bmp
PC bitmap, Windows 3.x format, 452 x 230 x 24, image size 311880, resolution 2835 x 2835 px/m, cbSize 311934, bits offset 54
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2064_1890881398\CRX_INSTALL\_metadata\verified_contents.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2064_1890881398\CRX_INSTALL\content.js
Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2064_1890881398\CRX_INSTALL\content_new.js
Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2064_1890881398\CRX_INSTALL\manifest.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2064_1890881398\effbbae1-73cb-496b-8203-13248af4d378.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
PE32 executable (console) Intel 80386, for MS Windows, UPX compressed
dropped
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\UNZIP.EXE
PE32 executable (console) Intel 80386, for MS Windows, UPX compressed
dropped
C:\Users\user\AppData\Local\Temp\~006A18C4.00001B74.sznpkg\control.ini
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A18C4.00001B74.sznpkg\install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A18C4.00001B74.sznpkg\sznsetup.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A18C4.00001B74.sznpkg\uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A1AF6.00001B74.sznpkg\control.ini
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A1AF6.00001B74.sznpkg\install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A1AF6.00001B74.sznpkg\szninstall.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A1AF6.00001B74.sznpkg\uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\MKLNK.EXE
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\RM.EXE
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\RUNBG.EXE
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\SHELLFLD.EXE
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\UNZIP.EXE
PE32 executable (console) Intel 80386, for MS Windows, UPX compressed
dropped
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\cz.seznam.software.ielisticka3-3.3.5-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Local\Temp\~006A81A0.00000DD4.sznpkg\control.ini
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A81A0.00000DD4.sznpkg\install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A81A0.00000DD4.sznpkg\uninstall.bat
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\Temp\~006A8374.00000DD4.sznpkg\control.ini
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A8374.00000DD4.sznpkg\install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A8374.00000DD4.sznpkg\uninstall.bat
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\Temp\~006A848E.00000DD4.sznpkg\control.ini
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A848E.00000DD4.sznpkg\install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A848E.00000DD4.sznpkg\msvcp110.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A848E.00000DD4.sznpkg\msvcr110.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
modified
C:\Users\user\AppData\Local\Temp\~006A848E.00000DD4.sznpkg\uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A8960.00000DD4.sznpkg\control.ini
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A8960.00000DD4.sznpkg\install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A8960.00000DD4.sznpkg\lightspeed.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A8960.00000DD4.sznpkg\uninstall.bat
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\Temp\~006A8B64.00000DD4.sznpkg\control.ini
Unicode text, UTF-8 text
dropped
C:\Users\user\AppData\Local\Temp\~006A8B64.00000DD4.sznpkg\install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A8B64.00000DD4.sznpkg\reconfigure.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A8B64.00000DD4.sznpkg\szndesktop.conf
Generic INItialization configuration [controlweb]
dropped
C:\Users\user\AppData\Local\Temp\~006A8B64.00000DD4.sznpkg\szndesktop.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A8B64.00000DD4.sznpkg\szndesktop.webpak
data
dropped
C:\Users\user\AppData\Local\Temp\~006A8B64.00000DD4.sznpkg\sznpp.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A8B64.00000DD4.sznpkg\uninstall.bat
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\Temp\~006A9140.00000DD4.sznpkg\control.ini
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A9140.00000DD4.sznpkg\install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A9140.00000DD4.sznpkg\uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A9140.00000DD4.sznpkg\wszndesktop.exe
PE32 executable (GUI) Intel 80386, for MS Windows
modified
C:\Users\user\AppData\Local\Temp\~006A93FF.00000DD4.sznpkg\control.ini
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A93FF.00000DD4.sznpkg\foxcub.conf
JSON data
dropped
C:\Users\user\AppData\Local\Temp\~006A93FF.00000DD4.sznpkg\install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006A93FF.00000DD4.sznpkg\libfoxcub.conf
Generic INItialization configuration [staticweb]
dropped
C:\Users\user\AppData\Local\Temp\~006A93FF.00000DD4.sznpkg\libfoxcub.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006A93FF.00000DD4.sznpkg\listickaconfig.webpak
data
dropped
C:\Users\user\AppData\Local\Temp\~006A93FF.00000DD4.sznpkg\listickanastaveni.webpak
data
dropped
C:\Users\user\AppData\Local\Temp\~006A93FF.00000DD4.sznpkg\remote.conf
JSON data
dropped
C:\Users\user\AppData\Local\Temp\~006A93FF.00000DD4.sznpkg\speeddial.webpak
data
dropped
C:\Users\user\AppData\Local\Temp\~006A93FF.00000DD4.sznpkg\uninstall.bat
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\Temp\~006AA61F.00000DD4.sznpkg\control.ini
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006AA61F.00000DD4.sznpkg\install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006AA61F.00000DD4.sznpkg\libfoxloader.conf
Generic INItialization configuration [foxloader]
dropped
C:\Users\user\AppData\Local\Temp\~006AA61F.00000DD4.sznpkg\libfoxloader.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006AA61F.00000DD4.sznpkg\uninstall.bat
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\Temp\~006AA7B6.00000DD4.sznpkg\control.ini
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006AA7B6.00000DD4.sznpkg\install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\~006AA7B6.00000DD4.sznpkg\libfoxcub-x64.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006AA7B6.00000DD4.sznpkg\libfoxloader-x64.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006AA7B6.00000DD4.sznpkg\listicka-x64.exe
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\~006AA7B6.00000DD4.sznpkg\uninstall.bat
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\Temp\~DF35775713FA993F91.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF423FA2587ED1B6A7.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF6246FEEE8A098C52.TMP
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Picasa 3.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Fri Oct 9 16:37:40 2015, mtime=Wed Oct 2 09:16:08 2024, atime=Fri Oct 9 16:37:40 2015, length=10160456, window=hide
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\bin\24557libfoxloader-x64.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\bin\24557libfoxloader.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\bin\libfoxcub-x64.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\bin\libfoxcub.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\bin\lightspeed.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\bin\msvcp110.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\bin\msvcr110.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\bin\sznpp.exe
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\conf\libfoxcub\foxcub.conf
JSON data
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\conf\libfoxcub\regcfg.conf
JSON data
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\conf\libfoxcub\remote.conf
JSON data
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\conf\szndesktop.conf
Generic INItialization configuration [controlweb]
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\conf\szndesktop.d\libfoxcub.conf
Generic INItialization configuration [staticweb]
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\conf\szndesktop.d\libfoxloader.conf
Generic INItialization configuration [foxloader]
modified
C:\Users\user\AppData\Roaming\Seznam.cz\data\listickaconfig.webpak
data
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\data\listickanastaveni.webpak
data
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\data\speeddial.webpak
data
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\data\szndesktop.webpak
data
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\install.log (copy)
Non-ISO extended-ASCII text, with very long lines (404), with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\install.log.$$$
Non-ISO extended-ASCII text, with very long lines (404), with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\install.log.5868.log
Non-ISO extended-ASCII text, with very long lines (404), with CRLF line terminators
modified
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.autoupdate-1.0.8-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.chromelisticka-2.0.4-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.ielisticka3-3.3.1-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.libfoxloader-3.2.7-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\install\packages.inf
Unicode text, UTF-8 text, with very long lines (11895), with no line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\install\szn-software-base-1.0.0-win32.zip
Zip archive data, at least v2.0 to extract, compression method=deflate
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\install\szn-software-listicka-3.0.0-win32.zip
Zip archive data, at least v1.0 to extract, compression method=store
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\install_packages.log
ASCII text, with very long lines (426), with CRLF line terminators
modified
C:\Users\user\AppData\Roaming\Seznam.cz\packages.inf (copy)
Unicode text, UTF-8 text, with very long lines (12717), with no line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\packages.inf.$$$
Unicode text, UTF-8 text, with very long lines (12717), with no line terminators
modified
C:\Users\user\AppData\Roaming\Seznam.cz\partner.conf
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\sources.inf
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\szninstall.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\com_microsoft_msdn_msvcr100_10_0_40219_325.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\com_microsoft_msdn_msvcr100_10_0_40219_325.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\com_microsoft_msdn_msvcr110_11_0_51106_1.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\com_microsoft_msdn_msvcr110_11_0_51106_1.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_autoupdate_1_0_8.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_autoupdate_1_0_8.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_chromelisticka_2_0_4.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_chromelisticka_2_0_4.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_ielisticka3_3_3_5.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_ielisticka3_3_3_5.uninstall.bat
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libfoxcub64_3_3_8.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libfoxcub64_3_3_8.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libfoxcub_3_3_8.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libfoxcub_3_3_8.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libfoxloader_3_2_7.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libfoxloader_3_2_7.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libszndesktop_2_1_35.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libszndesktop_2_1_35.reconfigure.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_libszndesktop_2_1_35.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_lightspeed_1210_12_10_18.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_lightspeed_1210_12_10_18.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_pp_1_0_2.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_pp_1_0_2.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_szndesktop_2_0_32.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_szndesktop_2_0_32.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_szninstall_1_1_15.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_szninstall_1_1_15.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_sznsetup_1_2_7.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\cz_seznam_software_sznsetup_1_2_7.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\szn_software_base_1_0_0.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\szn_software_base_1_0_0.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\szn_software_fflisticka_4_0_8.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\szn_software_fflisticka_4_0_8.uninstall.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\szn_software_listicka_3_0_0.install.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Roaming\Seznam.cz\uninstall\szn_software_listicka_3_0_0.uninstall.bat
ASCII text, with CRLF line terminators
dropped
There are 1022 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\1a4e5ccd35a56d84281a143f831563be.exe
"C:\Users\user\Desktop\1a4e5ccd35a56d84281a143f831563be.exe"
malicious
C:\Users\user\Desktop\1a4e5ccd35a56d84281a143f831563be.exe
"C:\Users\user\Desktop\1a4e5ccd35a56d84281a143f831563be.exe"
malicious
C:\Users\user\AppData\Local\Temp\nsm983C.tmp\setuppicasa39-setup.exe
setuppicasa39-setup.exe
malicious
C:\Windows\SysWOW64\GPhotos.scr
"C:\Windows\system32\GPhotos.scr" /c /installcheck
malicious
C:\Users\user\AppData\Local\Temp\nsm983C.tmp\listicka.exe
listicka.exe /S
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\sznsetup-lt.exe
"C:\Users\user\AppData\Roaming\Seznam.cz\sznsetup-lt.exe" -T "C:\Users\user\AppData\Roaming\Seznam.cz" -R "$\install" http://download.seznam.cz/update
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\sznsetup-lt.exe
"C:\Users\user\AppData\Roaming\Seznam.cz\sznsetup-lt.exe" -T "C:\Users\user\AppData\Roaming\Seznam.cz" -i cz.seznam.software.szninstall
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --from-ie-to-edge=3 --ie-frame-hwnd=602e8
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2004,i,1639013666010223883,15040558206664522354,262144 /prefetch:3
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /S /C "install.bat C:\Users\user\AppData\Roaming\Seznam.cz"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /S /C "install.bat C:\Users\user\AppData\Roaming\Seznam.cz"
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=1724 --field-trial-handle=2004,i,1639013666010223883,15040558206664522354,262144 /prefetch:8
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\sznsetup.exe
C:\Users\user\AppData\Roaming\Seznam.cz\sznsetup.exe -V
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=6596 --field-trial-handle=2004,i,1639013666010223883,15040558206664522354,262144 /prefetch:8
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=3720 --field-trial-handle=2004,i,1639013666010223883,15040558206664522354,262144 /prefetch:8
malicious
C:\Users\user\AppData\Roaming\Seznam.cz\sznsetup.exe
C:\Users\user\AppData\Roaming\Seznam.cz\sznsetup.exe -T C:\Users\user\AppData\Roaming\Seznam.cz -i -u cz.seznam.software.autoupdate szn-software-listicka -p
malicious
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-GB --service-sandbox-type=audio --mojo-platform-channel-handle=4984 --field-trial-handle=2004,i,1639013666010223883,15040558206664522354,262144 /prefetch:8
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /S /C "install.bat C:\Users\user\AppData\Roaming\Seznam.cz"
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "cz.seznam.software.autoupdate" /d "\"C:\Users\user\AppData\Roaming\Seznam.cz\szninstall.exe\" -c"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /S /C "install.bat C:\Users\user\AppData\Roaming\Seznam.cz"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /S /C "install.bat C:\Users\user\AppData\Roaming\Seznam.cz"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /S /C "install.bat C:\Users\user\AppData\Roaming\Seznam.cz"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /S /C "install.bat C:\Users\user\AppData\Roaming\Seznam.cz"
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\REG.EXE
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /v DisplayVersion /t REG_SZ /d "2.1.35" /f
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /S /C "install.bat C:\Users\user\AppData\Roaming\Seznam.cz"
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "cz.seznam.software.szndesktop" /d "\"C:\Users\user\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe\" -q"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /S /C "install.bat C:\Users\user\AppData\Roaming\Seznam.cz"
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\REG.EXE
REG QUERY "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\szn-software-listicka" /v "UninstallString"
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\REG.EXE
REG QUERY "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\szn-software-listicka" /v "UninstallString"
malicious
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\REG.EXE
REG DELETE "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}" /F
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /S /C "install.bat C:\Users\user\AppData\Roaming\Seznam.cz"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd /S /C "install.bat C:\Users\user\AppData\Roaming\Seznam.cz"
malicious
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
C:\Program Files (x86)\Google\Picasa3\Picasa3.exe
"C:\Program Files (x86)\Google\Picasa3\Picasa3.exe" /register
C:\Program Files (x86)\Google\Picasa3\Picasa3.exe
"C:\Program Files (x86)\Google\Picasa3\Picasa3.exe"
C:\Program Files (x86)\Google\Picasa3\PicasaPhotoViewer.exe
/config
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -nohome "http://picasa.google.com/support/bin/answer.py?hl=en&answer=93773"
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3720 CREDAT:9474 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe" --from-ie-to-edge=3 --ie-frame-hwnd=602e8
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe" --from-ie-to-edge=3 --ie-frame-hwnd=602e8
C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe
"C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new
C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe
"C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\UNZIP.EXE
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\unzip.exe -d C:\Users\user\AppData\Local\Temp\~006A18C4.00001B74.sznpkg -o C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\download\cz.seznam.software.sznsetup-1.2.7-win32.zip
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\UNZIP.EXE
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\unzip.exe -d C:\Users\user\AppData\Local\Temp\~006A1AF6.00001B74.sznpkg -o C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\download\cz.seznam.software.szninstall-1.1.15-win32.zip
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG DELETE "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /va
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /v "InstallLocation" /d C:\Users\user\AppData\Roaming\Seznam.cz
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /v "DisplayName" /d "Seznam Software"
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /v "DisplayIcon" /d "C:\Users\user\AppData\Roaming\Seznam.cz\szninstall.exe,0"
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /v "UninstallString" /d "\"C:\Users\user\AppData\Roaming\Seznam.cz\szninstall.exe\" -X"
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /v "ModifyPath" /d "C:\Users\user\AppData\Roaming\Seznam.cz\szninstall.exe"
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /v "Publisher" /d "Seznam.cz"
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /v "URLInfoAbout" /d "http://software.seznam.cz"
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /v "HelpLink" /d "http://napoveda.seznam.cz/cz/software.html"
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /v "Comments" /d "Vsechny aplikace spolecnosti Seznam.cz a.s."
