IOC Report
EtEskr.exe

loading gif

Files

File Path
Type
Category
Malicious
EtEskr.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\netstandard.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Users\user\AppData\Roaming\EtEskrivare.exe
PE32+ executable (console) x86-64, for MS Windows
dropped
malicious
C:\Config.Msi\475f6e.rbs
data
dropped
C:\Config.Msi\475f72.rbs
data
dropped
C:\Config.Msi\475f76.rbs
data
dropped
C:\Program Files\dotnet\LICENSE.txt
Unicode text, UTF-8 text, with very long lines (514), with CRLF line terminators
dropped
C:\Program Files\dotnet\ThirdPartyNotices.txt
Unicode text, UTF-8 text, with very long lines (755), with CRLF line terminators
dropped
C:\Program Files\dotnet\dotnet.exe
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\host\fxr\8.0.8\hostfxr.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\.version
ASCII text, with CRLF line terminators
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\Microsoft.CSharp.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\Microsoft.DiaSymReader.Native.amd64.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\Microsoft.NETCore.App.deps.json
JSON data
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\Microsoft.NETCore.App.runtimeconfig.json
JSON data
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\Microsoft.VisualBasic.Core.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\Microsoft.VisualBasic.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\Microsoft.Win32.Primitives.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\Microsoft.Win32.Registry.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.AppContext.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Buffers.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Collections.Concurrent.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Collections.Immutable.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Collections.NonGeneric.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Collections.Specialized.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Collections.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.ComponentModel.Annotations.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.ComponentModel.DataAnnotations.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.ComponentModel.EventBasedAsync.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.ComponentModel.Primitives.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.ComponentModel.TypeConverter.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.ComponentModel.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Configuration.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Console.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Core.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Data.Common.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Data.DataSetExtensions.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Data.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Diagnostics.Contracts.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Diagnostics.Debug.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Diagnostics.DiagnosticSource.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Diagnostics.FileVersionInfo.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Diagnostics.Process.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Diagnostics.StackTrace.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Diagnostics.TextWriterTraceListener.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Diagnostics.Tools.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Diagnostics.TraceSource.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Diagnostics.Tracing.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Drawing.Primitives.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Drawing.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Dynamic.Runtime.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Formats.Asn1.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Formats.Tar.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Globalization.Calendars.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Globalization.Extensions.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Globalization.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.Compression.Brotli.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.Compression.FileSystem.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.Compression.Native.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.Compression.ZipFile.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.Compression.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.FileSystem.AccessControl.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.FileSystem.DriveInfo.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.FileSystem.Primitives.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.FileSystem.Watcher.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.FileSystem.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.IsolatedStorage.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.MemoryMappedFiles.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.Pipes.AccessControl.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.Pipes.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.UnmanagedMemoryStream.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.IO.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Linq.Expressions.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Linq.Parallel.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Linq.Queryable.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Linq.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Memory.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.Http.Json.