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /v "NoRepair" /t REG_DWORD /d 1
C:\Users\user\AppData\Local\Temp\~0069FB97.00001B74.sznpkg\REG.EXE
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall" /f /v "NoModify" /t REG_DWORD /d 0
C:\Users\user\AppData\Roaming\Seznam.cz\szninstall.exe
"C:\Users\user\AppData\Roaming\Seznam.cz\szninstall.exe" -s -u -i cz.seznam.software.autoupdate szn-software-listicka
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\cookie_exporter.exe
cookie_exporter.exe --cookie-json=1188
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3720 CREDAT:202066 /prefetch:2
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\UNZIP.EXE
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\unzip.exe -d C:\Users\user\AppData\Local\Temp\~006A81A0.00000DD4.sznpkg -o C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.autoupdate-1.0.8-win32.zip
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\UNZIP.EXE
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\unzip.exe -d C:\Users\user\AppData\Local\Temp\~006A8374.00000DD4.sznpkg -o C:\Users\user\AppData\Roaming\Seznam.cz\install\szn-software-base-1.0.0-win32.zip
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\UNZIP.EXE
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\unzip.exe -d C:\Users\user\AppData\Local\Temp\~006A848E.00000DD4.sznpkg -o C:\Users\user\AppData\Roaming\Seznam.cz\install\com.microsoft.msdn.msvcr110-11.0.51106.1-win32.zip
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy msvcp110.dll "C:\Users\user\AppData\Roaming\Seznam.cz\bin"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy msvcr110.dll "C:\Users\user\AppData\Roaming\Seznam.cz\bin"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\UNZIP.EXE
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\unzip.exe -d C:\Users\user\AppData\Local\Temp\~006A8960.00000DD4.sznpkg -o C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\cz.seznam.software.lightspeed-1210-12.10.18-win32.zip
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy lightspeed.dll "C:\Users\user\AppData\Roaming\Seznam.cz\bin"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\UNZIP.EXE
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\unzip.exe -d C:\Users\user\AppData\Local\Temp\~006A8B64.00000DD4.sznpkg -o C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\cz.seznam.software.libszndesktop-2.1.35-win32.zip
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy "szndesktop.exe" "C:\Users\user\AppData\Roaming\Seznam.cz\bin"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy "szndesktop.conf" "C:\Users\user\AppData\Roaming\Seznam.cz\conf"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy "szndesktop.webpak" "C:\Users\user\AppData\Roaming\Seznam.cz\data"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy "sznpp.exe" "C:\Users\user\AppData\Roaming\Seznam.cz\bin"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\UNZIP.EXE
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\unzip.exe -d C:\Users\user\AppData\Local\Temp\~006A9140.00000DD4.sznpkg -o C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\cz.seznam.software.szndesktop-2.0.32-win32.zip
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy "wszndesktop.exe" "C:\Users\user\AppData\Roaming\Seznam.cz\bin"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\UNZIP.EXE
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\unzip.exe -d C:\Users\user\AppData\Local\Temp\~006A93FF.00000DD4.sznpkg -o C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\cz.seznam.software.libfoxcub-3.3.8-win32.zip
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy libfoxcub.dll "C:\Users\user\AppData\Roaming\Seznam.cz\bin"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy libfoxcub-x64.dll "C:\Users\user\AppData\Roaming\Seznam.cz\bin"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy libfoxcub.conf "C:\Users\user\AppData\Roaming\Seznam.cz\conf\szndesktop.d"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy foxcub.conf "C:\Users\user\AppData\Roaming\Seznam.cz\conf\libfoxcub"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy remote.conf "C:\Users\user\AppData\Roaming\Seznam.cz\conf\libfoxcub"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy listickaconfig.webpak "C:\Users\user\AppData\Roaming\Seznam.cz\data"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy listickanastaveni.webpak "C:\Users\user\AppData\Roaming\Seznam.cz\data"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy speeddial.webpak "C:\Users\user\AppData\Roaming\Seznam.cz\data"
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe libfoxcub.dll,UpgradeListicka
C:\Users\user\AppData\Roaming\Seznam.cz\bin\sznpp.exe
"C:\Users\user\AppData\Roaming\Seznam.cz\bin\sznpp.exe" -v report-ielisticka-install --status=0
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\UNZIP.EXE
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\unzip.exe -d C:\Users\user\AppData\Local\Temp\~006AA61F.00000DD4.sznpkg -o C:\Users\user\AppData\Roaming\Seznam.cz\install\cz.seznam.software.libfoxloader-3.2.7-win32.zip
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\UNZIP.EXE
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\unzip.exe -d C:\Users\user\AppData\Local\Temp\~006AA7B6.00000DD4.sznpkg -o C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\download\cz.seznam.software.libfoxcub64-3.3.8-win32.zip
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy libfoxcub-x64.dll "C:\Users\user\AppData\Roaming\Seznam.cz\bin"
C:\Users\user\AppData\Local\Temp\~006A2DE2.00000DD4.sznpkg\CPY.EXE
cpy listicka-x64.exe "C:\Users\user\AppData\Roaming\Seznam.cz\bin"
C:\Users\user\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
szndesktop.exe default restart
There are 102 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://internet.e-mail
unknown
https://download.seznam.cz/update/cz.seznam.software.libfoxcub-3.3.8-win32.zip
77.75.76.70
https://photos.google.com/apps
unknown
http://%s/%s/rssalbum%d.rss
unknown
http://picasa.smo/buttons
unknown
http://picasa-readme.blogspot.com/2012/04/picasa-3.html
unknown
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/em#
unknown
http://picasa.google.com/support/bin/answer.py?hl=pt-BR&amp;answer=93773
unknown
http://picasa.google.com/intl/pt-BR/#utm_source=gph-et-en&amp;utm_medium=et&amp;utm_campaign=en-scre
unknown
http://dl.google.com/picasa/picasa3-setup.exe
unknown
http://www.blogger.com/feeds/1456569655786168306/posts/default
unknown
https://download.seznam.cz/update/cz.seznam.software.libszndesktop-2.1.35-win32.zip
77.75.76.70
http://www.google.ro/policies/terms/
unknown
https://support.google.com/photos/?p=storage
unknown
http://picasa.google.dk/intl/da/#utm_source=gph-et-en&amp;utm_medium=et&amp;utm_campaign=da-screensa
unknown
https://www.google.com/accounts/ServiceLogin?hl=zh_CN&amp;continue=http%3A%2F%2Fpicasaweb.google.com
unknown
http://schemas.google.com/g/2005
unknown
https://uploader.picasa.com/froogle.php?q=%sthumbui/mainuipanelthumbui/acquirepanelthumbui/infowellt
unknown
http://www.google.com/support/forum/p/Picasa&quot;&gt;our
unknown
http://picasa-readme.blogspot.com/2008/10/picasa-30-out-of-beta-build-xxxx.html
unknown
http://picasa.google.com/support/bin/answer.py?hl=hi&amp;answer=93773
unknown
http://support.google.com/plus/bin/answer.py?answer=2370124&quot;&gt;&lt;span
unknown
http://picasa.google.com/support/bin/answer.py?answer=141059iPhotoError::HelpURL
unknown
http://www.blogger.com/feeds/1456569655786168306/posts/default/1237605142260003533
unknown
http://picasa.google.com/support/bin/answer.py?hl=sk&amp;answer=93773
unknown
http://ericorth.kir.corp.google.com:8888/gphotos?action=retrconfig&email=/gphotos?action=postconfigr
unknown
http://forums.picasa.com/
unknown
http://picasa.google.com/support/bin/answer.py?hl=en&amp;answer=15625
unknown
http://picasa.google.com/intl/fr/#utm_source=gph-et-fr&amp;utm_medium=et&amp;utm_campaign=fr-screens
unknown
http://picasa.google.com/support/bin/answer.py?answer=139492&hl=%sSplashThreadruntime
unknown
http://picasa.google.com/support/bin/answer.py?hl=fi&amp;answer=93773
unknown
https://photos.google.com/appslistboxcaptionpopuplistOriginal
unknown
http://photos.hello.com/interface/boxes/S32.gif
unknown
http://googlephotos.blogspot.com/&quot;&gt;Google
unknown
http://picasa.google.com/support/bin/answer.py?answer=11139
unknown
http://video.google.com/googleplayer.swf?videoUrl=%s
unknown
http://picasa.google.com/support/bin/answer.py?hl=ja&amp;answer=93773
unknown
http://picasa.google.com/support/bin/answer.py?hl=zh-TW&amp;answer=11139
unknown
http://support.google.com/plus/bin/answer.py?answer=2370124
unknown
https://uploader.picasa.com/providers/php/generate.xml.php?prID=%s&country=%sclientlanguagehttp://lo
unknown
https://download.seznam.cz/update/cz.seznam.software.szninstall-1.1.15-win32.zip
77.75.76.70
http://photos.hello.com/interface/boxes/B33.gif
unknown
https://download.seznam.cz/update/cz.seznam.software.ielisticka3-3.3.5-win32.zip
77.75.76.70
http://googlephotos.blogspot.com/
unknown
http://schemas.google.com/g/2008/ordering#comesAfter
unknown
https://www.google.com/accounts/ServiceLogin?hl=hu_HU&amp;continue=http%3A%2F%2Fpicasaweb.google.com
unknown
http://picasa.google.com/support/bin/answer.py?hl=zh_CN&amp;answer=141059
unknown
http://picasa.google.com/support/bin/topic.py?topic=16056il_BurnPanel::imapierrorlinkError
unknown
http://picasa.google.nl/support/bin/answer.py?answer=139492
unknown
https://www.google.com/accounts/ServiceLogin?hl=sl_SI&amp;continue=http%3A%2F%2Fpicasaweb.google.com
unknown
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdYMorlhvaoU2vdx-Au0-wABULVhkz6vqRku4godi
unknown
http://schemas.google.com/g/2005#kind
unknown
https://bzib.nelreports.net/api/report?cat=bingbusiness
23.200.0.9
http://picasa.google.com/support/bin/answer.py?hl=zh_CN&amp;answer=53209
unknown
http://photos.hello.com/interface/AppsBtn-hello.gif
unknown
http://pack.google.com/feeds.
unknown
http://picasa.google.co.kr/support?ctx=picasa
unknown
http://pack.google.com/feeds.MetadataNode::TipDiscoverMeasure
unknown
http://picasa.google.com/support/bin/answer.py?hl=se&amp;answer=141059
unknown
http://maps.google.com/maps?file=api&amp;v=2&amp;client=google-picasa-client&amp;sensor=false
unknown
https://photos.blogger.com/picasa-post.g
unknown
https://www.google.com/m8/feeds/
unknown
https://support.google.com/plus/answer/1647509#cost
unknown
http://picasa.google.rs/support?ctx=picasa
unknown
https://www.google.com/accounts/ServiceLogin?hl=el&amp;continue=http%3A%2F%2Fpicasaweb.google.com%2F
unknown
http://picasa.google.com/intl/cs/#utm_source=gph-et-en&amp;utm_medium=et&amp;utm_campaign=cs-screens
unknown
https://www.google.com/accounts/ServiceLogin?hl=th&amp;
unknown
https://px.ads.linkedin.com/wa/
13.107.42.14
http://picasa.google.com/intl/pt_PT/#utm_source=gph-et-pt_PT&amp;utm_medium=et&amp;utm_campaign=pt_P
unknown
http://www.google.com/support/forum/p/picasa?hl=pt_PT
unknown
http://picasaweb.google.com/lh/nameTagOpt
unknown
http://gdata.youtube.com/schemas/2007/categories.cat
unknown
http://picasa.google.com/intl/fi/#utm_source=gph-et-fi&amp;utm_medium=et&amp;utm_campaign=fi-screens
unknown
http://www.google.com/You
unknown
http://picasa.google.nl/support/bin/answer.py?answer=53209
unknown
https://www.google.rs/accounts/ServiceLogin?hl=sr&amp;continue=http%3A%2F%2Fpicasaweb.google.rs%2Fho
unknown
https://download.seznam.cz/update/cz.seznam.software.sznsetup-1.2.7-win32.zip
77.75.76.70
http://picasa-readme.blogspot.com/update2
unknown
http://picasa.google.com.tr/support/bin/answer.py?answer=11139
unknown
http://picasa.google.com/intl/ar/#utm_source=gph-et-ar&amp;utm_medium=et&amp;utm_campaign=ar-screens
unknown
http://picasa.google.com/support/bin/answer.py?hl=zh-TW&amp;answer=93773
unknown
http://picasa.google.com/intl/de/#utm_source=gph-et-de&amp;utm_medium=et&amp;utm_campaign=de-screens
unknown
http://cs-g2-crl.thawte.com/ThawteCSG2.crl0
unknown
http://picasa.google.com/
unknown
http://picasaweb.google.com/lh/favorites
unknown
http://picasa.google.com/support/bin/answer.py?answer=93773&ctx=readme
unknown
http://localhost:%d/%s/thumb/%s.jpg
unknown
http://www.aiim.org/pdfa/ns/type#ty#
unknown
http://schemas.google.com/g/2005#thumbnail
unknown
http://support.google.com/picasa/bin/answer.py?hl=en&amp;amp;answer=39500&amp;amp;topic=1751920&quot
unknown
http://picasa.google.com/support/bin/answer.py?hl=en&answer=93773
172.217.23.100
https://plus.google.com/photos/%s/albums/%sNot
unknown
https://www.google.com/accounts/ServiceLogin?hl=de_DE&amp;continue=http%3A%2F%2Fpicasaweb.google.com
unknown
https://www.google.com/accounts/ServiceLogin?hl=fr_FR&amp;continue=http%3A%2F%2Fpicasaweb.google.com
unknown
http://picasa.google.nl/support/bin/topic.py?topic=14609
unknown
https://h.imedia.cz/hit/?a=event&d=%7B%22action%22%3A%22startup%22%2C%22application%22%3A%22szndesktop%22%2C%22signedhash%22%3A%220%22%2C%22chrv%22%3A48%2C%22che%22%3A48%2C%22chs%22%3A16%2C%22ches%22%3A16%2C%22ie%22%3A1%2C%22osbuild%22%3A19045%2C%22osarch%22%3A9%2C%22chver%22%3A%22117.0.5938.132%22%2C%22ffver%22%3A%22118.0.1%22%2C%22iever%22%3A%2211.00.19041.1%20%28WinBuild.160101.0800%29%22%7D&s=partprog&v=2.1.35&r=-1794028113&u=http://www.seznam.cz&h=B0B7C794-8699-4634-B6F9-24DA47BBD8EF&lsid=1727871011238&lses=1727871002951
77.75.78.30
http://picasa.google.com/support?ctx=picasaHELPID_DEFAULTi18n
unknown
https://www.google.com/accounts/ServiceLogin?hl=en_GB&amp;continue=http%3A%2F%2Fpicasaweb.google.com
unknown
http://picasa.google.com/support/bin/answer.py?hl=en&answer=93773CThumbUI::showfeatureslinkSaverUpgr
unknown
http://picasa.google.com/support/bin/answer.py?hl=id&amp;answer=93773
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
pack.google.com
unknown
malicious
chrome.cloudflare-dns.com
172.64.41.3
api.software.seznam.cz
77.75.77.161
plus.l.google.com
142.250.185.174
blogspot.l.googleusercontent.com
142.250.185.161
support.google.com
172.217.23.110
h.seznam.cz
77.75.78.30
sni1gl.wpc.nucdn.net
152.199.21.175
download.seznam.cz
77.75.76.70
www3.l.google.com
142.250.186.174
www2.l.google.com
142.250.185.228
www.google.com
216.58.206.36
googlehosted.l.googleusercontent.com
172.217.23.97
h.imedia.cz
77.75.78.30
software.seznam.cz
unknown
sentry.sklik.cz
unknown
lh3.googleusercontent.com
unknown
picasa-readme.blogspot.com
unknown
picasa.google.com
unknown
clients2.googleusercontent.com
unknown
chrome.google.com
unknown
apis.google.com
unknown
There are 12 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
142.250.185.228
www2.l.google.com
United States
13.107.246.40
unknown
United States
104.118.10.106
unknown
United States
104.18.187.31
unknown
United States
52.240.245.67
unknown
United States
157.240.241.35
unknown
United States
20.114.189.70
unknown
United States
162.159.61.3
unknown
United States
23.200.0.9
unknown
United States
157.240.241.1
unknown
United States
20.110.205.119
unknown
United States
13.107.21.237
unknown
United States
77.75.78.30
h.seznam.cz
Czech Republic
13.107.42.14
unknown
United States
239.255.255.250
unknown
Reserved
172.217.23.100
unknown
United States
23.57.90.111
unknown
United States
152.195.19.97
unknown
United States
192.168.2.16
unknown
unknown
72.21.81.200
unknown
United States
216.58.206.36
www.google.com
United States
172.217.23.110
support.google.com
United States
172.217.23.97
googlehosted.l.googleusercontent.com
United States
142.250.185.161
blogspot.l.googleusercontent.com
United States
150.171.28.10
unknown
United States
77.75.76.70
download.seznam.cz
Czech Republic
172.64.41.3
chrome.cloudflare-dns.com
United States
104.118.10.2
unknown
United States
68.67.160.114
unknown
United States
151.101.1.108
unknown
United States
20.42.73.30
unknown
United States
104.118.9.224
unknown
United States
104.70.121.218
unknown
United States
104.118.8.10
unknown
United States
142.250.185.174
plus.l.google.com
United States
20.190.152.20
unknown
United States
20.190.152.22
unknown
United States
142.250.186.65
unknown
United States
There are 28 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_USERS.DEFAULT\Control Panel\Desktop
SCRNSAVE.EXE
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
cz.seznam.software.autoupdate
malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
cz.seznam.software.szndesktop
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa
Installed Version
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa
Installed Location
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
showeula
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Google Photos Screensaver
AppPath
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Google Photos Screensaver
LongVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3
DisplayIcon
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\picasa2.autoplay
DefaultIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\picasa2.autoplay\shell\import\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\Picasa2ImportPicturesOnArrival
Action
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\Picasa2ImportPicturesOnArrival
DefaultIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\Picasa2ImportPicturesOnArrival
InvokeProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\Picasa2ImportPicturesOnArrival
InvokeVerb
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\Picasa2ImportPicturesOnArrival
Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\Picasa2ImportPicturesOnArrival
ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\ShowPicturesOnArrival
Picasa2ImportPicturesOnArrival
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\WPD\Function\{23F05BBC-15DE-4C2A-A55B-A9AF5CE412EF}
Picasa2ImportPicturesOnArrival
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\WPD\Source\{9261B03C-3D78-4519-85E3-02C5E1F50BB9}
Picasa2ImportPicturesOnArrival
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlersDefaultSelection
ShowPicturesOnArrival
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlersDefaultSelection
MixedContentOnArrival
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\DivXNetworks\DivX\SMExclusions
MovieThumb
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\DivXNetworks\DivX\SMExclusions
Picasa3
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Runtime
AppPath
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0
Description
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0
Path
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0
Vendor
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0\MimeTypes\application/x-picasa-detect
Description
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0\MimeTypes\application/x-picasa-detect
Suffixes
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Version Vector
Picasa
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\picasa
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\picasa
URL Protocol
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Application\Picasa3
EventMessageFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Application\Picasa3
TypesSupported
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Open\Command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Preview\Command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Upload To Web Albums\Command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell\Upload To Web Albums
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Google.PhotoViewer.3.0\Shell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\PicasaPhotoViewer.exe\Shell\Open
FriendlyAppName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\PicasaPhotoViewer.exe\Shell\Preview\Command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Google.PhotoViewer.3.0\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities
ApplicationDescription
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.jpg
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.jpe
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.jpeg
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.tif
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.tiff
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.bmp
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.gif
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.png
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.tga
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.webp
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.raw
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.crw
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.cr2
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.nef
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.orf
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.dcr
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.mrw
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.pef
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.raf
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.srf
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.dng
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.kdc
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.sr2
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.arw
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.3fr
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.x3f
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.rw2
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Google\Picasa\Photo Viewer\Capabilities\FileAssociations
.nrw
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications
Google.PhotoViewer.3.0
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
ReportStats
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager
PendingFileRenameOperations
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager
PendingFileRenameOperations
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
ClientCrash
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
cacheroot
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing
EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\GPhotos_RASAPI32
EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\GPhotos_RASAPI32
EnableAutoFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\GPhotos_RASAPI32
EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\GPhotos_RASAPI32
FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\GPhotos_RASAPI32
ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\GPhotos_RASAPI32
MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\GPhotos_RASAPI32
FileDirectory
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
scrid
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
curtheme25
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
advanceinterval
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
EnableRSSSources
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
EnablePicasaSources
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
EnableScreensaverAlbum
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
EnableStarList
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
EnableLHSources
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
EnableMyActivity
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
EnableMyUnlistedActivity
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
EnableFavoritesActivity
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
EnableFolderSources
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
GaiaSave
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
GaiaSilent
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
GaiaUser
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
GaiaPass
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
GaiaServices
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
GaiaEmail
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
ext_install
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
scrid
HKEY_USERS.DEFAULT\Software\Google\Picasa\GBScreensaver_d\Preferences
ClientCrash
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
curtheme25
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
advanceinterval
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableRSSSources
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnablePicasaSources
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableScreensaverAlbum
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableStarList
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableLHSources
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableMyActivity
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableMyUnlistedActivity
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableFavoritesActivity
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableFolderSources
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaSave
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaSilent
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaUser
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaPass
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaServices
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaEmail
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
ext_install
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
scrid
HKEY_USERSS-1-5-19\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
ClientCrash
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
curtheme25
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
advanceinterval
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnablePicasaSources
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableScreensaverAlbum
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableStarList
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableLHSources
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableMyActivity
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableMyUnlistedActivity
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableFavoritesActivity
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableFolderSources
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaSave
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaSilent
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaUser
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaPass
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaServices
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
ext_install
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
scrid
HKEY_USERSS-1-5-20\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
ClientCrash
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
curtheme25
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
advanceinterval
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableRSSSources
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnablePicasaSources
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableScreensaverAlbum
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableStarList
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableLHSources
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableFolderSources
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaSilent
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaUser
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaPass
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaServices
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaEmail
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
ext_install
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
curtheme25
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
advanceinterval
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableRSSSources
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnablePicasaSources
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableScreensaverAlbum
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableStarList
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableLHSources
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableMyActivity
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableMyUnlistedActivity
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableFavoritesActivity
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
EnableFolderSources
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaSave
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaSilent
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaUser
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaPass
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaServices
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
GaiaEmail
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
ext_install
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
scrid
HKEY_USERSgpscrsav-{D5CB4A03-D2A0-4fbc-93FF-3AC90EEDD337}\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
ClientCrash
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\GBScreensaver_d\Preferences
LastStatusTime
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\Picasa3_RASAPI32
EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\Picasa3_RASAPI32
EnableAutoFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\Picasa3_RASAPI32
EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\Picasa3_RASAPI32
FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\Picasa3_RASAPI32
ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\Picasa3_RASAPI32
MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Tracing\Picasa3_RASAPI32
FileDirectory
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
ClientCrash
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
CleanExit
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
ytHLocal::langchange
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime
resamplefile
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime
AppPath
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Update
UpdateNext
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
p1import
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
p2import
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
p3import
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
FixShortPathNames
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
FRSuggestionThreshold
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
FRSuggestionSingleThreshold
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
FRSortThreshold
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
FRRecommendIncludeLimit
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
lastmypics
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
lastmydocs
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
lastdesktop
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\resvars
HLISTDIV
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\resvars
VLISTDIV
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences\Buttons\Exclude
0
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences\Buttons\Exclude
1
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences\Buttons\Exclude
2
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences\Buttons\Exclude
3
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences\Buttons\Exclude
4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
Buttons::DidHideAll
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\resvars
LEFTDRAWEROFFSET
HKEY_CURRENT_USER\SOFTWARE\Microsoft\ActiveMovie\devenum
Version
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
LastStatsTransmission
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\UsageStats\Daily\Counts
AppLaunches
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
ConfiguredSlingshot
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
SaverUpgradedTo25
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
SkipABPromo
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
LastABPromo
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
showfeatureslink
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
LastUpdateCheck
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Preferences
ReadmeLastURL
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER\SOFTWARE\Google\Picasa\Picasa2\Runtime\LoadImageCheck
8f4
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files (x86)\Windows Photo Viewer\PhotoViewer.dll.FriendlyAppName
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
C:\Program Files (x86)\Windows Photo Viewer\PhotoViewer.dll.ApplicationCompany
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qtk\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qtk\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mdc\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dc2\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.x3f\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srw\OpenWithList
a
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srw\OpenWithList
MRUList
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing
NTPMigrationVer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListXMLVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListXMLVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
SoftwareFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
VendorId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
DeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
SubSysId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
Revision
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListDomainAttributeSet
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
StaleCompatCache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\VersionManager
FirstCheckForUpdateLowDateTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\VersionManager
FirstCheckForUpdateHighDateTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
CompatibilityFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
HomepagesUpgradeVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
SecuritySafe
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1f\417C44EB
@ieframe.dll,-12512
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\Active
{60923290-80A7-11EF-8C2E-ECF4BBFF258A}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
SearchBandMigrationVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
FullScreen
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery
Active
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435B-BC74-9C25C1C588A9}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MAO Settings
DiscardLoadTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
ImageStoreRandomFolder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{00021493-0000-0000-C000-000000000046}\Enum
Implementing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{00021494-0000-0000-C000-000000000046}\Enum
Implementing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
SearchScopesUpgradeVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
DefaultScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
2BB20B33B4171CDAAB6469225AE6A582ED33D7B488
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
KnownProvidersUpgradeTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
DisplayName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconURLFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconPath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
URL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURLFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Suggested Sites
DataStreamEnabledState
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Suggested Sites
MigrationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
IEAppEolNotificationLastShownTimeStamp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MINIE
TabBandWidth
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
DownloadRetries
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing
NTPFirstRun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
MFV
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
NavTimeArray
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
NavTimeArray
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
2BB20B33B4171CDAAB6469225AE6A582ED33D7B488
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
StaleCompatCache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\$RECYCLE.BIN
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\ProgramData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\ProgramData\Microsoft\Windows\DRM
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\Favorites
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\LocalLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\History
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\WER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Feeds
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Temp\Low
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\PlayReady
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Content
CachePrefix
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Content
CacheVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Content
CacheLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Cookies
CachePrefix
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Cookies
CacheVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Cookies
CacheLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\History
CachePrefix
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\History
CacheVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\History
CacheLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry
OperationalData
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LatestUpsellAttemptedSessionTime
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LastStubPath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry
OperationalData
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0034-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0034-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0041-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0041-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0041-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0052-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0052-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0054-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0054-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0055-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0055-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0057-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0057-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0059-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0061-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0062-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0062-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0064-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0065-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0065-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0072-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0074-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0091-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0092-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0093-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0098-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0044-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0045-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0046-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0047-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0048-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0048-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0048-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0048-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0049-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0049-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0050-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0051-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0051-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0052-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0052-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0053-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0053-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0054-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0054-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0055-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0056-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0056-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0057-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0057-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0058-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0058-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0059-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0059-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0060-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0060-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0061-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0061-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0062-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0062-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0063-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0063-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0064-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0065-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0066-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0066-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0067-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0068-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0068-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0069-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0070-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0071-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0072-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0072-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0073-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0074-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0074-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0075-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0075-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0076-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0076-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0077-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0078-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0078-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0079-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0080-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0080-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0081-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0081-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0082-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0082-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0083-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0083-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0084-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0084-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0085-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0085-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0086-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0086-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0087-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0087-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0088-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0088-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
UpsellDisabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
QuietExpirationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
freseenversion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
freseen
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Defaults
is_dse_recommended
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Defaults
is_startup_page_recommended
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\DualEngineCacheContainerTracker
QEB4H1CH
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowProperties\197734
WindowTabManagerFileMappingId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
dgiklkfkllikcanfonkcabmbdfmgleag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
fikbjbembnmfhppjfnmfkahdhfohhjmg
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
iglcjdemknebjbklcgkfaebgojjphkec
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ihmafllikibpmigkcoadcmckbfhibefp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jdiccldimpdaibmpdkjnbmckianbfold
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ncbjelpjchkpbikbpkcchkhkblodoama
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
prefs.preference_reset_time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Profiles\Default
MUID
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds
EdgeMUID
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
dgiklkfkllikcanfonkcabmbdfmgleag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
fikbjbembnmfhppjfnmfkahdhfohhjmg
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
iglcjdemknebjbklcgkfaebgojjphkec
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ihmafllikibpmigkcoadcmckbfhibefp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jdiccldimpdaibmpdkjnbmckianbfold
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jmjflgjpcpepeafmmgdpfkogkghcpiha
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ncbjelpjchkpbikbpkcchkhkblodoama
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
dr
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
media.cdm.origin_data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.reporting
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
media.storage_id_salt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_startup_urls
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.prompt_wave
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.account_id
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.prompt_seed
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_homepage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.last_username
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
default_search_provider_data.template_url_data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
safebrowsing.incidents_sent
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
pinned_tabs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
search_provider_overrides
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.last_account_id
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.prompt_version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
session.startup_urls
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
session.restore_on_startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_default_search
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
prefs.preference_reset_time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
browser.show_home_button
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
homepage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
homepage_is_newtabpage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
lastrun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
RedirectionMode
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowProperties\197734
WindowTabManagerFileMappingId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowProperties\197734
WindowTabManagerFileMappingId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowProperties\197734
WindowTabManagerFileMappingId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowProperties\197734
WindowTabManagerFileMappingId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowProperties\197734
WindowTabManagerFileMappingId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Profiles\Default
MUID
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds
EdgeMUID
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Profiles\Default
MUID
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds
EdgeMUID
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Profiles\Default
MUID
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds
EdgeMUID
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowProperties\197734
WindowTabManagerFileMappingId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowProperties\197734
WindowTabManagerFileMappingId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
InstallLocation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
DisplayName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
DisplayIcon