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.Http.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.HttpListener.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.Mail.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.NameResolution.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.NetworkInformation.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.Ping.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.Primitives.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.Quic.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.Requests.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.Security.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.ServicePoint.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.Sockets.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.WebClient.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.WebHeaderCollection.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.WebProxy.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.WebSockets.Client.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Net.WebSockets.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Numerics.Vectors.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Numerics.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.ObjectModel.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Private.CoreLib.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Private.DataContractSerialization.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Private.Uri.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Private.Xml.Linq.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Private.Xml.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Reflection.DispatchProxy.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Reflection.Emit.ILGeneration.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Reflection.Emit.Lightweight.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Reflection.Emit.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Reflection.Extensions.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Reflection.Metadata.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Reflection.Primitives.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Reflection.TypeExtensions.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Reflection.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Resources.Reader.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Resources.ResourceManager.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Resources.Writer.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.CompilerServices.Unsafe.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.CompilerServices.VisualC.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.Extensions.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.Handles.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.InteropServices.JavaScript.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.InteropServices.RuntimeInformation.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.InteropServices.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.Intrinsics.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.Loader.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.Numerics.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.Serialization.Formatters.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.Serialization.Json.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.Serialization.Primitives.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.Serialization.Xml.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.Serialization.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Runtime.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.AccessControl.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.Claims.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.Cryptography.Algorithms.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.Cryptography.Cng.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.Cryptography.Csp.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.Cryptography.Encoding.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.Cryptography.OpenSsl.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.Cryptography.Primitives.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.Cryptography.X509Certificates.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.Cryptography.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.Principal.Windows.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.Principal.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.SecureString.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Security.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.ServiceModel.Web.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.ServiceProcess.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Text.Encoding.CodePages.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Text.Encoding.Extensions.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Text.Encoding.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Text.Encodings.Web.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Text.Json.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Text.RegularExpressions.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Threading.Channels.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Threading.Overlapped.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Threading.Tasks.Dataflow.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Threading.Tasks.Extensions.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Threading.Tasks.Parallel.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Threading.Tasks.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Threading.Thread.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Threading.ThreadPool.