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
UninstallString
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
ModifyPath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
Publisher
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
URLInfoAbout
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
HelpLink
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
Comments
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
NoRepair
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
NoModify
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SeznamInstall
DisplayVersion
HKEY_CURRENT_USER\SOFTWARE\Seznam.cz\sznpp
ssid
HKEY_CURRENT_USER\SOFTWARE\Seznam.cz\sznpp
lses
There are 990 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
2881000
heap
page read and write
6C145000
unkown
page write copy
AEA000
heap
page read and write
DAE000
stack
page read and write
4174000
heap
page read and write
37C48FE000
stack
page read and write
EEE000
stack
page read and write
10F0000
heap
page read and write
5CF000
stack
page read and write
980000
heap
page read and write
6F8000
heap
page read and write
5A3000
unkown
page read and write
17E000
stack
page read and write
B06000
heap
page read and write
88B000
heap
page read and write
FF0000
heap
page read and write
921E000
stack
page read and write
142627B8000
heap
page read and write
1619CC10000
heap
page read and write
82E000
stack
page read and write
88D000
unkown
page read and write
6CF8000
heap
page read and write
11FE000
heap
page read and write
73A39000
unkown
page readonly
130000
heap
page read and write
C64000
unkown
page readonly
690000
unkown
page read and write
116E000
stack
page read and write
6AF000
stack
page read and write
3670000
remote allocation
page read and write
12DF000
stack
page read and write
1222000
heap
page read and write
6C144000
unkown
page read and write
890000
unkown
page read and write
87B000
heap
page read and write
960000
heap
page read and write
570000
heap
page read and write
54E000
stack
page read and write
6C3C1000
unkown
page write copy
25F1000
heap
page read and write
6C96000
heap
page read and write
79D000
unkown
page read and write
9DE000
stack
page read and write
65E000
stack
page read and write
395F000
stack
page read and write
11FD000
heap
page read and write
9C000
stack
page read and write
9C000
stack
page read and write
6CB5000
heap
page read and write
6958000
heap
page read and write
9BB000
stack
page read and write
648000
heap
page read and write
14264340000
heap
page read and write
43E000
stack
page read and write
6EF000
unkown
page readonly
FCF000
stack
page read and write
539000
heap
page read and write
329C000
heap
page read and write
130000
heap
page read and write
2800000
heap
page read and write
B20000
heap
page read and write
9FF000
stack
page read and write
69E000
stack
page read and write
715000
heap
page read and write
2620000
heap
page read and write
1000000
heap
page read and write
93F000
stack
page read and write
1078000
heap
page read and write
ACC000
heap
page read and write
738000
heap
page read and write
42D9000
heap
page read and write
1CC03C13000
heap
page read and write
25F1000
heap
page read and write
4990000
heap
page read and write
AE0000
heap
page read and write
49A0000
trusted library allocation
page read and write
6A14000
heap
page read and write
6F2400290000
trusted library allocation
page read and write
919000
heap
page read and write
230E000
stack
page read and write
12BA000
heap
page read and write
2925000
heap
page read and write
4497CFF000
stack
page read and write
428000
unkown
page execute and read and write
1BF000
stack
page read and write
6C3BF000
unkown
page read and write
C40000
unkown
page readonly
AF3000
heap
page read and write
98E000
stack
page read and write
439000
unkown
page execute and read and write
290D000
heap
page read and write
5BE000
stack
page read and write
C8D000
stack
page read and write
9C5000
heap
page read and write
7FF7B1EC4000
unkown
page readonly
28E0000
heap
page read and write
6C14A000
unkown
page readonly
488000
heap
page read and write
1150000
heap
page read and write
9D0000
heap
page read and write
3E8000
stack
page read and write
521E000
stack
page read and write
345E000
stack
page read and write
3DB9000
heap
page read and write
E3E000
stack
page read and write
60D000
unkown
page read and write
2BAC00264000
trusted library allocation
page read and write
1F0000
heap
page read and write
18F000
stack
page read and write
AFE000
heap
page read and write
3244000
heap
page read and write
401000
unkown
page execute read
F4F000
unkown
page read and write
2913000
heap
page read and write
37F0000
heap
page read and write
A79000
heap
page read and write
6CC31000
unkown
page execute read
12E000
heap
page read and write
467B000
heap
page read and write
1250000
heap
page read and write
345F000
stack
page read and write
6C144000
unkown
page read and write
D3E000
stack
page read and write
1F0000
heap
page read and write
108E000
stack
page read and write
FC0000
heap
page read and write
2290000
heap
page read and write
428000
unkown
page execute and read and write
650F000
heap
page read and write
DD000
stack
page read and write
1260000
heap
page read and write
B18000
heap
page read and write
3224000
heap
page read and write
6C9C000
heap
page read and write
2920000
heap
page read and write
7D6000
unkown
page readonly
42C000
unkown
page execute and write copy
6FF000
stack
page read and write
ABE000
stack
page read and write
1DE000
stack
page read and write
AD7000
heap
page read and write
7C0000
heap
page read and write
E20000
heap
page read and write
ABF000
heap
page read and write
2872000
heap
page read and write
10008000
unkown
page readonly
64D000
stack
page read and write
323D000
heap
page read and write
6CCD000
heap
page read and write
540000
heap
page read and write
3DA5000
heap
page read and write
8FF000
stack
page read and write
B18000
heap
page read and write
5A0000
heap
page read and write
F4E000
stack
page read and write
1280000
heap
page read and write
EFE000
stack
page read and write
315E000
stack
page read and write
3D60000
heap
page read and write
15CE000
stack
page read and write
5B0000
heap
page read and write
4C2E000
stack
page read and write
1680000
heap
page read and write
530000
heap
page read and write
1102000
heap
page read and write
540000
heap
page read and write
40D0000
heap
page read and write
AC3000
heap
page read and write
A3E000
heap
page read and write
B1F000
heap
page read and write
DF0000
heap
page read and write
38EC000
stack
page read and write
1B0000
heap
page read and write
F6E000
stack
page read and write
37C46FE000
stack
page read and write
3C96000
heap
page read and write
A1F000
stack
page read and write
26C0000
heap
page read and write
8DF000
stack
page read and write
D248FFE000
unkown
page readonly
790000
heap
page read and write
E7D000
stack
page read and write
459B000
heap
page read and write
7244000
heap
page read and write
3286000
heap
page read and write
B90000
heap
page read and write
6AF000
stack
page read and write
4A0000
heap
page read and write
682000
heap
page read and write
B14000
heap
page read and write
9C000
stack
page read and write
134E000
stack
page read and write
7FF745909000
unkown
page read and write
4C0000
heap
page read and write
B2A000
unkown
page readonly
19D000
stack
page read and write
AF6000
heap
page read and write
A10000
heap
page read and write
31DE000
stack
page read and write
67F000
heap
page read and write
1012000
unkown
page execute and read and write
1FAA7B0B000
heap
page read and write
C90000
heap
page read and write
1080000
heap
page read and write
25F1000
heap
page read and write
C4E000
heap
page read and write
1CC03D02000
heap
page read and write
2862000
heap
page read and write
10D3000
heap
page read and write
40C000
unkown
page readonly
D8C000
stack
page read and write
DE0000
heap
page read and write
A70000
heap
page read and write
6C143000
unkown
page read and write
2E3C000
heap
page read and write
B52000
unkown
page readonly
333E000
heap
page read and write
8FF000
stack
page read and write
2BAC00258000
trusted library allocation
page read and write
5AA000
heap
page read and write
11CE000
heap
page read and write
417F000
heap
page read and write
6DF000
stack
page read and write
D52000
heap
page read and write
BF0000
heap
page read and write
32C6000
heap
page read and write
11C7000
heap
page read and write
A10000
heap
page read and write
7FF7B1EC0000
unkown
page read and write
E70000
heap
page read and write
43F000
unkown
page write copy
14F8000
heap
page read and write
39E0000
heap
page read and write
459F000
heap
page read and write
F30000
heap
page read and write
CC0000
heap
page read and write
3DBA000
heap
page read and write
A4B000
stack
page read and write
142627C9000
heap
page read and write
ABB000
heap
page read and write
35AA000
heap
page read and write
98000
stack
page read and write
AEE000
heap
page read and write
2D8F000
stack
page read and write
1230000
heap
page read and write
B47000
heap
page read and write
12C2000
heap
page read and write
22E0000
heap
page read and write
DB0000
heap
page read and write
67D000
stack
page read and write
122C000
heap
page read and write
9C0000
heap
page read and write
AE9000
heap
page read and write
1E0000
heap
page read and write
1BF000
stack
page read and write
EB9000
heap
page read and write
2750000
heap
page read and write
5E0000
heap
page read and write
461000
unkown
page execute read
B27000
heap
page read and write
23A0000
heap
page read and write
117B000
stack
page read and write
B0F000
stack
page read and write
1BF000
stack
page read and write
6B7000
heap
page read and write
52BE000
stack
page read and write
88D000
unkown
page read and write
1390000
heap
page read and write
689000
unkown
page read and write
A20000
heap
page read and write
123E000
heap
page read and write
FBB000
stack
page read and write
2862000
heap
page read and write
8F6000
stack
page read and write
FF4000
heap
page read and write
6F8B000
heap
page read and write
3438000
heap
page read and write
741C0000
unkown
page readonly
9C0000
heap
page read and write
875000
heap
page read and write
D4E000
stack
page read and write
120E000
stack
page read and write
AEF000
heap
page read and write
9C000
stack
page read and write
1CC03C45000
heap
page read and write
433000
unkown
page read and write
51E000
heap
page read and write
84D000
stack
page read and write
122A000
heap
page read and write
287A000
heap
page read and write
540000
heap
page read and write
21A54E7E000
heap
page read and write
32D5000
heap
page read and write
CB0000
heap
page read and write
6968000
heap
page read and write
1260000
heap
page read and write
1204000
heap
page read and write
AD1000
heap
page read and write
AF6000
heap
page read and write
43E000
stack
page read and write
440000
heap
page read and write
76E000
stack
page read and write
6C146000
unkown
page read and write
15A0000
heap
page read and write
400000
unkown
page readonly
6FF000
stack
page read and write
6BF1000
heap
page read and write
12AB000
heap
page read and write
101E000
stack
page read and write
4C0000
heap
page read and write
908000
heap
page read and write
2300000
heap
page read and write
60D000
unkown
page read and write
F4F000
unkown
page read and write
2862000
heap
page read and write
7FF7458F8000
unkown
page readonly
863000
heap
page read and write
43E000
stack
page read and write
AEC000
heap
page read and write
770000
heap
page read and write
13B2000
heap
page read and write
FAB000
stack
page read and write
2EC1000
heap
page read and write
700000
heap
page read and write
1619CC6C000
heap
page read and write
1F0000
heap
page read and write
3212000
heap
page read and write
1619CC62000
heap
page read and write
6502000
heap
page read and write
55E000
stack
page read and write
7FF65478E000
unkown
page readonly
2700000
heap
page read and write
3C0B000
heap
page read and write
4F8000
stack
page read and write
BCE000
stack
page read and write
107C000
heap
page read and write
72D000
stack
page read and write
3FDE000
stack
page read and write
9C000
stack
page read and write
6F2F000
heap
page read and write
B60000
heap
page read and write
80F000
stack
page read and write
861000
heap
page read and write
A2F000
stack
page read and write
131E000
stack
page read and write
540000
heap
page read and write
31CD000
stack
page read and write
58E000
stack
page read and write
53E000
stack
page read and write
1CC000
stack
page read and write
426000
unkown
page read and write
F46000
unkown
page read and write
164E000
stack
page read and write
D5E4FF000
stack
page read and write
54D000
heap
page read and write
810000
heap
page read and write
3299000
heap
page read and write
840000
heap
page read and write
AC1000
unkown
page execute read
209C21B5000
heap
page read and write
14262A24000
heap
page read and write
707000
heap
page read and write
CFE000
stack
page read and write
6C4D000
heap
page read and write
F0D000
stack
page read and write
BC0000
heap
page read and write
1844000
heap
page read and write
9C000
stack
page read and write
167F000
stack
page read and write
4D0000
unkown
page readonly
BF8000
heap
page read and write
40E2000
heap
page read and write
74E000
heap
page read and write
9D0000
heap
page read and write
3212000
heap
page read and write
3CC3000
heap
page read and write
AEA000
heap
page read and write
AFA000
heap
page read and write
3249000
heap
page read and write
1000000
unkown
page readonly
2840000
heap
page read and write
12D4000
heap
page read and write
21A54F02000
heap
page read and write
2350000
heap
page read and write
6C2EF000
unkown
page readonly
5DE000
stack
page read and write
128C000
heap
page read and write
2838000
heap
page read and write
88D000
unkown
page read and write
BEB000
stack
page read and write
690000
heap
page read and write
4CA3000
unkown
page readonly
284A000
heap
page read and write
1EEF5A42000
heap
page read and write
89F000
heap
page read and write
3747000
heap
page read and write
287E000
heap
page read and write
283E000
heap
page read and write
B50000
heap
page read and write
708000
heap
page read and write
A7E000
stack
page read and write
F7B000
stack
page read and write
1860000
heap
page read and write
77C000
stack
page read and write
2EC1000
heap
page read and write
B0D000
heap
page read and write
60D000
unkown
page read and write
88E000
stack
page read and write
2E92000
heap
page read and write
5F0000
heap
page read and write
6AAE000
heap
page read and write
12BC000
heap
page read and write
2480000
heap
page read and write
2BC000
stack
page read and write
6BFC000
heap
page read and write
6CD000
stack
page read and write
D70000
heap
page read and write
13DF000
stack
page read and write
EAD000
stack
page read and write
1B0000
heap
page read and write
1210000
heap
page read and write
10C9000
heap
page read and write
652000
heap
page read and write
68E000
stack
page read and write
3E9E000
stack
page read and write
892000
unkown
page readonly
7FFF415B1000
unkown
page execute read
D2495FE000
unkown
page readonly
31EE000
stack
page read and write
31DB000
heap
page read and write
32B8000
heap
page read and write
590000
heap
page read and write
2AB0000
heap
page read and write
C6A000
unkown
page readonly
A4D000
stack
page read and write
2CBE000
stack
page read and write
340A000
unkown
page read and write
718000
heap
page read and write
38AF000
stack
page read and write
525E000
stack
page read and write
1C0000
heap
page read and write
F50000
heap
page read and write
6CE0000
heap
page read and write
8F0000
heap
page read and write
1129000
heap
page read and write
312F000
stack
page read and write
3740000
heap
page read and write
428000
unkown
page execute and read and write
155000
heap
page read and write
6C2EB000
unkown
page write copy
3249000
heap
page read and write
1450000
heap
page read and write
6F24002AC000
trusted library allocation
page read and write
3C3B000
heap
page read and write
6C6C000
heap
page read and write
53E000
stack
page read and write
7BD000
stack
page read and write
19D000
stack
page read and write
17E000
stack
page read and write
450000
heap
page read and write
9C000
stack
page read and write
1650000
heap
page read and write
43F000
stack
page read and write
A0F000
stack
page read and write
610000
unkown
page readonly
1145000
heap
page read and write
30C2000
heap
page read and write
9C000
stack
page read and write
5265000
heap
page read and write
48E000
stack
page read and write
3FB000
stack
page read and write
6C492000
unkown
page readonly
9C000
stack
page read and write
2872000
heap
page read and write
741C8000
unkown
page read and write
FDF000
heap
page read and write
A30000
heap
page read and write
28EE000
heap
page read and write
60D000
unkown
page read and write
ABB000
heap
page read and write
1E0000
heap
page read and write
3CA5000
heap
page read and write
A40000
heap
page read and write
F72000
heap
page read and write
B25000
unkown
page read and write
5FE000
stack
page read and write
50E000
stack
page read and write
17E000
stack
page read and write
2901000
heap
page read and write
9FE000
stack
page read and write
3100000
heap
page read and write
DBE000
stack
page read and write
A3C000
stack
page read and write
C4E000
stack
page read and write
3DB5000
heap
page read and write
12CF000
stack
page read and write
2895000
heap
page read and write
7FF7B1EB9000
unkown
page readonly
291D000
heap
page read and write
440000
heap
page read and write
6C0E000
heap
page read and write
9C000
stack
page read and write
450000
heap
page read and write
314F000
stack
page read and write
142627E5000
heap
page read and write
4749000
heap
page read and write
AE8000
heap
page read and write
6D99000
heap
page read and write
37AE000
stack
page read and write
329F000
heap
page read and write
ADB000
heap
page read and write
C40000
unkown
page readonly
A9E000
stack
page read and write
ACE000
heap
page read and write
8F0000
heap
page read and write
E97000
heap
page read and write
1201000
heap
page read and write
ACC000
heap
page read and write
B48000
heap
page read and write
C52000
heap
page read and write
1590000
heap
page read and write
1F0000
heap
page read and write
4B8000
heap
page read and write
B14000
heap
page read and write
430000
heap
page read and write
AF3000
heap
page read and write
AEA000
heap
page read and write
2862000
heap
page read and write
CDF000
stack
page read and write
21A54DC0000
heap
page read and write
25F1000
heap
page read and write
73E000
stack
page read and write
1295000
heap
page read and write
83E000
stack
page read and write
ABF000
heap
page read and write
3DB2000
heap
page read and write
57E000
stack
page read and write
6D8000
heap
page read and write
18A0000
heap
page read and write
89F000
heap
page read and write
9BDF000
stack
page read and write
940000
heap
page read and write
C1E000
stack
page read and write
32AB000
heap
page read and write
D2497FE000
unkown
page readonly
5F0000
heap
page read and write
7FFF415F5000
unkown
page read and write
1CC03D05000
heap
page read and write
9C000
stack
page read and write
990000
heap
page read and write
6CF000
stack
page read and write
28FD000
heap
page read and write
2BAC002A8000
trusted library allocation
page read and write
153F000
stack
page read and write
1120000
heap
page read and write
21A56A02000
heap
page read and write
35AD000
stack
page read and write
F46000
unkown
page read and write
6F0000
heap
page read and write
B90000
heap
page read and write
E6E000
heap
page read and write
A36000
heap
page read and write
12ED000
heap
page read and write
7F5000
heap
page read and write
EAE000
stack
page read and write
228E000
stack
page read and write
1298000
heap
page read and write
340F000
stack
page read and write
A00000
heap
page read and write
2B60000
heap
page read and write
88D000
unkown
page read and write
137B000
heap
page read and write
60D000
unkown
page read and write
6F2400230000
trusted library allocation
page read and write
540000
heap
page read and write
863000
heap
page read and write
D30000
unkown
page write copy
9C000
stack
page read and write
9C6000
heap
page read and write
4CA8000
unkown
page read and write
70C000
heap
page read and write
875000
heap
page read and write
9C000
stack
page read and write
287B000
heap
page read and write
A90000
heap
page read and write
148F000
stack
page read and write
6C2E8000
unkown
page read and write
ADF000
heap
page read and write
AD1000
heap
page read and write
1550000
heap
page read and write
16F000
heap
page read and write
749000
heap
page read and write
12DA000
heap
page read and write
AC3000
heap
page read and write
42B000
heap
page read and write
FC9000
heap
page read and write
2CC0000
heap
page read and write
11B6000
heap
page read and write
2E3E000
heap
page read and write
42B1000
heap
page read and write
1BF000
stack
page read and write
AD1000
heap
page read and write
5268000
heap
page read and write
107E000
heap
page read and write
10CF000
stack
page read and write
4241000
heap
page read and write
13BE000
stack
page read and write
720000
heap
page read and write
1F0000
heap
page read and write
590000
heap
page read and write
6C84000
heap
page read and write
1210000
heap
page read and write
1259000
heap
page read and write
89A000
heap
page read and write
4086000
unkown
page read and write
5AE000
heap
page read and write
1020000
heap
page read and write
5C0000
heap
page read and write
4030000
unkown
page readonly
7FF654710000
unkown
page readonly
323D000
heap
page read and write
2874000
heap
page read and write
30B2000
heap
page read and write
17BE000
stack
page read and write
3B1D000
stack
page read and write
400000
heap
page read and write
101F000
stack
page read and write
50E000
stack
page read and write
12F0000
heap
page read and write
790000
heap
page read and write
10E0000
heap
page read and write
2C2F000
stack
page read and write
428000
unkown
page execute and read and write
8DE000
stack
page read and write
410A000
heap
page read and write
6CA3000
heap
page read and write
D6B000
unkown
page read and write
744000
heap
page read and write
2EC1000
heap
page read and write
2928000
heap
page read and write
60D000
unkown
page write copy
B292EFE000
stack
page read and write
1176000
heap
page read and write
B61000
heap
page read and write
900000
heap
page read and write
287E000
heap
page read and write
C31000
heap
page read and write
14262730000
heap
page read and write
2EC1000
heap
page read and write
1930000
heap
page read and write
A2F000
stack
page read and write
16BE000
stack
page read and write
D52000
heap
page read and write
6E02000
heap
page read and write
73A30000
unkown
page readonly
6E0000
heap
page read and write
19C000
stack
page read and write
490000
heap
page read and write
356E000
stack
page read and write
3272000
heap
page read and write
69F000
stack
page read and write
10BF000
stack
page read and write
2ACE000
stack
page read and write
52E000
stack
page read and write
3C40000
heap
page read and write
6C489000
unkown
page readonly
A99000
heap
page read and write
D7E000
stack
page read and write
6B0000
heap
page read and write
1DB000
stack
page read and write
439000
unkown
page execute and read and write
C20000
heap
page read and write
329D000
stack
page read and write
AF4000
heap
page read and write
106E000
stack
page read and write
77F000
unkown
page read and write
142641D0000
heap
page read and write
72C000
stack
page read and write
1CC03C5D000
heap
page read and write
BA2000
heap
page read and write
3E9E000
stack
page read and write
2869000
heap
page read and write
19D000
stack
page read and write
1262000
heap
page read and write
15EF000
stack
page read and write
48D000
stack
page read and write
670000
heap
page read and write
37C47FD000
stack
page read and write
EAE000
stack
page read and write
9C000
stack
page read and write
1660000
heap
page read and write
AFB000
heap
page read and write
144F000
stack
page read and write
AD0000
heap
page read and write
6C13000
heap
page read and write
7C0000
heap
page read and write
A48000
heap
page read and write
1190000
heap
page read and write
BDE000
stack
page read and write
ABF000
heap
page read and write
32E6000
heap
page read and write
7132000
heap
page read and write
1201000
heap
page read and write
1CC03C5B000
heap
page read and write
B10000
heap
page read and write
820000
unkown
page readonly
2770000
heap
page read and write
7FF7B1EB9000
unkown
page readonly
119A000
heap
page read and write
757000
heap
page read and write
13AE000
stack