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Threading.Timer.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Threading.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Transactions.Local.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Transactions.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.ValueTuple.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Web.HttpUtility.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Web.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Windows.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Xml.Linq.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Xml.ReaderWriter.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Xml.Serialization.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Xml.XDocument.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Xml.XPath.XDocument.dll
PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Xml.XPath.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Xml.XmlDocument.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Xml.XmlSerializer.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\System.Xml.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\WindowsBase.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\clretwrc.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\clrgc.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\clrjit.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\coreclr.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\createdump.exe
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\hostpolicy.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\mscordaccore.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\mscordaccore_amd64_amd64_8.0.824.36612.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\mscordbi.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\mscorlib.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\mscorrc.dll
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\msquic.dll
PE32+ executable (DLL) (console) x86-64, for MS Windows
dropped
C:\Program Files\dotnet\swidtag\Microsoft .NET Runtime - 8.0.8 (x64).swidtag
XML 1.0 document, Unicode text, UTF-8 (with BOM) text
dropped
C:\ProgramData\Package Cache\.unverified\dotnet_host_8.0.8_win_x64.msi (copy)
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Host - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Host - 8.0.8 (x64)., Template: x64;1033, Revision Number: {364B6B15-82BE-426F-A13C-DD7A2B6B2EA4}, Create Time/Date: Tue Jul 16 22:41:10 2024, Last Saved Time/Date: Tue Jul 16 22:41:10 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\ProgramData\Package Cache\.unverified\dotnet_hostfxr_8.0.8_win_x64.msi (copy)
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Host FX Resolver - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Host FX Resolver - 8.0.8 (x64)., Template: x64;1033, Revision Number: {BB639B51-1725-47F5-9229-90393A63E483}, Create Time/Date: Tue Jul 16 22:42:00 2024, Last Saved Time/Date: Tue Jul 16 22:42:00 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\ProgramData\Package Cache\.unverified\dotnet_runtime_8.0.8_win_x64.msi (copy)
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Runtime - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Runtime - 8.0.8 (x64)., Template: x64;1033, Revision Number: {6AF517CA-B141-429F-9C4F-3B284175B717}, Create Time/Date: Tue Jul 16 22:42:12 2024, Last Saved Time/Date: Tue Jul 16 22:42:12 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\ProgramData\Package Cache\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}v64.32.18380\dotnet-host-8.0.8-win-x64.msi (copy)
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Host - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Host - 8.0.8 (x64)., Template: x64;1033, Revision Number: {364B6B15-82BE-426F-A13C-DD7A2B6B2EA4}, Create Time/Date: Tue Jul 16 22:41:10 2024, Last Saved Time/Date: Tue Jul 16 22:41:10 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\ProgramData\Package Cache\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}v64.32.18380\dotnet-hostfxr-8.0.8-win-x64.msi (copy)
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Host FX Resolver - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Host FX Resolver - 8.0.8 (x64)., Template: x64;1033, Revision Number: {BB639B51-1725-47F5-9229-90393A63E483}, Create Time/Date: Tue Jul 16 22:42:00 2024, Last Saved Time/Date: Tue Jul 16 22:42:00 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\ProgramData\Package Cache\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}v64.32.18380\dotnet-runtime-8.0.8-win-x64.msi (copy)
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Runtime - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Runtime - 8.0.8 (x64)., Template: x64;1033, Revision Number: {6AF517CA-B141-429F-9C4F-3B284175B717}, Create Time/Date: Tue Jul 16 22:42:12 2024, Last Saved Time/Date: Tue Jul 16 22:42:12 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\ProgramData\Package Cache\{d42cea76-6b02-403c-8fa9-b35c717db802}\dotnet-runtime-8.0.8-win-x64.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\ProgramData\Package Cache\{d42cea76-6b02-403c-8fa9-b35c717db802}\state.rsm
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
data
dropped
C:\Users\user\AppData\Local\Temp\4C80.tmp\4C81.tmp\4C82.bat
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\Microsoft_.NET_Runtime_-_8.0.8_(x64)_20241003092550.log
ASCII text, with very long lines (342), with CRLF line terminators
modified
C:\Users\user\AppData\Local\Temp\Microsoft_.NET_Runtime_-_8.0.8_(x64)_20241003092550_000_dotnet_runtime_8.0.8_win_x64.msi.log
Unicode text, UTF-16, little-endian text, with very long lines (319), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\Microsoft_.NET_Runtime_-_8.0.8_(x64)_20241003092550_001_dotnet_hostfxr_8.0.8_win_x64.msi.log
Unicode text, UTF-16, little-endian text, with very long lines (399), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\Microsoft_.NET_Runtime_-_8.0.8_(x64)_20241003092550_002_dotnet_host_8.0.8_win_x64.msi.log
Unicode text, UTF-16, little-endian text, with very long lines (384), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_coooafxz.1l5.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jg1g3kv0.kvx.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nujrht2y.bw0.psm1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ttyr1gve.ls5.ps1
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1028\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1029\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1031\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1033\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1036\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1040\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1041\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1042\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1045\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (323), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1046\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1049\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\1055\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\2052\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\3082\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\BootstrapperApplicationData.xml
XML 1.0 document, Unicode text, UTF-16, little-endian text, with very long lines (564), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\bg.png
PNG image data, 620 x 418, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\eula.rtf
Rich Text Format data, version 1, ANSI, code page 1252, default middle east language ID 1025
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\thm.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\{06E7DC8A-B849-4DE7-BE70-6356A189BCCF}\.ba\wixstdba.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\EtEskrivare.deps.json
JSON data
dropped
C:\Users\user\AppData\Roaming\EtEskrivare.dll
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Users\user\AppData\Roaming\EtEskrivare.pdb
Microsoft Roslyn C# debugging symbols version 1.0
dropped
C:\Users\user\AppData\Roaming\EtEskrivare.runtimeconfig.json
JSON data
dropped
C:\Users\user\AppData\Roaming\dotnet-runtime-8.0.8-win-x64.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\475f6c.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Runtime - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Runtime - 8.0.8 (x64)., Template: x64;1033, Revision Number: {6AF517CA-B141-429F-9C4F-3B284175B717}, Create Time/Date: Tue Jul 16 22:42:12 2024, Last Saved Time/Date: Tue Jul 16 22:42:12 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\Windows\Installer\475f6f.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Runtime - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Runtime - 8.0.8 (x64)., Template: x64;1033, Revision Number: {6AF517CA-B141-429F-9C4F-3B284175B717}, Create Time/Date: Tue Jul 16 22:42:12 2024, Last Saved Time/Date: Tue Jul 16 22:42:12 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\Windows\Installer\475f70.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Host FX Resolver - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Host FX Resolver - 8.0.8 (x64)., Template: x64;1033, Revision Number: {BB639B51-1725-47F5-9229-90393A63E483}, Create Time/Date: Tue Jul 16 22:42:00 2024, Last Saved Time/Date: Tue Jul 16 22:42:00 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\Windows\Installer\475f73.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Host FX Resolver - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Host FX Resolver - 8.0.8 (x64)., Template: x64;1033, Revision Number: {BB639B51-1725-47F5-9229-90393A63E483}, Create Time/Date: Tue Jul 16 22:42:00 2024, Last Saved Time/Date: Tue Jul 16 22:42:00 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\Windows\Installer\475f74.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Host - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Host - 8.0.8 (x64)., Template: x64;1033, Revision Number: {364B6B15-82BE-426F-A13C-DD7A2B6B2EA4}, Create Time/Date: Tue Jul 16 22:41:10 2024, Last Saved Time/Date: Tue Jul 16 22:41:10 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\Windows\Installer\475f77.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Host - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Host - 8.0.8 (x64)., Template: x64;1033, Revision Number: {364B6B15-82BE-426F-A13C-DD7A2B6B2EA4}, Create Time/Date: Tue Jul 16 22:41:10 2024, Last Saved Time/Date: Tue Jul 16 22:41:10 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\Windows\Installer\MSI642F.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI65A7.tmp
data
dropped
C:\Windows\Installer\MSI814E.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI87B7.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI8864.tmp
data
dropped
C:\Windows\Installer\MSI8902.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI8B45.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Installer\MSI8C11.tmp
data
dropped
C:\Windows\Installer\MSI8E25.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
modified
C:\Windows\Installer\SourceHash{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Installer\SourceHash{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Installer\SourceHash{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Installer\inprogressinstallinfo.ipi