page read and write
770000
heap
page read and write
D6E000
stack
page read and write
72A000
heap
page read and write
54F000
stack
page read and write
1FAA7BD0000
heap
page read and write
283E000
heap
page read and write
ABF000
heap
page read and write
12AE000
stack
page read and write
431000
unkown
page execute and read and write
140000
heap
page read and write
407000
unkown
page readonly
199000
stack
page read and write
31AD000
stack
page read and write
B09000
heap
page read and write
D33000
unkown
page read and write
6F2400264000
trusted library allocation
page read and write
6CD7000
heap
page read and write
17E000
stack
page read and write
1204000
heap
page read and write
2744000
heap
page read and write
BD0000
heap
page read and write
430000
unkown
page execute and read and write
7BD000
stack
page read and write
3DB3000
heap
page read and write
611000
unkown
page readonly
47E1000
unkown
page execute read
3DB8000
heap
page read and write
12BA000
heap
page read and write
1F0000
heap
page read and write
2ECF000
stack
page read and write
F00000
heap
page read and write
2E2E000
heap
page read and write
209C2069000
heap
page read and write
140F000
stack
page read and write
1BF000
stack
page read and write
CDC000
stack
page read and write
1CC03C02000
heap
page read and write
50E000
stack
page read and write
6826000
heap
page read and write
334A000
heap
page read and write
12F0000
heap
page read and write
2875000
heap
page read and write
BD000
stack
page read and write
12B7000
heap
page read and write
828000
heap
page read and write
3190000
heap
page read and write
1244000
heap
page read and write
6F6C000
heap
page read and write
A10000
heap
page read and write
130000
heap
page read and write
EFF000
stack
page read and write
400000
unkown
page readonly
93E000
stack
page read and write
1204000
heap
page read and write
AB0000
heap
page read and write
1140C000
unkown
page readonly
AE0000
heap
page read and write
D290D7F000
stack
page read and write
3254000
heap
page read and write
50F000
stack
page read and write
8EF000
stack
page read and write
BFE000
stack
page read and write
510000
heap
page read and write
ABB000
heap
page read and write
287C000
heap
page read and write
B60000
heap
page read and write
2BAC002C0000
trusted library allocation
page read and write
32BB000
heap
page read and write
6C3BB000
unkown
page read and write
283E000
heap
page read and write
7FFF415F5000
unkown
page read and write
D7F000
stack
page read and write
284E000
heap
page read and write
F70000
heap
page read and write
AEA000
heap
page read and write
7FF654795000
unkown
page readonly
A0A000
heap
page read and write
8DB000
stack
page read and write
700000
heap
page read and write
90E000
stack
page read and write
107E000
heap
page read and write
6D4D000
heap
page read and write
190000
heap
page read and write
58E000
stack
page read and write
C6F000
stack
page read and write
F0F000
stack
page read and write
2B2F000
stack
page read and write
1219000
heap
page read and write
11B0000
heap
page read and write
6E0000
heap
page read and write
580000
heap
page read and write
1249000
heap
page read and write
55E000
stack
page read and write
3245000
heap
page read and write
6FA000
heap
page read and write
E06000
heap
page read and write
32D3000
heap
page read and write
B5C000
heap
page read and write
16EE000
stack
page read and write
7FF7458E7000
unkown
page readonly
6C384000
unkown
page readonly
6EA000
unkown
page readonly
2861000
heap
page read and write
7FFF415F5000
unkown
page read and write
138F000
stack
page read and write
1CF000
stack
page read and write
6BFA000
heap
page read and write
9B000
stack
page read and write
D8E000
stack
page read and write
C8E000
stack
page read and write
17E000
stack
page read and write
1076000
heap
page read and write
7C0000
heap
page read and write
292D000
heap
page read and write
6F3E000
heap
page read and write
14E0000
heap
page read and write
D290CFE000
stack
page read and write
A42000
heap
page read and write
3C84000
heap
page read and write
28EC000
heap
page read and write
565000
unkown
page read and write
6C146000
unkown
page read and write
60D000
unkown
page read and write
8FF000
stack
page read and write
2883000
heap
page read and write
88F000
stack
page read and write
26BE000
stack
page read and write
3D5E000
stack
page read and write
6F36000
heap
page read and write
336A000
heap
page read and write
47E000
stack
page read and write
8B5000
heap
page read and write
D60000
heap
page read and write
21A54DA0000
heap
page read and write
6CAF000
heap
page read and write
32C3000
heap
page read and write
2EC1000
heap
page read and write
896000
heap
page read and write
CBE000
stack
page read and write
287A000
heap
page read and write
58A000
heap
page read and write
2864000
heap
page read and write
1D2000
heap
page read and write
7FF7B1EC2000
unkown
page read and write
11E1000
heap
page read and write
AB0000
heap
page read and write
1EEF59F0000
heap
page read and write
401000
unkown
page execute read
C42000
heap
page read and write
88F000
unkown
page read and write
172000
heap
page read and write
3F9F000
stack
page read and write
D5E5FF000
stack
page read and write
164F000
stack
page read and write
6C301000
unkown
page execute read
2915000
heap
page read and write
3DBC000
heap
page read and write
CC9000
heap
page read and write
931A000
stack
page read and write
54F000
stack
page read and write
2BAC00280000
trusted library allocation
page read and write
686000
heap
page read and write
7112000
heap
page read and write
6675000
heap
page read and write
DF0000
heap
page read and write
98000
stack
page read and write
6C48F000
unkown
page read and write
ACC000
heap
page read and write
AF3000
heap
page read and write
945F000
stack
page read and write
11E2000
heap
page read and write
6C48F000
unkown
page read and write
70C000
heap
page read and write
7F0000
heap
page read and write
681F000
heap
page read and write
ACE000
heap
page read and write
F4C000
unkown
page read and write
1E5000
heap
page read and write
520000
heap
page read and write
6C144000
unkown
page read and write
1FE000
stack
page read and write
E2E000
stack
page read and write
2917000
heap
page read and write
959F000
stack
page read and write
B80000
heap
page read and write
4240000
heap
page read and write
3831000
heap
page read and write
11F6000
heap
page read and write
3211000
heap
page read and write
4DB0000
heap
page read and write
3CEE000
heap
page read and write
96CF000
stack
page read and write
130000
heap
page read and write
1BF000
stack
page read and write
1280000
heap
page read and write
6BF1000
trusted library allocation
page read and write
960000
heap
page read and write
425000
unkown
page execute and read and write
C30000
heap
page read and write
69C6000
heap
page read and write
4B0000
heap
page read and write
58E000
stack
page read and write
21A54E13000
heap
page read and write
9D0D000
stack
page read and write
6CF000
stack
page read and write
55F000
stack
page read and write
295F000
stack
page read and write
738000
heap
page read and write
5B0000
heap
page read and write
11E1000
heap
page read and write
10A0C000
unkown
page readonly
107C000
heap
page read and write
18E000
stack
page read and write
1090000
heap
page read and write
A2F000
stack
page read and write
104E000
stack
page read and write
12C0000
heap
page read and write
10000000
unkown
page readonly
650000
trusted library allocation
page read and write
130000
heap
page read and write
112E000
stack
page read and write
440000
heap
page read and write
8B6000
heap
page read and write
B0C000
unkown
page readonly
142627E7000
heap
page read and write
6C2A000
heap
page read and write
54E000
stack
page read and write
6D0000
heap
page read and write
2861000
heap
page read and write
6E67000
heap
page read and write
9A000
stack
page read and write
9D0F000
stack
page read and write
F68000
heap
page read and write
E7E000
stack
page read and write
3291000
heap
page read and write
F9E000
stack
page read and write
335E000
stack
page read and write
DD8000
stack
page read and write
135E000
stack
page read and write
D2496FE000
stack
page read and write
DED000
stack
page read and write
9C000
stack
page read and write
B91000
heap
page read and write
428000
unkown
page execute and read and write
14262A20000
heap
page read and write
710000
heap
page read and write
1C0000
heap
page read and write
D24000
unkown
page read and write
DD0000
heap
page read and write
12B2000
heap
page read and write
2862000
heap
page read and write
130000
heap
page read and write
3C84000
heap
page read and write
C3E000
stack
page read and write
169F000
stack
page read and write
126A000
heap
page read and write
D2F000
stack
page read and write
339C000
stack
page read and write
A37000
heap
page read and write
AF9000
heap
page read and write
2F70000
heap
page read and write
439000
unkown
page execute and read and write
AB0000
heap
page read and write
A00000
heap
page read and write
115F000
stack
page read and write
5A8000
unkown
page read and write
F90000
heap
page read and write
F4C000
unkown
page read and write
526C000
heap
page read and write
2E29000
heap
page read and write
11A5000
heap
page read and write
223E000
stack
page read and write
6C02000
heap
page read and write
8AF000
heap
page read and write
696000
heap
page read and write
9C000
stack
page read and write
1FAA9710000
heap
page read and write
6BE000
stack
page read and write
6D17000
heap
page read and write
6BE000
stack
page read and write
1D0000
heap
page read and write
32AC000
heap
page read and write
D9E000
stack
page read and write
407000
unkown
page readonly
1BF000
stack
page read and write
8B0000
heap
page read and write
11E6000
heap
page read and write
120E000
stack
page read and write
B12000
heap
page read and write
C56000
heap
page read and write
6F2400254000
trusted library allocation
page read and write
430000
heap
page read and write
6C220000
unkown
page readonly
AD1000
heap
page read and write
DE6000
heap
page read and write
720000
heap
page read and write
5DE000
stack
page read and write
3406000
unkown
page read and write
25F1000
heap
page read and write
2861000
heap
page read and write
9C000
stack
page read and write
F4F000
unkown
page read and write
6C7E000
heap
page read and write
66A000
heap
page read and write
4788000
heap
page read and write
6BE000
stack
page read and write
A6F000
heap
page read and write
A7D000
heap
page read and write
862D000
stack
page read and write
A1F000
stack
page read and write
47F000
stack
page read and write
E0E000
stack
page read and write
2E3B000
heap
page read and write
431000
unkown
page execute and read and write
1640000
heap
page read and write
69B1000
heap
page read and write
B25000
unkown
page read and write
12DE000
stack
page read and write
140000
heap
page read and write
560000
heap
page read and write
3212000
heap
page read and write
604000
heap
page read and write
28EE000
heap
page read and write
6DB000
heap
page read and write
288B000
heap
page read and write
2EC1000
heap
page read and write
83B000
heap
page read and write
8A0000
heap
page read and write
650000
heap
page read and write
EEF000
heap
page read and write
ACE000
heap
page read and write
770000
heap
page read and write
4BE000
stack
page read and write
30C0000
heap
page read and write
3212000
heap
page read and write
1380000
heap
page read and write
689F000
heap
page read and write
56B000
unkown
page read and write
29B0000
heap
page read and write
DC000
stack
page read and write
6B7000
heap
page read and write
43E000
stack
page read and write
6B0000
heap
page read and write
A9E000
stack
page read and write
1660000
heap
page read and write
2EC1000
heap
page read and write
896000
heap
page read and write
6508000
heap
page read and write
9C0000
heap
page read and write
638000
heap
page read and write
17E000
stack
page read and write
741C7000
unkown
page readonly
470000
heap
page read and write
2D20000
heap
page read and write
11A0000
heap
page read and write
777000
unkown
page read and write
32BB000
heap
page read and write
6C00000
heap
page read and write
287E000
heap
page read and write
2913000
heap
page read and write
863C000
stack
page read and write
2EC1000
heap
page read and write
1F0000
heap
page read and write
32FF000
heap
page read and write
629000
heap
page read and write
5A0000
heap
page read and write
7D0000
heap
page read and write
3179EF8000
stack
page read and write
470000
heap
page read and write
292A000
heap
page read and write
401000
unkown
page execute and read and write
7FF7458E5000
unkown
page readonly
D90000
heap
page read and write
D2E000
unkown
page write copy
25F1000
heap
page read and write
31FC000
heap
page read and write
DD0000
heap
page read and write
33F3000
unkown
page readonly
1200000
heap
page read and write
325F000
heap
page read and write
721000
heap
page read and write
25B0000
heap
page read and write
28EE000
heap
page read and write
2862000
heap
page read and write
14CA000
heap
page read and write
407000
unkown
page readonly
421000
unkown
page read and write
9E5F000
stack
page read and write
2913000
heap
page read and write
1BF000
stack
page read and write
7D0000
heap
page read and write
14B0000
heap
page read and write
6C2E8000
unkown
page read and write
85F000
stack
page read and write
1F0000
heap
page read and write
6BCD000
heap
page read and write
87F000
stack
page read and write
7223000
heap
page read and write
352F000
stack
page read and write
B2938FE000
stack
page read and write
60D000
unkown
page read and write
6C300000
unkown
page readonly
11C3000
heap
page read and write
5CE000
stack
page read and write
12C427F0000
heap
page read and write
180000
heap
page read and write
B25000
unkown
page read and write
3DB9000
heap
page read and write
12C7000
heap
page read and write
155E000
stack
page read and write
418000
heap
page read and write
2EC1000
heap
page read and write
2E70000
heap
page read and write
41C000
stack
page read and write
7FFF415F2000
unkown
page read and write
B70000
heap
page read and write
19D000
stack
page read and write
590000
heap
page read and write
6C1A000
heap
page read and write
888000
heap
page read and write
1C0000
heap
page read and write
67A000
unkown
page write copy
7E0000
heap
page read and write
BCE000
stack
page read and write
1560000
heap
page read and write
25F1000
heap
page read and write
21A54D80000
heap
page read and write
1D0000
heap
page read and write
97E000
stack
page read and write
32E6000
heap
page read and write
7E0000
heap
page read and write
909F000
stack
page read and write
2BAC0023C000
trusted library allocation
page read and write
6C08000
heap
page read and write
2895000
heap
page read and write
EFB000
stack
page read and write
6FC000
stack
page read and write
F32000
heap
page read and write
4679000
heap
page read and write
FF8000
heap
page read and write
DEA000
heap
page read and write
11DE000
stack
page read and write
9C0000
heap
page read and write
94E000
stack
page read and write
1FAA9700000
heap
page read and write
17E000
stack
page read and write
369C000
heap
page read and write
409000
unkown
page write copy
6C48F000
unkown
page read and write
D2494FD000
stack
page read and write
B70000
heap
page read and write
9C000
stack
page read and write
19C000
stack
page read and write
693000
stack
page read and write
D2491FE000
unkown
page readonly
2EC1000
heap
page read and write
11C5000
heap
page read and write
D52000
heap
page read and write
92E000
stack
page read and write
E6E000
stack
page read and write
3CA5000
heap
page read and write
1FAA7B0B000
heap
page read and write
137E000
stack
page read and write
A1F000
stack
page read and write
286E000
heap
page read and write
1223000
heap
page read and write
11EE000
stack
page read and write
6F28000
heap
page read and write
D49000
unkown
page read and write
25F1000
heap
page read and write
DD000
stack
page read and write
79F000
stack
page read and write
10001000
unkown
page execute read
91E000
stack
page read and write
AE0000
heap
page read and write
9C000
stack
page read and write
900000
heap
page read and write
6F240023C000
trusted library allocation
page read and write
D52000
heap
page read and write
A3E000
heap
page read and write
8F5F000
stack
page read and write
D52000
heap
page read and write
11CB000
stack
page read and write
40FA000
heap
page read and write
B16000
heap
page read and write
27DE000
stack
page read and write
3400000
unkown
page read and write
7F0000
heap
page read and write
420000
heap
page read and write
3276000
heap
page read and write
6E8B000
heap
page read and write
400000
unkown
page readonly
32D8000
heap
page read and write
60D000
unkown
page read and write
EBA000
heap
page read and write
741C3000
unkown
page readonly
1245000
heap
page read and write
B0F000
heap
page read and write
F70000
heap
page read and write
3CA5000
heap
page read and write
3442000
heap
page read and write
91F000
stack
page read and write
48C0000
unkown
page readonly
790000
heap
page read and write
11F3000
heap
page read and write
5AF000
stack
page read and write
C0E000
stack
page read and write
95F000
stack
page read and write
B2F000
heap
page read and write
6C32000
heap
page read and write
489000
heap
page read and write
8A9000
heap
page read and write
A3E000
stack
page read and write
13A3000
heap
page read and write
2770000
heap
page read and write
31A5000
heap
page read and write
630000
heap
page read and write
6D8D000
heap
page read and write
13B2000
heap
page read and write
6F1B000
heap
page read and write
13D3000
heap
page read and write
10001000
unkown
page execute read
12E0000
heap
page read and write
287A000
heap
page read and write
11FD000
heap
page read and write
29E3000
heap
page read and write
1200000
heap
page read and write
ECA000
heap
page read and write
E2F000
stack
page read and write
132000
heap
page read and write
3DB8000
heap
page read and write
8CF000
stack
page read and write
FEA000
heap
page read and write
3C84000
heap
page read and write
2D2F000
stack
page read and write
11AF000
stack
page read and write
6AE000
stack
page read and write
4BE000
stack
page read and write
11A5000
heap
page read and write
59E000
stack
page read and write
B2931FE000
unkown
page readonly
5E0000
heap
page read and write
739000
heap
page read and write
1DF000
stack
page read and write
387F000
stack
page read and write
6AE000
stack
page read and write
19C000
stack
page read and write
31AA000
heap
page read and write
890000
unkown
page read and write
7E0000
heap
page read and write
6C48F000
unkown
page read and write
11A5000
heap
page read and write
28C3000
heap
page read and write
D2498FE000
stack
page read and write
B25000
unkown
page read and write
428000
unkown
page execute and read and write
3BDF000
stack
page read and write
3CA2000
heap
page read and write
121F000
heap
page read and write
B30000
heap
page read and write
3361000
heap
page read and write
7FF7B1EC0000
unkown
page read and write
ABB000
heap
page read and write
ACA000
heap
page read and write
B28BFF000
stack
page read and write
6C144000
unkown
page read and write
105C000
stack
page read and write
310F000
stack
page read and write
62E000
stack
page read and write
480000
heap
page read and write
660000
heap
page read and write
2EC6000
heap
page read and write
9A9F000
stack
page read and write
13CC000
heap
page read and write
870000
heap
page read and write
59E000
stack
page read and write
291D000
heap
page read and write
329F000
heap
page read and write
5AF000
stack
page read and write
6C0000
heap
page read and write
2D50000
heap
page read and write
E6E000
stack
page read and write
3A6E000
stack
page read and write
3076000
stack
page read and write
ADF000
heap
page read and write
94C000
stack
page read and write
B8E000
stack
page read and write
6F240024C000
trusted library allocation
page read and write
4FC000
stack
page read and write
1230000
heap
page read and write
130000
heap
page read and write
830000
heap
page read and write
B292CFF000
stack
page read and write
32DF000
heap
page read and write
F4F000
unkown
page read and write
13F1000
heap
page read and write
28FD000
heap
page read and write
12A4000
heap
page read and write
2680000
heap
page read and write
439000
unkown
page execute and read and write
3EEE000
stack
page read and write
44A000
heap
page read and write
16BF000
stack
page read and write
480000
heap
page read and write
2780000
heap
page read and write
E5F000
stack
page read and write
75E000
stack
page read and write
FF6000
heap
page read and write
A3F000
stack
page read and write
428000
unkown
page execute and read and write
3210000
trusted library allocation
page read and write
2BAC00220000
trusted library allocation
page read and write
10003000
unkown
page readonly
1FAA7D00000
heap
page read and write
91E000
stack
page read and write
14C0000
heap
page read and write
9C000
stack
page read and write
18A000
stack
page read and write
689A000
heap
page read and write
DD000
stack
page read and write
6C2E8000
unkown
page read and write
B2C000
heap
page read and write
47C0000
heap
page read and write
5D0000
heap
page read and write
35F9000
heap
page read and write
154E000
stack
page read and write
40F2000
heap
page read and write
B28AFE000
stack
page read and write
23A6000
heap
page read and write
2871000
heap
page read and write
333D000
heap
page read and write
7EF000
stack
page read and write
2660000
heap
page read and write
D2492FD000
stack
page read and write
47FF000
stack
page read and write
2ECD000
heap
page read and write
EAE000
stack
page read and write
130000
heap
page read and write
7FFF415F2000
unkown
page read and write
288B000
heap
page read and write
6C2ED000
unkown
page read and write
107E000
heap
page read and write
8FC000
stack
page read and write
17E000
stack
page read and write
7FF74590C000
unkown
page read and write
D248CF7000
stack
page read and write
19D000
stack
page read and write
2980000
heap
page read and write
ABF000
heap
page read and write
4110000
heap
page read and write
8E5000
heap
page read and write
10BE000
stack
page read and write
2EC1000
heap
page read and write
AE8000
heap
page read and write
470000
heap
page read and write
3285000
heap
page read and write
3212000
heap
page read and write
90F000
stack
page read and write
28F9000
heap
page read and write
86C000
stack
page read and write
D45000
stack
page read and write
6C66000
heap
page read and write
437B000
heap
page read and write
B00000
heap
page read and write
2862000
heap
page read and write
1130000
heap
page read and write
A5F000
stack
page read and write
6C0E1000
unkown
page execute read
603000
unkown
page readonly
18E000
stack
page read and write
17BF000
stack
page read and write
BBF000
heap
page read and write
2EC1000
heap
page read and write
89A000
heap
page read and write
9D4000
stack
page read and write
1FAA7BF0000
heap
page read and write
DFE000
stack
page read and write
F80000
heap
page read and write
864000
heap
page read and write
5DE000
stack
page read and write
7208000
heap
page read and write
562000
heap
page read and write
A3C000
heap
page read and write
B35000
heap
page read and write
650000
heap
page read and write
100000
heap
page read and write
50F000
stack
page read and write
F76000
heap
page read and write
B3B000
heap
page read and write
129C000
heap
page read and write
1190000
heap
page read and write
18E000
stack
page read and write
2EC3000
heap
page read and write
7FFF415F5000
unkown
page read and write
769000
unkown
page write copy
755000
heap
page read and write
480000
heap
page read and write
460000
heap
page read and write
287F000
heap
page read and write
304E000
stack
page read and write
4F8000
stack
page read and write
2370000
heap
page read and write
3CC6000
heap
page read and write
3C86000
heap
page read and write
B01000
heap
page read and write
130000
heap
page read and write
1114000
heap
page read and write
5CE000
stack
page read and write
28D4000
heap
page read and write
D67000
unkown
page read and write
21A54E60000
heap
page read and write
B08000
heap
page read and write
6C3BB000
unkown
page read and write
96C000
stack
page read and write
431000
unkown
page execute and read and write
EEF000
heap
page read and write
4D0000
heap
page read and write
1FAA975B000
heap
page read and write
13E8000
heap
page read and write
420000
heap
page read and write
2D9F000
stack
page read and write
2670000
heap
page read and write
6679000
heap
page read and write
107D000
heap
page read and write
318E000
stack
page read and write
145E000
stack
page read and write
23AA000