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{C6D76B1E-88AD-4EAE-8BC3-DDAF315F7917}\.cr\dotnet-runtime-8.0.8-win-x64.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1028\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1029\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1031\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1033\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1036\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1040\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1041\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1042\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1045\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (323), with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1046\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1049\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\1055\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\2052\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\3082\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\BootstrapperApplicationData.xml
XML 1.0 document, Unicode text, UTF-16, little-endian text, with very long lines (564), with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\bg.png
PNG image data, 620 x 418, 8-bit/color RGBA, non-interlaced
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\eula.rtf
Rich Text Format data, version 1, ANSI, code page 1252, default middle east language ID 1025
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\thm.wxl
XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\thm.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.ba\wixstdba.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.be\dotnet-runtime-8.0.8-win-x64.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\dotnet_host_8.0.8_win_x64.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Host - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Host - 8.0.8 (x64)., Template: x64;1033, Revision Number: {364B6B15-82BE-426F-A13C-DD7A2B6B2EA4}, Create Time/Date: Tue Jul 16 22:41:10 2024, Last Saved Time/Date: Tue Jul 16 22:41:10 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\dotnet_hostfxr_8.0.8_win_x64.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Host FX Resolver - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Host FX Resolver - 8.0.8 (x64)., Template: x64;1033, Revision Number: {BB639B51-1725-47F5-9229-90393A63E483}, Create Time/Date: Tue Jul 16 22:42:00 2024, Last Saved Time/Date: Tue Jul 16 22:42:00 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\dotnet_runtime_8.0.8_win_x64.msi
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Microsoft .NET Runtime - 8.0.8 (x64), Author: Microsoft Corporation, Keywords: Installer, Comments: This installer database contains the logic and data required to install Microsoft .NET Runtime - 8.0.8 (x64)., Template: x64;1033, Revision Number: {6AF517CA-B141-429F-9C4F-3B284175B717}, Create Time/Date: Tue Jul 16 22:42:12 2024, Last Saved Time/Date: Tue Jul 16 22:42:12 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
dropped
C:\Windows\Temp\~DF0B16E14A5A1FAE0A.TMP
data
dropped
C:\Windows\Temp\~DF134E6B0CD2CBF1F8.TMP
data
dropped
C:\Windows\Temp\~DF1DFE784762EB27ED.TMP
data
dropped
C:\Windows\Temp\~DF1F150723D78B3E5A.TMP
data
dropped
C:\Windows\Temp\~DF1F6CC2DC66AD84E2.TMP
data
dropped
C:\Windows\Temp\~DF26640A7013D579B3.TMP
data
dropped
C:\Windows\Temp\~DF392149952F61CF3F.TMP
data
dropped
C:\Windows\Temp\~DF3AEF955D3EBC01C8.TMP
data
dropped
C:\Windows\Temp\~DF434BF9D5B8C040A2.TMP
data
dropped
C:\Windows\Temp\~DF44177C0B3D615041.TMP
data
dropped
C:\Windows\Temp\~DF576865CD66C7D47C.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DF580BDF8E84C80488.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DF5D2EEB303406B68E.TMP
data
dropped
C:\Windows\Temp\~DF6BD849738B2040D7.TMP
data
dropped
C:\Windows\Temp\~DF6DE50705DBE18C6B.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DF6EF164FC4DE6C8FA.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DF77FACD4D92D7AC97.TMP
data
dropped
C:\Windows\Temp\~DF7A72236BFA5DD555.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DF7D7DEA4A2B88A632.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DF9A1D4C1731481882.TMP
data
dropped
C:\Windows\Temp\~DF9C2BB84FEFFC009B.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DF9F712CE02E6BBD44.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DF9FFE66A1D53D8B17.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DFA1ED34DC21A786CB.TMP
data
dropped
C:\Windows\Temp\~DFA343C0F78EF10C48.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DFAE3FA61A02C3FE55.TMP
data
dropped
C:\Windows\Temp\~DFAFD97EFC8DA9FB0C.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DFB68223A9F8904BCD.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DFBEE73DE7FF31C06F.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DFC6D1FD84C68C1FE2.TMP
data
dropped
C:\Windows\Temp\~DFD3E21F0574C3E66A.TMP
data
dropped
C:\Windows\Temp\~DFDE5EB07D5720F730.TMP
Composite Document File V2 Document, Cannot read section info
dropped
C:\Windows\Temp\~DFE1962D2AC67F490E.TMP
data
dropped
C:\Windows\Temp\~DFEF30492BFEE98C95.TMP
data
dropped
C:\Windows\Temp\~DFF241D58FCDB827A8.TMP
data
dropped
C:\Windows\Temp\~DFF54363FFF423948D.TMP
Composite Document File V2 Document, Cannot read section info
dropped
\Device\ConDrv
ASCII text, with CRLF line terminators
dropped
There are 309 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\EtEskr.exe
"C:\Users\user\Desktop\EtEskr.exe"
malicious
C:\Users\user\AppData\Roaming\EtEskrivare.exe
EtEskrivare.exe
malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
"powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command " Set-ExecutionPolicy -ExecutionPolicy Bypass -Scope Process Add-Printer -ConnectionName \\jkp-srv0016\SHARP-SMARTPRINT "
malicious
C:\Windows\System32\cmd.exe