heap
page read and write
6C24000
heap
page read and write
6F2400220000
trusted library allocation
page read and write
550000
heap
page read and write
2867000
heap
page read and write
68F000
stack
page read and write
17E000
stack
page read and write
D51000
heap
page read and write
890000
unkown
page read and write
2EAA000
heap
page read and write
284D000
heap
page read and write
93C000
stack
page read and write
3CB4000
heap
page read and write
957000
heap
page read and write
949E000
stack
page read and write
54E000
stack
page read and write
117F000
stack
page read and write
12DD000
heap
page read and write
139F000
stack
page read and write
7FFF415F2000
unkown
page read and write
B54000
heap
page read and write
D52000
heap
page read and write
571000
unkown
page readonly
479000
heap
page read and write
565000
unkown
page read and write
130000
heap
page read and write
92E000
stack
page read and write
36ED000
stack
page read and write
B1E000
stack
page read and write
1EEF5A40000
heap
page read and write
60D000
unkown
page read and write
25F6000
heap
page read and write
E09000
heap
page read and write
19D000
stack
page read and write
130000
heap
page read and write
AF3000
heap
page read and write
30EF000
stack
page read and write
18B000
stack
page read and write
32AC000
heap
page read and write
290D000
heap
page read and write
460000
unkown
page readonly
91E000
stack
page read and write
620000
heap
page read and write
AE7000
heap
page read and write
79E000
stack
page read and write
3246000
heap
page read and write
5A3000
unkown
page write copy
A4F000
stack
page read and write
500000
heap
page read and write
55E000
stack
page read and write
19C000
stack
page read and write
7FF7B1EC2000
unkown
page read and write
29B3000
heap
page read and write
730000
heap
page read and write
170E000
stack
page read and write
488F000
unkown
page readonly
6D4000
heap
page read and write
179F000
stack
page read and write
469B000
heap
page read and write
366F000
heap
page read and write
820000
heap
page read and write
C8A000
heap
page read and write
54E000
stack
page read and write
180000
heap
page read and write
2DD000
stack
page read and write
5C0000
heap
page read and write
7039000
heap
page read and write
7FF7B1EB0000
unkown
page readonly
7FF745890000
unkown
page readonly
12C42942000
heap
page read and write
F7E000
stack
page read and write
1201000
heap
page read and write
D60000
heap
page read and write
2D5F000
stack
page read and write
700000
heap
page read and write
1170000
heap
page read and write
D290C7C000
stack
page read and write
73A37000
unkown
page readonly
F60000
heap
page read and write
AFD000
stack
page read and write
873F000
stack
page read and write
D52000
heap
page read and write
900000
heap
page read and write
7FFF415EA000
unkown
page readonly
864000
heap
page read and write
AED000
heap
page read and write
101D000
unkown
page write copy
7FF7458E5000
unkown
page readonly
D47000
unkown
page read and write
1620000
heap
page read and write
130E000
stack
page read and write
58E000
stack
page read and write
32C8000
heap
page read and write
C7E000
stack
page read and write
3C00000
heap
page read and write
2620000
heap
page read and write
159E000
stack
page read and write
BF1000
heap
page read and write
FD0000
heap
page read and write
15B000
heap
page read and write
5BC000
stack
page read and write
C40000
unkown
page readonly
89B000
heap
page read and write
4D3E000
stack
page read and write
32B1000
heap
page read and write
25F1000
heap
page read and write
25F1000
heap
page read and write
600000
heap
page read and write
6AC000
heap
page read and write
154E000
stack
page read and write
AC3000
heap
page read and write
1255000
heap
page read and write
88D000
unkown
page read and write
883F000
stack
page read and write
458000
heap
page read and write
1110000
heap
page read and write
3670000
remote allocation
page read and write
8DF000
stack
page read and write
3CB9000
heap
page read and write
29DF000
stack
page read and write
6F2400258000
trusted library allocation
page read and write
DD000
stack
page read and write
610000
heap
page read and write
130000
heap
page read and write
510000
heap
page read and write
6702000
heap
page read and write
2EC1000
heap
page read and write
19D000
stack
page read and write
B10000
heap
page read and write
9A0000
heap
page read and write
AE0000
heap
page read and write
740000
heap
page read and write
120C000
heap
page read and write
32E6000
heap
page read and write
337E000
heap
page read and write
6F2400274000
trusted library allocation
page read and write
EF5000
stack
page read and write
17E000
stack
page read and write
6C1A000
heap
page read and write
21A54D60000
heap
page read and write
9C000
stack
page read and write
3212000
heap
page read and write
285F000
heap
page read and write
1FAA7AD0000
heap
page read and write
1E2000
heap
page read and write
2916000
heap
page read and write
A38000
heap
page read and write
286A000
heap
page read and write
B9E000
stack
page read and write
741CA000
unkown
page readonly
157E000
stack
page read and write
7F5000
heap
page read and write
A05000
heap
page read and write
32A7000
heap
page read and write
AB0000
heap
page read and write
D2C000
unkown
page read and write
32DA000
heap
page read and write
A88000
heap
page read and write
59E000
stack
page read and write
AF3000
heap
page read and write
67F000
stack
page read and write
580000
heap
page read and write
7F6000
heap
page read and write
142627E4000
heap
page read and write
C40000
heap
page read and write
B6B000
heap
page read and write
67A000
unkown
page read and write
863000
heap
page read and write
BD0000
heap
page read and write
3C1E000
stack
page read and write
6FF000
stack
page read and write
13F1000
heap
page read and write
9AB000
stack
page read and write
2E20000
heap
page read and write
1100000
heap
page read and write
1F0000
heap
page read and write
286B000
heap
page read and write
3212000
heap
page read and write
283E000
heap
page read and write
6C3E000
heap
page read and write
570000
heap
page read and write
DC000
stack
page read and write
2E3B000
heap
page read and write
160E000
stack
page read and write
5DF000
stack
page read and write
1F0000
heap
page read and write
30F0000
heap
page read and write
8E5F000
stack
page read and write
E90000
heap
page read and write
2862000
heap
page read and write
342E000
stack
page read and write
11BF000
stack
page read and write
2BAC00290000
trusted library allocation
page read and write
5260000
heap
page read and write
848000
heap
page read and write
D53000
heap
page read and write
592000
heap
page read and write
1040000
heap
page read and write
2913000
heap
page read and write
B32000
heap
page read and write
3277000
heap
page read and write
140000
heap
page read and write
22C4000
heap
page read and write
12AA000
heap
page read and write
70C000
heap
page read and write
3210000
trusted library allocation
page read and write
D34000
unkown
page read and write
287C000
heap
page read and write
66F000
stack
page read and write
3E5D000
stack
page read and write
B25000
unkown
page read and write
D249BFE000
unkown
page readonly
4D0000
heap
page read and write
B10000
heap
page read and write
9ADE000
stack
page read and write
16AE000
stack
page read and write
156E000
stack
page read and write
13CE000
stack
page read and write
11CF000
heap
page read and write
316E000
stack
page read and write
2EC1000
heap
page read and write
11E0000
heap
page read and write
12F0000
heap
page read and write
14C000
heap
page read and write
284D000
heap
page read and write
B6A000
heap
page read and write
7FF7B1EC0000
unkown
page read and write
9C000
stack
page read and write
DD000
stack
page read and write
4599000
heap
page read and write
567000
unkown
page read and write
47E0000
unkown
page readonly
6C38000
heap
page read and write
6C3BB000
unkown
page read and write
5AD000
unkown
page readonly
ADF000
heap
page read and write
52B000
unkown
page readonly
70F000
heap
page read and write
EB0000
heap
page read and write
ABB000
heap
page read and write
2854000
heap
page read and write
DD000
stack
page read and write
B2932FE000
stack
page read and write
14262750000
heap
page read and write
AB0000
heap
page read and write
2831000
heap
page read and write
D5C000
stack
page read and write
930000
heap
page read and write
25F1000
heap
page read and write
E2F000
stack
page read and write
341E000
stack
page read and write
E10000
heap
page read and write
507F000
stack
page read and write
D32000
unkown
page write copy
58E000
stack
page read and write
DD000
stack
page read and write
5CE000
stack
page read and write
2390000
heap
page read and write
F20000
heap
page read and write
3CA7000
heap
page read and write
730000
heap
page read and write
2A10000
heap
page read and write
CE0000
heap
page read and write
560000
heap
page read and write
5CF000
stack
page read and write
660000
heap
page read and write
1410000
heap
page read and write
3C6F000
heap
page read and write
2EC1000
heap
page read and write
60D000
unkown
page read and write
588000
heap
page read and write
3331000
heap
page read and write
428000
unkown
page execute and read and write
7D0000
heap
page read and write
7FF65478C000
unkown
page read and write
7D0000
heap
page read and write
1085000
heap
page read and write
6AE000
stack
page read and write
1150000
unclassified section
page read and write
A80000
heap
page read and write
AEE000
heap
page read and write
450000
heap
page read and write
23C0000
heap
page read and write
684000
heap
page read and write
12A4000
heap
page read and write
2911000
heap
page read and write
4BE000
stack
page read and write
288B000
heap
page read and write
7FFF415D5000
unkown
page readonly
116E000
stack
page read and write
3D9B000
heap
page read and write
2B20000
heap
page read and write
1200000
heap
page read and write
571000
unkown
page readonly
431000
unkown
page execute and read and write
759000
heap
page read and write
3CC5000
heap
page read and write
DD000
stack
page read and write
97E000
stack
page read and write
13E8000
heap
page read and write
130000
heap
page read and write
6C146000
unkown
page read and write
565000
unkown
page write copy
A30000
heap
page read and write
335B000
heap
page read and write
FED000
heap
page read and write
6D6000
heap
page read and write
50F000
stack
page read and write
D58000
heap
page read and write
58E000
stack
page read and write
2EC1000
heap
page read and write
560000
heap
page read and write
3FA3000
heap
page read and write
DB0000
heap
page read and write
9C000
stack
page read and write
33EE000
stack
page read and write
699000
stack
page read and write
A38000
heap
page read and write
2A5F000
stack
page read and write
6E6000
heap
page read and write
480000
heap
page read and write
25F0000
heap
page read and write
2EC000
stack
page read and write
FF0000
heap
page read and write
6C480000
unkown
page readonly
1620000
heap
page read and write
1250000
heap
page read and write
6C29000
heap
page read and write
FDE000
stack
page read and write
5EE000
stack
page read and write
2360000
heap
page read and write
1215000
heap
page read and write
5C0000
heap
page read and write
3DBE000
heap
page read and write
323B000
heap
page read and write
3C1E000
stack
page read and write
32E6000
heap
page read and write
1CF000
stack
page read and write
2876000
heap
page read and write
B28000
unkown
page readonly
3408000
unkown
page write copy
731000
heap
page read and write
ACE000
heap
page read and write
720E000
heap
page read and write
11D0000
heap
page read and write
694000
unkown
page read and write
660000
heap
page read and write
6E0000
heap
page read and write
A30000
heap
page read and write
6F2400284000
trusted library allocation
page read and write
1BF000
stack
page read and write
6BEE000
heap
page read and write
2D53000
heap
page read and write
6D0000
heap
page read and write
60D000
unkown
page read and write
7DE000
stack
page read and write
B8E000
stack
page read and write
3FB3000
heap
page read and write
2993000
heap
page read and write
9C000
stack
page read and write
3331000
heap
page read and write
428000
unkown
page execute and read and write
62E000
unkown
page readonly
292E000
heap
page read and write
7214000
heap
page read and write
F4C000
unkown
page read and write
865000
heap
page read and write
58E000
stack
page read and write
25F1000
heap
page read and write
E60000
heap
page read and write
AF3000
heap
page read and write
377E000
stack
page read and write
18B4000
heap
page read and write
184F000
stack
page read and write
760000
heap
page read and write
1FAA79E0000
heap
page read and write
400000
unkown
page readonly
13D7000
heap
page read and write
1F0000
heap
page read and write
146E000
stack
page read and write
121A000
heap
page read and write
1018000
unkown
page execute and write copy
F70000
heap
page read and write
720000
heap
page read and write
AB0000
heap
page read and write
D2490FE000
stack
page read and write
D249AFB000
stack
page read and write
17E000
stack
page read and write
6C143000
unkown
page read and write
17E000
stack
page read and write
ACC000
heap
page read and write
2916000
heap
page read and write
1360000
heap
page read and write
6E8E000
heap
page read and write
25F1000
heap
page read and write
58E000
stack
page read and write
10D0000
heap
page read and write
32D5000
heap
page read and write
AFB000
heap
page read and write
2923000
heap
page read and write
28F2000
heap
page read and write
A2F000
stack
page read and write
414000
unkown
page read and write
428000
unkown
page execute and read and write
968000
heap
page read and write
6C48F000
unkown
page read and write
32AC000
stack
page read and write
B2874B000
stack
page read and write
1E0000
heap
page read and write
48C0000
trusted library allocation
page read and write
82F000
stack
page read and write
D4E000
stack
page read and write
32DF000
stack
page read and write
3DC000
stack
page read and write
34FD000
stack
page read and write
AFB000
stack
page read and write
B1B000
heap
page read and write
690000
heap
page read and write
130000
heap
page read and write
21A54E00000
heap
page read and write
F0C000
unkown
page readonly
4EB000
stack
page read and write
6AD9000
heap
page read and write
33FD000
stack
page read and write
25A0000
heap
page read and write
32E6000
heap
page read and write
DB0000
heap
page read and write
2250000
heap
page read and write
773000
unkown
page write copy
3308000
heap
page read and write
2F0E000
stack
page read and write
5CF000
stack
page read and write
DD000
stack
page read and write
CEC000
stack
page read and write
1E2000
heap
page read and write
1C0000
heap
page read and write
2EC1000
heap
page read and write
A4C000
heap
page read and write
118F000
stack
page read and write
8E0000
heap
page read and write
A0E000
heap
page read and write
3C01000
heap
page read and write
1170000
heap
page read and write
6C72000
heap
page read and write
131E000
stack
page read and write
32B5000
heap
page read and write
1204000
heap
page read and write
331E000
stack
page read and write
1219000
heap
page read and write
2F9F000
stack
page read and write
5A6000
unkown
page read and write
17C0000
heap
page read and write
401000
unkown
page execute read
56E000
unkown
page read and write
5AB000
unkown
page read and write
27E4000
heap
page read and write
A84000
heap
page read and write
1112000
heap
page read and write
3CEE000
heap
page read and write
130000
heap
page read and write
68F000
stack
page read and write
1000C000
unkown
page readonly
38CE000
stack
page read and write
560000
heap
page read and write
DC000
stack
page read and write
60D000
unkown
page read and write
28E6000
heap
page read and write
5A3000
unkown
page read and write
B2C000
heap
page read and write
7A0000
heap
page read and write
860000
heap
page read and write
741C1000
unkown
page execute read
B20000
heap
page read and write
65F000
stack
page read and write
AEA000
heap
page read and write
2EC1000
heap
page read and write
1114000
heap
page read and write
91F000
stack
page read and write
5AB000
unkown
page read and write
209C21B0000
heap
page read and write
D52000
heap
page read and write
127E000
stack
page read and write
85E000
stack
page read and write
4419000
heap
page read and write
CC000
stack
page read and write
89E000
heap
page read and write
3DBD000
heap
page read and write
6CE000
stack
page read and write
2EC1000
heap
page read and write
25F1000
heap
page read and write
64E000
stack
page read and write
A1D000
heap
page read and write
300E000
stack
page read and write
4680000
heap
page read and write
B2937FE000
unkown
page readonly
25F1000
heap
page read and write
12EF000
stack
page read and write
2EC1000
heap
page read and write
2C74000
heap
page read and write
710000
heap
page read and write
2C84000
heap
page read and write
AEF000
heap
page read and write
3C52000
heap
page read and write
292D000
heap
page read and write
1FAA7D04000
heap
page read and write
A9D000
heap
page read and write
F4C000
unkown
page read and write
470000
heap
page read and write
155E000
stack
page read and write
9C000
stack
page read and write
7AE000
stack
page read and write
2E88000
heap
page read and write
F0C000
unkown
page readonly
130000
heap
page read and write
689000
heap
page read and write
D290DFE000
stack
page read and write
A0F000
stack
page read and write
60D000
unkown
page read and write
1CC03C00000
heap
page read and write
ADF000
heap
page read and write
2875000
heap
page read and write
1F0000
heap
page read and write
3254000
heap
page read and write
128E000
stack
page read and write
4C0000
heap
page read and write
DBC000
stack
page read and write
BFB000
unkown
page readonly
F46000
unkown
page read and write
2862000
heap
page read and write
6EF000
stack
page read and write
604000
heap
page read and write
56E000
stack
page read and write
7AD000
stack
page read and write
21A54E89000
heap
page read and write
A7E000
stack
page read and write
B1F000
heap
page read and write
1720000
heap
page read and write
1B2000
heap
page read and write
10F8000
stack
page read and write
288A000
heap
page read and write
132B000
heap
page read and write
140000
heap
page read and write
9C000
stack
page read and write
2D80000
heap
page read and write
C00000
heap
page read and write
1320000
heap
page read and write
89B000
heap
page read and write
66DD000
heap
page read and write
6EC000
heap
page read and write
401000
unkown
page execute read
70D000
unkown
page readonly
981F000
stack
page read and write
3211000
heap
page read and write
730000
heap
page read and write
1001000
unkown
page execute and read and write
396E000
stack
page read and write
95F000
stack
page read and write
ADF000
heap
page read and write
7EE000
stack
page read and write
707000
heap
page read and write
320C000
heap
page read and write
A30000
heap
page read and write
820000
heap
page read and write
56B000
unkown
page read and write
B4E000
stack
page read and write
850000
heap
page read and write
B03000
heap
page read and write
BAE000
stack
page read and write
735000
stack
page read and write
AFF000
stack
page read and write
1220000
heap
page read and write
22DE000
stack
page read and write
3305000
heap
page read and write
DA2000
unkown
page readonly
723000
heap
page read and write
126E000
heap
page read and write
8EF000
stack
page read and write
5E0000
unkown
page readonly
8F9C000
stack
page read and write
DCF000
stack
page read and write
2884000
heap
page read and write
6DE000
stack
page read and write
57E000
stack
page read and write
DC0000
heap
page read and write
4F0000
heap
page read and write
21A54E28000
heap
page read and write
68E000
unkown
page read and write
900000
heap
page read and write
11EA000
heap
page read and write
3DBE000
heap
page read and write
103C000
unkown
page readonly
1665000
heap
page read and write
B292AF8000
stack
page read and write
15B0000
heap
page read and write
70C000
heap
page read and write
805000
stack
page read and write
A0F000
stack
page read and write
32AF000
heap
page read and write
B02000
heap
page read and write
7128000
heap
page read and write
310D000
heap
page read and write
2862000
heap
page read and write
363E000
stack
page read and write
6BBD000
heap
page read and write
944F000
stack
page read and write
968000
heap
page read and write
2917000
heap
page read and write
132E000
heap
page read and write
FBE000
stack
page read and write
F52000
unkown
page readonly
C00000
heap
page read and write
B3B000
stack
page read and write
66E000
stack
page read and write
2660000
heap
page read and write
43E000
unkown
page write copy
A6E000
stack
page read and write
B89000
heap
page read and write
60D000
unkown
page read and write
9C000
stack
page read and write
69A6000
heap
page read and write
E40000
unkown
page readonly
5E0000
heap
page read and write
DD000
stack
page read and write
7FF7B1EC2000
unkown
page read and write
2EC1000
heap
page read and write
FD0000
heap
page read and write
1563000
heap
page read and write
32E6000
heap
page read and write
604000
heap
page read and write
40B000
unkown
page read and write
B40000
heap
page read and write
7C0000
heap
page read and write
AEB000
heap
page read and write
6C48F000
unkown
page read and write
1FE000
stack
page read and write
AEA000
heap
page read and write
92F000
stack
page read and write
A8E000
stack
page read and write
DE0000
heap
page read and write
A3D000
heap
page read and write
695E000
heap
page read and write
288C000
heap
page read and write
10FB000
stack
page read and write
9C2000
heap
page read and write
A2F000
stack
page read and write
25F1000
heap
page read and write
D24000
unkown
page read and write
489000
heap
page read and write
1BF000
stack
page read and write
28DF000
stack
page read and write
121A000
heap
page read and write
3F9E000
stack
page read and write
199000
stack
page read and write
B06000
heap
page read and write
712000
heap
page read and write
9C000
stack
page read and write
1236000
heap
page read and write
166E000
stack
page read and write
209C2160000
heap
page read and write
14F0000
heap
page read and write
1077000
heap
page read and write
BBA000
stack
page read and write
6C21000
heap
page read and write
12C4294E000
heap
page read and write
699000
heap
page read and write
128E000
stack
page read and write
439000
unkown
page execute and read and write
96000
stack
page read and write
A92000
heap
page read and write
21A54E84000
heap
page read and write
650000
heap
page read and write
25F1000
heap
page read and write
317A0FF000
stack
page read and write
3276000
heap
page read and write
1205000
heap
page read and write
6EF1000
heap
page read and write
47D0000
heap
page read and write
11FF000
stack
page read and write
3D5F000
stack
page read and write
DFE000
stack
page read and write
E6A000
heap
page read and write
51A000
heap
page read and write
338C000
heap
page read and write
1280000
heap
page read and write
1216000
heap
page read and write
3CC6000
heap
page read and write
10F2000
heap
page read and write
FC0000
heap
page read and write
CB9000
heap
page read and write
11B2000
heap
page read and write
AD1000
heap
page read and write
7F5000
heap
page read and write
3308000
heap
page read and write
28F6000
heap
page read and write
AE0000
heap
page read and write
6C2F000
heap
page read and write
4580000
heap
page read and write
59E000
stack
page read and write
2EC0000
heap
page read and write
25F1000
heap
page read and write
6AA000
unkown
page read and write
10005000
unkown
page readonly
5E8000
heap
page read and write
7FF654789000
unkown
page read and write
441000
unkown
page read and write
12E3000
heap
page read and write
7FFF415C5000
unkown
page readonly
6C3BB000
unkown
page read and write
1209000
heap
page read and write
699000
heap
page read and write
D44000
unkown
page read and write
45B000
unkown
page readonly
6C16000
heap
page read and write
DA0000
heap
page read and write
BBF000
heap
page read and write
95DE000
stack
page read and write
5A0000
heap
page read and write
11F9000
heap
page read and write
1619CC60000
heap
page read and write
16B0000
heap
page read and write
ACE000
heap
page read and write
410000
heap
page read and write
13FE000
stack
page read and write
28EF000
stack
page read and write
DDE000
stack
page read and write
107000
heap
page read and write
366E000
stack
page read and write
5A0000
heap
page read and write
409000
unkown
page write copy
D2493FE000
unkown
page readonly
11A5000
heap
page read and write
3254000
heap
page read and write
10DE000
stack
page read and write
70AD000
heap
page read and write
B3A000
heap
page read and write
C28000
heap
page read and write
C8E000
stack
page read and write
697C000
heap
page read and write
108B000
heap
page read and write
47E000
stack
page read and write
B20000
heap
page read and write
32D000
stack
page read and write
11A5000
heap
page read and write
3273000
heap
page read and write
58B000
stack
page read and write
562000
heap
page read and write
28A3000
heap
page read and write
4F8000
stack
page read and write
7DF000
stack
page read and write
18E000
stack
page read and write
73A3A000
unkown
page read and write
28F2000
heap
page read and write
4C91000
unkown
page execute read
C10000
heap
page read and write
AF6000
heap
page read and write
D20000
heap
page read and write
9B000
stack
page read and write
303B000
stack
page read and write
D10000
heap
page read and write
373F000
stack
page read and write
19D000
stack
page read and write
6D5000
heap
page read and write
4B0000
heap
page read and write
D5E11C000
stack
page read and write
2BAC00238000
trusted library allocation
page read and write
209C2060000
heap
page read and write
E80000
heap
page read and write
440000
heap
page read and write
13D000
stack
page read and write
11D3000
heap
page read and write
2864000
heap
page read and write
1FAA7AEC000
heap
page read and write
AB0000
heap
page read and write
69AB000
heap
page read and write
113E000
stack
page read and write
130000
heap
page read and write
7DE000
stack
page read and write
7C0000
trusted library allocation
page read and write
166A000
heap
page read and write
2E77000
heap
page read and write
6C2E8000
unkown
page read and write
6C2E8000
unkown
page read and write
C90000
heap
page read and write
92F000
stack
page read and write
1200000
heap
page read and write
B2930FE000
stack
page read and write
B2C000
heap
page read and write
408E000
unkown
page write copy
12EA000
heap
page read and write
1F0000
heap
page read and write
431000
unkown
page readonly
1C0000
heap
page read and write
6E4C000
heap
page read and write
1430000
heap
page read and write
D20000
heap
page read and write
2BAC00230000
trusted library allocation
page read and write
E3D000
stack
page read and write
60D000
unkown
page read and write
AFA000
heap
page read and write
13B4000
heap
page read and write
B30000
heap
page read and write
999E000
stack
page read and write
AD0000
heap
page read and write
B6F000
heap
page read and write
3DBF000
heap
page read and write
29EF000
stack
page read and write
C5C000
stack
page read and write
1CC03C71000
heap
page read and write
FD1000
heap
page read and write
2920000
heap
page read and write
317A1FC000
stack
page read and write
7FFF415F6000
unkown
page readonly
7EE000
stack
page read and write
2A6F000
stack
page read and write
6E9000
heap
page read and write
169F000
stack
page read and write
B25000
unkown
page read and write
287C000
heap
page read and write
27EE000
stack
page read and write
6CBB000
heap
page read and write
628000
heap
page read and write
6A2000
heap
page read and write
25F1000
heap
page read and write
3C5E000
stack
page read and write
142627B0000
heap
page read and write
89D000
stack
page read and write
2E3B000
heap
page read and write
54E000
stack
page read and write
6F240020C000
trusted library allocation
page read and write
890000
heap
page read and write
25F1000
heap
page read and write
6DE000
heap
page read and write
11CF000
stack
page read and write
889000
heap
page read and write
D50000
heap
page read and write
1EEF5A4C000
heap
page read and write
3440000
heap
page read and write
3103000
heap
page read and write
1080000
heap
page read and write
13FE000
stack
page read and write
6C14000
heap
page read and write
2EC1000
heap
page read and write
855000
heap
page read and write
9C000
stack
page read and write
B32000
heap
page read and write
155F000
stack
page read and write
6971000
heap
page read and write
AED000
heap
page read and write
D4D000
unkown
page read and write
FEE000
stack
page read and write
114D000
stack
page read and write
54E000
stack
page read and write
660000
heap
page read and write
69C2000
heap
page read and write
C4F000
stack
page read and write
3211000
heap
page read and write
142627F5000
heap
page read and write
3294000
heap
page read and write
25F1000
heap
page read and write
11F3000
heap
page read and write
147E000
stack
page read and write
401000
unkown
page execute read
F4F000
unkown
page read and write
98F000
stack
page read and write
A4F000
stack
page read and write
1690000
heap
page read and write
1D0000
heap
page read and write
5E2000
heap
page read and write
6C2E8000
unkown
page read and write
AE7000
heap
page read and write
AB0000
heap
page read and write
2DCE000
stack
page read and write
25F1000
heap
page read and write
1250000
heap
page read and write
142627E5000
heap
page read and write
25F1000
heap
page read and write
36AD000
stack
page read and write
AF4000
heap
page read and write
343E000
stack
page read and write
450000
heap
page read and write
4097000
unkown
page readonly
400000
unkown
page readonly
9D5E000
stack
page read and write
CF5000
stack
page read and write
E00000
heap
page read and write
7FF7458F5000
unkown
page readonly
11A5000
heap
page read and write
22B0000
heap
page read and write
721D000
heap
page read and write
7FF7B1EB1000
unkown
page execute read
ADA000
heap
page read and write
3CA5000
heap
page read and write
600000
heap
page read and write
87B000
heap
page read and write
7FFF415B0000
unkown
page readonly
60D000
unkown
page read and write
209C1F60000
heap
page read and write
E41000
unkown
page execute read
3212000
heap
page read and write
6895000
heap
page read and write
9C000
stack
page read and write
727000
heap
page read and write
130000
heap
page read and write
D0E000
stack
page read and write
19D000
stack
page read and write
7FE000
stack
page read and write
88D000
unkown
page read and write
DD000
stack
page read and write
96DF000
stack
page read and write
C2F000
stack
page read and write
590000
heap
page read and write
2AAE000
stack
page read and write
1205000
heap
page read and write
25F1000
heap
page read and write
141E000
stack
page read and write
B5E000
stack
page read and write
120C000
heap
page read and write
4681000
heap
page read and write
B0E000
stack
page read and write
1BF000
stack
page read and write
1FAA94B4000
heap
page read and write
D2F000
stack
page read and write
90DE000
stack
page read and write
17E000
stack
page read and write
73A3D000
unkown
page readonly
D4F000
stack
page read and write
3250000
heap
page read and write
6A5D000
heap
page read and write
2E20000
heap
page read and write
F60000
heap
page read and write
428000
unkown
page execute and read and write
143D000
stack
page read and write
9C000
stack
page read and write
70CB000
heap
page read and write
43C000
stack
page read and write
407000
unkown
page readonly
50E000
stack
page read and write
2850000
heap
page read and write
21A54E3B000
heap
page read and write
769000
unkown
page read and write
37C436C000
stack
page read and write
2F14000
heap
page read and write
FE2000
heap
page read and write
1650000
heap
page read and write
1340000
heap
page read and write
439000
unkown
page read and write
571000
unkown
page readonly
71F000
stack
page read and write
3332000
heap
page read and write
7B0000
heap
page read and write
6CC32000
unkown
page readonly
36AE000
stack
page read and write
571000
unkown
page readonly
61E000
stack
page read and write
AE0000
heap
page read and write
65E000
stack
page read and write
28F2000
heap
page read and write
4497BFE000
stack
page read and write
8EC000
stack
page read and write
958F000
stack
page read and write
2EC1000
heap
page read and write
F46000
unkown
page read and write
70E000
stack
page read and write
3C87000
heap
page read and write
6C48F000
unkown
page read and write
ABF000
heap
page read and write
F0C000
unkown
page readonly
11A5000
heap
page read and write
3349000
heap
page read and write
550000
heap
page read and write
25F1000
heap
page read and write
60D000
unkown
page read and write
12DD000
heap
page read and write
510000
heap
page read and write
32DB000
heap
page read and write
199000
stack
page read and write
1D0000
heap
page read and write
A40000
heap
page read and write
654000
heap
page read and write
2909000
heap
page read and write
D24000
unkown
page write copy
2C5E000
stack
page read and write
60D000
unkown
page read and write
B13000
heap
page read and write
6C29000
heap
page read and write
1074000
heap
page read and write
6B5B000
heap
page read and write
B18000
heap
page read and write
27EE000
stack
page read and write
DC0000
heap
page read and write
440000
heap
page read and write
6C3C4000
unkown
page readonly
430000
heap
page read and write
2901000
heap
page read and write
1090000
heap
page read and write
2898000
heap
page read and write
6C221000
unkown
page execute read
287C000
heap
page read and write
3212000
heap
page read and write
7F5000
heap
page read and write
E32000
heap
page read and write
6E89000
heap
page read and write
11D9000
heap
page read and write
1010000
unkown
page execute and read and write
585000
heap
page read and write
F4F000
unkown
page read and write
866000
heap
page read and write
CD9000
heap
page read and write
5CE000
stack
page read and write
CDF000
stack
page read and write
D52000
heap
page read and write
AEF000
heap
page read and write
141E000
stack
page read and write
6C1000
unkown
page readonly
C58000
heap
page read and write
CCF000
stack
page read and write
3DB4000
heap
page read and write
EBD000
stack
page read and write
142644C7000
heap
page read and write
401000
unkown
page execute read
4E0000
heap
page read and write
1BF000
stack
page read and write
AFF000
heap
page read and write
A8F000
stack
page read and write
54F000
stack
page read and write
125F000
heap
page read and write
610000
unkown
page readonly
AE4000
heap
page read and write
AED000
heap
page read and write
75A000
heap
page read and write
209C3A80000
heap
page read and write
512000
heap
page read and write
2BAC00284000
trusted library allocation
page read and write
AE8000
heap
page read and write
3CB4000
heap
page read and write
6F7000
stack
page read and write
CAE000
stack
page read and write
6BF0000
heap
page read and write
6CC34000
unkown
page readonly
30B0000
heap
page read and write
BA0000
heap
page read and write
7FFF415D2000
unkown
page readonly
777000
unkown
page write copy
32DC000
heap
page read and write
AEB000
heap
page read and write
3269000
heap
page read and write
1211000
heap
page read and write
7D0000
heap
page read and write
2E32000
heap
page read and write
880000
heap
page read and write
7F5000
heap
page read and write
550000
heap
page read and write
91CE000
stack
page read and write
371E000
stack
page read and write
2BAC002D0000
trusted library allocation
page read and write
1C0000
heap
page read and write
4143000
heap
page read and write
66E000
heap
page read and write
D248EFE000
stack
page read and write
2BAC002CC000
trusted library allocation
page read and write
1FE000
stack
page read and write
A1E000
stack
page read and write
DBE000
stack
page read and write
21A54E1E000
heap
page read and write
71D000
heap
page read and write
6C3C0000
unkown
page read and write
130000
heap
page read and write
2847000
heap
page read and write
24B0000
heap
page read and write
ABB000
heap
page read and write
460000
heap
page read and write
AED000
heap
page read and write
17E000
stack
page read and write
ADF000
heap
page read and write
56E000
stack
page read and write
980F000
stack
page read and write
125E000
stack
page read and write
D52000
heap
page read and write
2836000
heap
page read and write
3650000
heap
page read and write
8EF000
stack
page read and write
5AE000
stack
page read and write
70B000
stack
page read and write
1CF000
stack
page read and write
6978000
heap
page read and write
C3F000
heap
page read and write
1227000
heap
page read and write
18E000
stack
page read and write
2730000
heap
page read and write
3212000
heap
page read and write
ADA000
heap
page read and write
47BE000
stack
page read and write
69E000
stack
page read and write
6B0000
heap
page read and write
AFE000
heap
page read and write
410000
heap
page read and write
12F0000
heap
page read and write
D67000
unkown
page read and write
4D1000
unkown
page execute read
6C2EE000
unkown
page write copy
74D000
heap
page read and write
284A000
heap
page read and write
3CC2000
heap
page read and write
B0C000
heap
page read and write
124E000
heap
page read and write
8B0000
heap
page read and write
429000
unkown
page read and write
10EF000
stack
page read and write
9EE000
stack
page read and write
2862000
heap
page read and write
1CC03C1E000
heap
page read and write
440000
heap
page read and write
7F5000
heap
page read and write
910000
heap
page read and write
11D6000
heap
page read and write
6F6F000
heap
page read and write
AD3000
heap
page read and write
2EC1000
heap
page read and write
2BAC00274000
trusted library allocation
page read and write
D4E000
stack
page read and write
ACC000
heap
page read and write
4D70000
heap
page read and write
1231000
heap
page read and write
1070000
heap
page read and write
985E000
stack
page read and write
3FAE000
heap
page read and write
45F000
unkown
page write copy
3100000
heap
page read and write
D8E000
stack
page read and write
7F5000
heap
page read and write
17C0000
heap
page read and write
EEC000
stack
page read and write
F1E000
stack
page read and write
B20000
heap
page read and write
68E000
heap
page read and write
313D000
stack
page read and write
2835000
heap
page read and write
12D6000
heap
page read and write
431000
unkown
page execute and read and write
50E000
stack
page read and write
4497AFF000
stack
page read and write
285D000
heap
page read and write
7FF654765000
unkown
page readonly
CB0000
heap
page read and write
2760000
heap
page read and write
40E0000
heap
page read and write
11A5000
heap
page read and write
3E7D000
heap
page read and write
1020000
heap
page read and write
ACB000
heap
page read and write
2BAC00210000
trusted library allocation
page read and write
800000
heap
page read and write
3AFF000
stack
page read and write
19D000
stack
page read and write
382F000
stack
page read and write
227E000
stack
page read and write
4031000
unkown
page execute read
B2933FE000
unkown
page readonly
42EA000
heap
page read and write
1DC000
stack
page read and write
2CF3000
heap
page read and write
2E3E000
heap
page read and write
2EC1000
heap
page read and write
1293000
heap
page read and write
2C80000
heap
page read and write
F46000
unkown
page read and write
B24000
unkown
page read and write
12D0000
heap
page read and write
17E000
stack
page read and write
7FFF415D0000
unkown
page read and write
1F0000
heap
page read and write
32C0000
heap
page read and write
603000
unkown
page readonly
25F1000
heap
page read and write
285D000
heap
page read and write
87D000
stack
page read and write
B0C000
unkown
page readonly
AB7000
heap
page read and write
2883000
heap
page read and write
970000
heap
page read and write
510000
heap
page read and write
11A5000
heap
page read and write
6CC7000
heap
page read and write
2EC1000
heap
page read and write
2A00000
heap
page read and write
2E66000
heap
page read and write
14BF000
stack
page read and write
EBF000
stack
page read and write
376F000
stack
page read and write
5D0000
heap
page read and write
1BF000
stack
page read and write
C80000
heap
page read and write
B35000
heap
page read and write
66A000
heap
page read and write
2BAC00201000
trusted library allocation
page read and write
35FF000
heap
page read and write
42B000
unkown
page execute and read and write
13C000
heap
page read and write
B25000
unkown
page read and write
D2499FE000
unkown
page readonly
1210000
heap
page read and write
8D2000
heap
page read and write
3ADE000
stack
page read and write
6AF000
unkown
page readonly
B24000
unkown
page read and write
180000
stack
page read and write
6F2A000
heap
page read and write
589000
heap
page read and write
428000
unkown
page execute and read and write
284D000
heap
page read and write
1223000
heap
page read and write
3246000
heap
page read and write
F4C000
unkown
page read and write
52B000
unkown
page readonly
971E000
stack
page read and write
32FC000
heap
page read and write
6C3C0000
unkown
page read and write
BE0000
heap
page read and write
2E3B000
heap
page read and write
142627E1000
heap
page read and write
25F1000
heap
page read and write
5A0000
heap
page read and write
14CE000
stack
page read and write
428000
unkown
page execute and read and write
3ED000
stack
page read and write
1210000
heap
page read and write
287F000
heap
page read and write
7FF000
stack
page read and write
AEA000
heap
page read and write
800000
heap
page read and write
13EB000
heap
page read and write
28C9000
heap
page read and write
B3D000
stack
page read and write
2E3C000
heap
page read and write
2BAC002B0000
trusted library allocation
page read and write
5B2000
heap
page read and write
2EC1000
heap
page read and write
700000
heap
page read and write
AC5000
heap
page read and write
83F000
heap
page read and write
174F000
stack
page read and write
133D000
heap
page read and write
2EC1000
heap
page read and write
1CC03C2A000
heap
page read and write
63F0000
trusted library allocation
page read and write
E4E000
stack
page read and write
15C000
heap
page read and write
B2939FE000
unkown
page readonly
8B1000
heap
page read and write
142627B2000
heap
page read and write
14CF000
stack
page read and write
3F00000
trusted library allocation
page read and write
1CC03BE0000
heap
page read and write
7FFF415E0000
unkown
page readonly
1072000
heap
page read and write
12CE000
stack
page read and write
480000
heap
page read and write
898000
heap
page read and write
77D000
unkown
page read and write
467E000
heap
page read and write
B27000
heap
page read and write
4EE000
stack
page read and write
ABB000
heap
page read and write
89C000
heap
page read and write
17E000
stack
page read and write
2650000
heap
page read and write
40DF000
stack
page read and write
2E3D000
heap
page read and write
7BF000
stack
page read and write
11A0000
heap
page read and write
3E79000
heap
page read and write
43F000
stack
page read and write
820000
heap
page read and write
94F000
stack
page read and write
2BAC00254000
trusted library allocation
page read and write
3F3F000
heap
page read and write
17EF000
stack
page read and write
ACC000
heap
page read and write
300F000
stack
page read and write
875000
unkown
page readonly
6C47000
heap
page read and write
88F000
unkown
page read and write
D52000
heap
page read and write
1FE000
stack
page read and write
1CC03F00000
heap
page read and write
9C000
stack
page read and write
3212000
heap
page read and write
100000
heap
page read and write
32B3000
heap
page read and write
60F000
unkown
page read and write
104E000
stack
page read and write
12BE000
stack
page read and write
691000
heap
page read and write
2300000
heap
page read and write
2EC1000
heap
page read and write
6F24002A8000
trusted library allocation
page read and write
930A000
stack
page read and write
47E000
stack
page read and write
443000
unkown
page read and write
6C05000
heap
page read and write
3DB1000
heap
page read and write
449770B000
stack
page read and write
15D000
heap
page read and write
550000
heap
page read and write
FA0000
heap
page read and write
AEF000
stack
page read and write
ADF000
heap
page read and write
19D000
stack
page read and write
1FAA7ADD000
heap
page read and write
6D8000
heap
page read and write
287C000
heap
page read and write
57E000
stack
page read and write
6F2400238000
trusted library allocation
page read and write
B12000
heap
page read and write
66E000
heap
page read and write
73A31000
unkown
page execute read
D51000
heap
page read and write
980000
heap
page read and write
2862000
heap
page read and write
60E000
stack
page read and write
17E000
stack
page read and write
6EE000
stack
page read and write
2CF0000
heap
page read and write
FF2000
heap
page read and write
6952000
heap
page read and write
6CFE000
heap
page read and write
91DD000
stack
page read and write
372E000
stack
page read and write
5C0000
heap
page read and write
C50000
heap
page read and write
C09000
heap
page read and write
40E5000
heap
page read and write
D5E000
stack
page read and write
3522000
heap
page read and write
42B000
unkown
page execute and read and write
54F000
stack
page read and write
21A54E5B000
heap
page read and write
2390000
heap
page read and write
F3E000
stack
page read and write
3D1E000
stack
page read and write
9B000
stack
page read and write
3245000
heap
page read and write
6C8A000
heap
page read and write
6C59000
heap
page read and write
3246000
heap
page read and write
39EC000
stack
page read and write
12C42940000
heap
page read and write
3CA5000
heap
page read and write
12C428D0000
heap
page read and write
DD8000
heap
page read and write
307C000
stack
page read and write
3D98000
heap
page read and write
1430000
heap
page read and write
50D000
stack
page read and write
2916000
heap
page read and write
9C000
stack
page read and write
1EEF59E0000
heap
page read and write
1200000
heap
page read and write
DB0000
heap
page read and write
669000
heap
page read and write
DD000
stack
page read and write
12D2000
heap
page read and write
9A0000
heap
page read and write
A3F000
heap
page read and write
3657000
heap
page read and write
DCE000
stack
page read and write
AF5000
heap
page read and write
323A000
heap
page read and write
58D000
stack
page read and write
8DE000
stack
page read and write
A34000
heap
page read and write
2EC1000
heap
page read and write
12F5000
heap
page read and write
25F1000
heap
page read and write
D5E000
stack
page read and write
58E000
stack
page read and write
6D4000
heap
page read and write
400000
unkown
page readonly
1178000
heap
page read and write
114E000
stack
page read and write
BDF000
stack
page read and write
AC0000
unkown
page readonly
43C000
unkown
page read and write
FBE000
stack
page read and write
291A000
heap
page read and write
A48000
heap
page read and write
150E000
stack
page read and write
12B4000
heap
page read and write
6D1D000
heap
page read and write
A30000
heap
page read and write
6C3BD000
unkown
page write copy
57E000
heap
page read and write
5DE000
stack
page read and write
6C146000
unkown
page read and write
ACC000
heap
page read and write
3C84000
heap
page read and write
13E8000
heap
page read and write
7FF654765000
unkown
page readonly
2862000
heap
page read and write
1FE000
stack
page read and write
3CC5000
heap
page read and write
15D000
heap
page read and write
25F1000
heap
page read and write
89F000
heap
page read and write
7F0000
heap
page read and write
DC000
stack
page read and write
7EF000
stack
page read and write
3212000
heap
page read and write
54F000
stack
page read and write
12ED000
heap
page read and write
B00000
heap
page read and write
A60000
heap
page read and write
864000
unkown
page readonly
7E2000
unkown
page readonly
AFA000
heap
page read and write
70A000
stack
page read and write
2882000
heap
page read and write
19E000
stack
page read and write
7FFF415E1000
unkown
page execute read
9E0000
heap
page read and write
950000
heap
page read and write
B45000
heap
page read and write
71B000
stack
page read and write
130E000
stack
page read and write
B59000
heap
page read and write
8DB000
stack
page read and write
670000
heap
page read and write
1CC03E00000
heap
page read and write
60D000
unkown
page read and write
11EF000
stack
page read and write
11A5000
heap
page read and write
3296000
heap
page read and write
25F1000
heap
page read and write
B4E000
stack
page read and write
7F5000
heap
page read and write
9D1C000
stack
page read and write
ACE000
heap
page read and write
3140000
heap
page read and write
510000
heap
page read and write
1CF000
stack
page read and write
A3D000
stack
page read and write
2830000
heap
page read and write
1480000
heap
page read and write
343F000
heap
page read and write
6D70000
heap
page read and write
66F000
stack
page read and write
7DE000
stack
page read and write
2901000
heap
page read and write
D51000
heap
page read and write
10F0000
heap
page read and write
AE7000
heap
page read and write
F20000
heap
page read and write
1249000
heap
page read and write
287B000
heap
page read and write
EC0000
heap
page read and write
DFD000
stack
page read and write
40B000
unkown
page write copy
112D000
stack
page read and write
1FF000
stack
page read and write
10AE000
stack
page read and write
1204000
heap
page read and write
25F1000
heap
page read and write
2EC1000
heap
page read and write
C5D000
stack
page read and write
6D10000
heap
page read and write
32E6000
heap
page read and write
70F000
heap
page read and write
775000
unkown
page write copy
F00000
heap
page read and write
64EC000
heap
page read and write
7FF6547BD000
unkown
page readonly
C8E000
stack
page read and write
47F000
stack
page read and write
60E000
stack
page read and write
AFF000
stack
page read and write
2894000
heap
page read and write
1221000
heap
page read and write
32DB000
heap
page read and write
338C000
heap
page read and write
6F2400201000
trusted library allocation
page read and write
3800000
heap
page read and write
421C000
stack
page read and write
287E000
heap
page read and write
F6B000
heap
page read and write
B25000
unkown
page read and write
B40000
heap
page read and write
F46000
unkown
page write copy
1FF000
stack
page read and write
6C3BB000
unkown
page read and write
4C90000
unkown
page readonly
ECF000
stack
page read and write
DE0000
heap
page read and write
6CE6000
heap
page read and write
E80000
heap
page read and write
B25000
unkown
page read and write
1398000
heap
page read and write
1140000
heap
page read and write
59E000
stack
page read and write
ABB000
heap
page read and write
8BC000
stack
page read and write
4108000
heap
page read and write
58E000
stack
page read and write
580000
heap
page read and write
12CE000
stack
page read and write
810000
heap
page read and write
898000
heap
page read and write
8A0000
heap
page read and write
6C3BF000
unkown
page read and write
1000000
heap
page read and write
89C000
heap
page read and write
1E0000
heap
page read and write
69D000
stack
page read and write
25F1000
heap
page read and write
11DE000
heap
page read and write
1D0000
heap
page read and write
428000
unkown
page execute and read and write
C56000
heap
page read and write
510000
heap
page read and write
AD1000
heap
page read and write
2F2F000
stack
page read and write
6AE000
stack
page read and write
287C000
heap
page read and write
6C09000
heap
page read and write
B0F000
heap
page read and write
18C000
stack
page read and write
711A000
heap
page read and write
1014000
unkown
page execute and read and write
19A000
stack
page read and write
754000
heap
page read and write
5B0000
heap
page read and write
47F000
stack
page read and write
400000
unkown
page readonly
6CD3000
heap
page read and write
B292FFE000
unkown
page readonly
11E0000
heap
page read and write
68C000
unkown
page write copy
101D000
unkown
page read and write
B4F000
stack
page read and write
13EB000
heap
page read and write
1205000
heap
page read and write
409000
unkown
page read and write
AE7000
heap
page read and write
115E000
stack
page read and write
7FE000
stack
page read and write
AB2000
heap
page read and write
24A0000
heap
page read and write
1228000
heap
page read and write
42E000
heap
page read and write
6C0C000
heap
page read and write
121F000
heap
page read and write
25F1000
heap
page read and write
6D2C000
heap
page read and write
1E0000
heap
page read and write
2783000
heap
page read and write
2EC1000
heap
page read and write
424000
unkown
page read and write
D90000
heap
page read and write
6C2000
heap
page read and write
EF3000
stack
page read and write
24D0000
heap
page read and write
385F000
stack
page read and write
86F000
heap
page read and write
19D000
stack
page read and write
129F000
stack
page read and write
2E3C000
heap
page read and write
28FD000
heap
page read and write
B2F000
stack
page read and write
510000
heap
page read and write
B10000
heap
page read and write
439000
unkown
page read and write
ABF000
heap
page read and write
287E000
heap
page read and write
8CE000
stack
page read and write
F4C000
unkown
page read and write
AE7000
heap
page read and write
E30000
heap
page read and write
83C000
stack
page read and write
1BB000
stack
page read and write
AED000
heap
page read and write
88D000
unkown
page write copy
440000
heap
page read and write
2E9F000
stack
page read and write
1106000
heap
page read and write
5F9000
heap
page read and write
1228000
heap
page read and write
3216000
heap
page read and write
6C481000
unkown
page execute read
742000
heap
page read and write
696E000
heap
page read and write
1000000
unkown
page readonly
540000
heap
page read and write
AB0000
heap
page read and write
510000
heap
page read and write
E1E000
stack
page read and write
B6E000
stack
page read and write
287B000
heap
page read and write
297F000
stack
page read and write
2BAC0024C000
trusted library allocation
page read and write
2EC1000
heap
page read and write
11DF000
stack
page read and write
2905000
heap
page read and write
620000
heap
page read and write
1FAA9640000
heap
page read and write
602000
heap
page read and write
32ED000
stack
page read and write
AF4000
heap
page read and write
11FD000
heap
page read and write
D1F000
stack
page read and write
3361000
heap
page read and write
11D3000
heap
page read and write
D52000
heap
page read and write
63B000
stack
page read and write
6515000
heap
page read and write
7DF000
stack
page read and write
3276000
heap
page read and write
890000
heap
page read and write
140000
heap
page read and write
6CC30000
unkown
page readonly
35FF000
stack
page read and write
66A000
stack
page read and write
199000
stack
page read and write
B24000
unkown
page write copy
81F000
stack
page read and write
150E000
stack
page read and write
D5B000
stack
page read and write
DCE000
stack
page read and write
4779000
heap
page read and write
6C146000
unkown
page read and write
1114000
heap
page read and write
107F000
stack
page read and write
518000
heap
page read and write
8D0000
heap
page read and write
DC000
stack
page read and write
ABB000
heap
page read and write
DE2000
heap
page read and write
685000
unkown
page write copy
60D000
unkown
page read and write
93E000
stack
page read and write
689000
unkown
page write copy
B2935FE000
unkown
page readonly
1F0000
heap
page read and write
972000
heap
page read and write
12B4000
heap
page read and write
6EC000
stack
page read and write
DAD000
stack
page read and write
6EDD000
heap
page read and write
A20000
heap
page read and write
83F000
stack
page read and write
283A000
heap
page read and write
6F24002C0000
trusted library allocation
page read and write
620000
heap
page read and write
11A2000
heap
page read and write
460000
heap
page read and write
150000
heap
page read and write
4997000
heap
page read and write
58E000
heap
page read and write
727000
heap
page read and write
1FE000
stack
page read and write
292D000
heap
page read and write
7F5000
heap
page read and write
336A000
heap
page read and write
64E000
stack
page read and write
540000
heap
page read and write
860000
heap
page read and write
550000
heap
page read and write
3BB000
stack
page read and write
1230000
heap
page read and write
AFF000
stack
page read and write
3652000
heap
page read and write
590000
heap
page read and write
124E000
heap
page read and write
2EC1000
heap
page read and write
11A5000
heap
page read and write
56E000
unkown
page read and write
CCF000
stack
page read and write
7FF7B1EC0000
unkown
page write copy
355F000
stack
page read and write
66F000
stack
page read and write
28F2000
heap
page read and write
3DB000
stack
page read and write
D56000
heap
page read and write
A30000
heap
page read and write
50E000
stack
page read and write
6C384000
unkown
page readonly
D52000
heap
page read and write
39CF000
stack
page read and write
AEA000
heap
page read and write
47E000
stack
page read and write
D96000
heap
page read and write
7FF654711000
unkown
page execute read
107D000
stack
page read and write
AB7000
heap
page read and write
FE0000
heap
page read and write
11F0000
heap
page read and write
428000
unkown
page execute and read and write
580000
heap
page read and write
9D5000
stack
page read and write
DC000
stack
page read and write
A38000
heap
page read and write
7FF745909000
unkown
page write copy
43E000
unkown
page read and write
79F000
stack
page read and write
12E3000
heap
page read and write
7FFF415F2000
unkown
page read and write
421000
unkown
page read and write
5B9000
heap
page read and write
123E000
heap
page read and write
96A000
heap
page read and write
89B000
heap
page read and write
7F5000
heap
page read and write
287A000
heap
page read and write
7EE000
stack
page read and write
1FD000
stack
page read and write
40D6000
heap
page read and write
DD000
stack
page read and write
33F0000
heap
page read and write
89E000
heap
page read and write
31D0000
heap
page read and write
CCE000
stack
page read and write
6DF000
stack
page read and write
140E000
stack
page read and write
13C4000
heap
page read and write
875000
unkown
page readonly
DCD000
stack
page read and write
5E0000
heap
page read and write
145E000
stack
page read and write
170000
heap
page read and write
4C70000
heap
page read and write
102E000
stack
page read and write
42C000
stack
page read and write
12CA000
heap
page read and write
3305000
heap
page read and write
13B0000
heap
page read and write
F46000
unkown
page read and write
366F000
stack
page read and write
356E000
stack
page read and write
43C000
unkown
page execute and read and write
25F1000
heap
page read and write
130000
heap
page read and write
13F4000
heap
page read and write
11DD000
heap
page read and write
144F000
stack
page read and write
A50000
heap
page read and write
3670000
remote allocation
page read and write
2EC1000
heap
page read and write
AF7000
heap
page read and write
710000
heap
page read and write
2866000
heap
page read and write
99F000
stack
page read and write
3C84000
heap
page read and write
11D6000
heap
page read and write
AA0000
heap
page read and write
772000
heap
page read and write
2915000
heap
page read and write
2610000
heap
page read and write
860000
heap
page read and write
84F000
stack
page read and write
54E000
stack
page read and write
22C0000
heap
page read and write
291A000
heap
page read and write
2750000
heap
page read and write
750000
heap
page read and write
AD1000
heap
page read and write
5BE000
stack
page read and write
6F24002B0000
trusted library allocation
page read and write
7DE000
stack
page read and write
29F6000
heap
page read and write
1223000
heap
page read and write
64D0000
heap
page read and write
6CEC000
heap
page read and write
62E000
stack
page read and write
D5D000
stack
page read and write
6D5000
heap
page read and write
821000
unkown
page execute read
DE0000
heap
page read and write
51F000
stack
page read and write
11CE000
stack
page read and write
1190000
heap
page read and write
B2936FE000
stack
page read and write
60D000
unkown
page read and write
50E000
stack
page read and write
25F1000
heap
page read and write
24D0000
heap
page read and write
58E000
stack
page read and write
122A000
heap
page read and write
708000
heap
page read and write
ABF000
heap
page read and write
654000
heap
page read and write
400000
unkown
page readonly
590000
heap
page read and write
AFB000
heap
page read and write
1619CB30000
heap
page read and write
3411000
unkown
page readonly
13B7000
heap
page read and write
98F000
stack
page read and write
875000
unkown
page readonly
EC1000
heap
page read and write
2869000
heap
page read and write
4C0000
heap
page read and write
1830000
heap
page read and write
79E000
stack
page read and write
2AB3000
heap
page read and write
10000000
unkown
page readonly
3CBE000
heap
page read and write
EB5000
heap
page read and write
2E7B000
heap
page read and write
6BF3000
heap
page read and write
887000
heap
page read and write
25F1000
heap
page read and write
11A6000
heap
page read and write
B2E000
stack
page read and write
21A54D90000
heap
page readonly
651C000
heap
page read and write
5D0000
heap
page read and write
3286000
heap
page read and write
B8E000
stack
page read and write
AF0000
heap
page read and write
13D8000
heap
page read and write
810000
heap
page read and write
739000
heap
page read and write
25F1000
heap
page read and write
1293000
heap
page read and write
AA0000
heap
page read and write
798000
heap
page read and write
409000
unkown
page read and write
2EC1000
heap
page read and write
37AF000
stack
page read and write
3654000
heap
page read and write
2E5F000
stack
page read and write
324D000
heap
page read and write
2B22000
heap
page read and write
2E3B000
heap
page read and write
335B000
heap
page read and write
6BE000
stack
page read and write
2848000
heap
page read and write
2901000
heap
page read and write
9E0000
heap
page read and write
B06000
heap
page read and write
6F23000
heap
page read and write
5BE000
stack
page read and write
323D000
heap
page read and write
2863000
heap
page read and write
4980000
heap
page read and write
12CD000
heap
page read and write
2EC1000
heap
page read and write
17A0000
heap
page read and write
65F000
stack
page read and write
21A54E45000
heap
page read and write
469000
heap
page read and write
4B40000
heap
page read and write
E0E000
stack
page read and write
1085000
heap
page read and write
AF3000
heap
page read and write
AE7000
heap
page read and write
477000
heap
page read and write
26B0000
heap
page read and write
A20000
heap
page read and write
6C3BB000
unkown
page read and write
284D000
heap
page read and write
620000
heap
page read and write
116D000
heap
page read and write
292E000
heap
page read and write
419000
heap
page read and write
DD000
stack
page read and write
37EF000
stack
page read and write
287C000
heap
page read and write
68C000
unkown
page read and write
142627E6000
heap
page read and write
60D000
unkown
page read and write
4090000
unkown
page read and write
52B000
unkown
page readonly
980000
heap
page read and write
2860000
heap
page read and write
2FEE000
stack
page read and write
FEE000
stack
page read and write
32AD000
heap
page read and write
6E6000
heap
page read and write
7F5000
heap
page read and write
550000
heap
page read and write
5E1000
unkown
page execute read
621000
unkown
page readonly
2EC1000
heap
page read and write
9C000
stack
page read and write
B0C000
unkown
page readonly
D5E000
stack
page read and write
13F1000
heap
page read and write
9C000
stack
page read and write
1540000
heap
page read and write
2FD000
stack
page read and write
7AA000
heap
page read and write
F7F000
stack
page read and write
DD000
stack
page read and write
D22000
heap
page read and write
3B00000
heap
page read and write
3179FFE000
stack
page read and write
302E000
stack
page read and write
6C48F000
unkown
page read and write
68E000
stack
page read and write
A3E000
stack
page read and write
43E000
stack
page read and write
C2E000
stack
page read and write
D4F000
stack
page read and write
6C3C2000
unkown
page read and write
66A000
heap
page read and write
25F1000
heap
page read and write
684D000
heap
page read and write
26B4000
heap
page read and write
11DA000
heap
page read and write
6F89000
heap
page read and write
528000
heap
page read and write
3560000
heap
page read and write
1490000
heap
page read and write
3150000
heap
page read and write
2F0B000
heap
page read and write
478000
heap
page read and write
2901000
heap
page read and write
25F1000
heap
page read and write
708000
heap
page read and write
129F000
heap
page read and write
6F0000
heap
page read and write
48AB000
unkown
page read and write
4114000
heap
page read and write
25F1000
heap
page read and write
126E000
stack
page read and write
25F1000
heap
page read and write
EFB000
stack
page read and write
4079000
unkown
page readonly
716B000
heap
page read and write
325D000
stack
page read and write
AD2000
heap
page read and write
D49000
unkown
page read and write
1204000
heap
page read and write
935E000
stack
page read and write
AED000
heap
page read and write
88E000
stack
page read and write
7FF654789000
unkown
page write copy
19D000
stack
page read and write
352E000
stack
page read and write
120E000
heap
page read and write
428000
unkown
page execute and read and write
2EC1000
heap
page read and write
2EC1000
heap
page read and write
4FB000
stack
page read and write
AB7000
heap
page read and write
27E0000
heap
page read and write
1E0000
heap
page read and write
1000A000
unkown
page read and write
2A2C000
stack
page read and write
A9F000
heap
page read and write
2838000
heap
page read and write
AC5000
heap
page read and write
6EFD000
heap
page read and write
ABE000
stack
page read and write
13EB000
heap
page read and write
6555000
heap
page read and write
2901000
heap
page read and write
E0E000
stack
page read and write
6B2B000
heap
page read and write
6F2400280000
trusted library allocation
page read and write
33B0000
unkown
page readonly
1FE000
stack
page read and write
49A0000
trusted library allocation
page read and write
470000
heap
page read and write
47E000
stack
page read and write
3CC000
stack
page read and write
995F000
stack
page read and write
A33000
heap
page read and write
760000
heap
page read and write
12F0000
heap
page read and write
19D000
stack
page read and write
FB0000
heap
page read and write
654000
heap
page read and write
2EC1000
heap
page read and write
12D8000
heap
page read and write
6D8000
heap
page read and write
6EB2000
heap
page read and write
AB0000
heap
page read and write
14262720000
heap
page read and write
B20000
heap
page read and write
11F3000
heap
page read and write
898000
heap
page read and write
2871000
heap
page read and write
ACC000
heap
page read and write
680000
heap
page read and write
107A000
heap
page read and write
522000
heap
page read and write
70D0000
heap
page read and write
A35000
heap
page read and write
284D000
heap
page read and write
88F000
unkown
page read and write
D7E000
heap
page read and write
3C56000
heap
page read and write
32D5000
heap
page read and write
A39000
heap
page read and write
11A5000
heap
page read and write
3212000
heap
page read and write
6D0000
heap
page read and write
12A0000
heap
page read and write
6C146000
unkown
page read and write
115C000
stack
page read and write
3EAF000
stack
page read and write
F6E000
heap
page read and write
2894000
heap
page read and write
291A000
heap
page read and write
580000
heap
page read and write
2F10000
heap
page read and write
510000
heap
page read and write
65E000
stack
page read and write
14BE000
stack
page read and write
A73000
heap
page read and write
F95000
heap
page read and write
ADF000
heap
page read and write
3570000
heap
page read and write
A66000
heap
page read and write
E10000
heap
page read and write
3276000
heap
page read and write
740000
heap
page read and write
7AF000
stack
page read and write
700000
heap
page read and write
1150000
heap
page read and write
33DE000
stack
page read and write
DD000
stack
page read and write
25F1000
heap
page read and write
D6E000
stack
page read and write
3212000
heap
page read and write
1620000
heap
page read and write
1BF000
stack
page read and write
8AE000
heap
page read and write
40C0000
heap
page read and write
21D0000
heap
page read and write
3201000
heap
page read and write
A3A000
heap
page read and write
590000
heap
page read and write
70C000
heap
page read and write
3332000
heap
page read and write
700000
heap
page read and write
6EA000
unkown
page readonly
B12000
heap
page read and write
D6C000
unkown
page read and write
B2934FD000
stack
page read and write
1C0000
heap
page read and write
A1F000
stack
page read and write
435000
unkown
page read and write
1110000
heap
page read and write
32BD000
heap
page read and write
287A000
heap
page read and write
2847000
heap
page read and write
B0D000
heap
page read and write
12D4000
heap
page read and write
48B3000
unkown
page write copy
7FF7458EB000
unkown
page readonly
33B1000
unkown
page execute read
1002000
heap
page read and write
6BF0000
heap
page read and write
209C2040000
heap
page read and write
D52000
heap
page read and write
44C000
unkown
page read and write
25F8000
heap
page read and write
32E6000
heap
page read and write
2887000
heap
page read and write
12AF000
heap
page read and write
410000
heap
page read and write
548000
heap
page read and write
1070000
heap
page read and write
2210000
heap
page read and write
1160000
trusted library allocation
page read and write
AEA000
heap
page read and write
7A2000
unkown
page read and write
3200000
heap
page read and write
76E000
stack
page read and write
8EF000
stack
page read and write
1C2000
heap
page read and write
222E000
stack
page read and write
C1F000
stack
page read and write
4CAC000
unkown
page readonly
EB0000
heap
page read and write
D20000
heap
page read and write
520000
heap
page read and write
19D000
stack
page read and write
27AC000
stack
page read and write
2390000
heap
page read and write
287F000
heap
page read and write
DF8000
unkown
page readonly
13F3000
heap
page read and write
6C3C2000
unkown
page read and write
A1E000
stack
page read and write
B0D000
stack
page read and write
A80000
heap
page read and write
AF3000
heap
page read and write
6EF000
stack
page read and write
740000
heap
page read and write
BEE000
stack
page read and write
9C000
stack
page read and write
10C0000
heap
page read and write
BEE000
stack
page read and write
FBE000
stack
page read and write
C80000
heap
page read and write
1200000
heap
page read and write
411B000
stack
page read and write
B0D000
heap
page read and write
292F000
stack
page read and write
540000
heap
page read and write
2862000
heap
page read and write
AC9000
heap
page read and write
876000
heap
page read and write
12C8000
heap
page read and write
58E000
stack
page read and write
826000
unkown
page readonly
11C0000
heap
page read and write
3273000
heap
page read and write
620000
heap
page read and write
438F000
heap
page read and write
2EC1000
heap
page read and write
286F000
heap
page read and write
68D0000
heap
page read and write
DBA000
unkown
page readonly
9C000
stack
page read and write
428000
unkown
page execute and read and write
6C0E0000
unkown
page readonly
48B5000
unkown
page read and write
12B7000
heap
page read and write
107A000
heap
page read and write
362F000
stack
page read and write
2A6D000
stack
page read and write
366E000
stack
page read and write
50E000
stack
page read and write
AEA000
heap
page read and write
520000
heap
page read and write
697F000
heap
page read and write
440000
heap
page read and write
2847000
heap
page read and write
66E000
stack
page read and write
1490000
heap
page read and write
AF3000
heap
page read and write
1050000
heap
page read and write
A2E000
stack
page read and write
333E000
heap
page read and write
552000
heap
page read and write
11A8000
heap
page read and write
88B000
heap
page read and write
1570000
heap
page read and write
D61000
heap
page read and write
898000
heap
page read and write
783000
unkown
page read and write
6A0A000
heap
page read and write
3285000
heap
page read and write
6532000
heap
page read and write
1F0000
heap
page read and write
6C53000
heap
page read and write
9C1E000
stack
page read and write
9AE000
stack
page read and write
3282000
heap
page read and write
1120000
heap
page read and write
11A5000
heap
page read and write
AED000
heap
page read and write
2890000
heap
page read and write
F48000
unkown
page read and write
6D04000
heap
page read and write
ACE000
heap
page read and write
6B9000
heap
page read and write
B09000
heap
page read and write
940000
heap
page read and write
6AA000
heap
page read and write
3255000
heap
page read and write
A48000
heap
page read and write
32D2000
heap
page read and write
670000
heap
page read and write
3300000
heap
page read and write
13EB000
heap
page read and write
B27000
heap
page read and write
439000
unkown
page execute and read and write
6866000
heap
page read and write
1C0000
heap
page read and write
AF6000
heap
page read and write
2864000
heap
page read and write
B0E000
stack
page read and write
9C000
stack
page read and write
B0B000
heap
page read and write
640000
heap
page read and write
3DB7000
heap
page read and write
6EF000
stack
page read and write
A5F000
stack
page read and write
431000
unkown
page execute and read and write
17D0000
heap
page read and write
E50000
heap
page read and write
92E000
stack
page read and write
51DE000
stack
page read and write
1660000
heap
page read and write
AF6000
heap
page read and write
11A0000
heap
page read and write
There are 3617 hidden memdumps, click here to show them.

DOM / HTML

URL
Malicious
https://support.google.com/picasa/answer/6383491?hl=en&visit_id=638634609885905976-1351747924&rd=3