"C:\Windows\sysnative\cmd.exe" /c "C:\Users\user\AppData\Local\Temp\4C80.tmp\4C81.tmp\4C82.bat C:\Users\user\Desktop\EtEskr.exe"
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Users\user\AppData\Roaming\dotnet-runtime-8.0.8-win-x64.exe
dotnet-runtime-8.0.8-win-x64.exe /q
C:\Windows\Temp\{C6D76B1E-88AD-4EAE-8BC3-DDAF315F7917}\.cr\dotnet-runtime-8.0.8-win-x64.exe
"C:\Windows\Temp\{C6D76B1E-88AD-4EAE-8BC3-DDAF315F7917}\.cr\dotnet-runtime-8.0.8-win-x64.exe" -burn.clean.room="C:\Users\user\AppData\Roaming\dotnet-runtime-8.0.8-win-x64.exe" -burn.filehandle.attached=664 -burn.filehandle.self=692 /q
C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.be\dotnet-runtime-8.0.8-win-x64.exe
"C:\Windows\Temp\{E3D3D025-2D0A-482D-A950-2A2E2CFDD7F8}\.be\dotnet-runtime-8.0.8-win-x64.exe" -q -burn.elevated BurnPipe.{1763F6A2-C2F4-42C9-8866-460ACDE3FA8E} {A5C335EB-CE59-4F47-9169-F2843E8F963C} 7076
C:\Windows\System32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
C:\Windows\SysWOW64\msiexec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding B9E5D64A3023B24E1C83A523BE5C5639
C:\ProgramData\Package Cache\{d42cea76-6b02-403c-8fa9-b35c717db802}\dotnet-runtime-8.0.8-win-x64.exe
"C:\ProgramData\Package Cache\{d42cea76-6b02-403c-8fa9-b35c717db802}\dotnet-runtime-8.0.8-win-x64.exe" /burn.runonce
C:\ProgramData\Package Cache\{d42cea76-6b02-403c-8fa9-b35c717db802}\dotnet-runtime-8.0.8-win-x64.exe
"C:\ProgramData\Package Cache\{d42cea76-6b02-403c-8fa9-b35c717db802}\dotnet-runtime-8.0.8-win-x64.exe" /quiet /burn.log.append "C:\Users\user\AppData\Local\Temp\Microsoft_.NET_Runtime_-_8.0.8_(x64)_20241003092550.log"
C:\ProgramData\Package Cache\{d42cea76-6b02-403c-8fa9-b35c717db802}\dotnet-runtime-8.0.8-win-x64.exe
"C:\ProgramData\Package Cache\{d42cea76-6b02-403c-8fa9-b35c717db802}\dotnet-runtime-8.0.8-win-x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{d42cea76-6b02-403c-8fa9-b35c717db802}\dotnet-runtime-8.0.8-win-x64.exe" -burn.filehandle.attached=528 -burn.filehandle.self=548 /quiet /burn.log.append "C:\Users\user\AppData\Local\Temp\Microsoft_.NET_Runtime_-_8.0.8_(x64)_20241003092550.log"
C:\Windows\SysWOW64\msiexec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding 3909D66778F6C5107F8B15D5ECB299A6
C:\Windows\SysWOW64\msiexec.exe
C:\Windows\syswow64\MsiExec.exe -Embedding B854354A711E3251713D5F3210D22CCB
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\ProgramData\Package Cache\{d42cea76-6b02-403c-8fa9-b35c717db802}\dotnet-runtime-8.0.8-win-x64.exe
"C:\ProgramData\Package Cache\{d42cea76-6b02-403c-8fa9-b35c717db802}\dotnet-runtime-8.0.8-win-x64.exe" -q -burn.elevated BurnPipe.{90908595-DBF2-48E3-B425-27B7CE5D8A50} {A89BB288-DC86-46DD-9CDA-AF6EDBCB231B} 6500
There are 8 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://github.com/mono/linker/issues/1731
unknown
https://github.com/dotnet/runtime#~
unknown
http://wixtoolset.org/schemas/thmutil/2010
unknown
https://aka.ms/dotnet/info
unknown
https://github.com/lemire/fastrange)
unknown
http://www.novell.com)
unknown
https://llvm.org/LICENSE.txt
unknown
https://aka.ms/dotnet-core-applaunch?Architecture:
unknown
https://aka.ms/20-p2-rel-notes
unknown
https://github.com/aappleby/smhasher/blob/master/src/MurmurHash3.cpp
unknown
https://aka.ms/dotnet/app-launch-failed
unknown
https://aka.ms/dotnet/app-launch-failedTo
unknown
https://aka.ms/20-p2-rel-notes">Release
unknown
https://github.com/mono/linker/issues/1895v
unknown
http://7-zip.org/sdk.html
unknown
http://www.ryanjuckett.com/
unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysid
unknown
https://github.com/SixLabors/ImageSharp/blob/f4f689ce67ecbcc35cebddba5aacb603e6d1068a/LICENSE
unknown
http://appsyndication.org/2006/appsynapplicationc:
unknown
https://github.com/JamesNK/Newtonsoft.Json/blob/master/LICENSE.md
unknown
https://aka.ms/nativeaot-compatibility
unknown
https://nuget.org/nuget.exe
unknown
http://www.ookii.org/software/dialogs/
unknown
https://aka.ms/dotnet/sdk-not-found
unknown
https://github.com/Microsoft/MSBuildLocator
unknown
https://github.com/dotnet/aspnetcore/blob/main/LICENSE.txt
unknown
https://github.com/mono/linker/pull/649
unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
https://aka.ms/dotnet-tutorialsX
unknown
https://github.com/microsoft/msquic/blob/main/LICENSE
unknown
https://aka.ms/dotnet-tutorials">Tutorials</A>
unknown
https://github.com/madler/zlib
unknown
https://aka.ms/winsvr-2022-pshelp
unknown
http://www.opensource.org/licenses/bsd-license.html.
unknown
https://github.com/ucb-bar/berkeley-softfloat-3
unknown
https://www.unicode.org/license.html
unknown
http://pesterbdd.com/images/Pester.png
unknown
http://schemas.xmlsoap.org/soap/encoding/
unknown
http://www.apache.org/licenses/LICENSE-2.0.html
unknown
https://github.com/dotnet/runtime/blob/bbc898f3e5678135b242faeb6eefd8b24bf04f3c/src/native/corehost/
unknown
https://dot.net/corej7
unknown
https://contoso.com/Icon
unknown
https://aka.ms/dotnet-illink/com
unknown
https://github.com/dotnet/runtimem
unknown
https://github.com/NuGet/NuGet.Client/blob/dev/LICENSE.txt
unknown
https://github.com/intel/isa-l/blob/33a2d9484595c2d6516c920ce39a694c144ddf69/crc/crc32_ieee_by4.asm
unknown
https://github.com/nigeltao/parse-number-fxx-test-data)
unknown
https://github.com/Pester/Pester
unknown
https://github.com/microsoft/DirectXMath/blob/master/LICENSE
unknown
https://aka.ms/dotnet/downloadUsage:
unknown
https://github.com/Microsoft/RoslynClrHeapAllocationAnalyzer
unknown
http://wixtoolset.org/schemas/thmutil/2010(
unknown
https://arxiv.org/pdf/2102.06959.pdf
unknown
https://github.com/lemire/fastmod)
unknown
http://schemas.xmlsoap.org/wsdl/
unknown
https://aka.ms/dotnet-docs">Documentation</A>
unknown
https://wixtoolset.org/
unknown
http://sourceforge.net/projects/slicing-by-8/
unknown
https://aka.ms/dotnet-tutorials
unknown
https://github.com/dotnet/runtime/issues/50821
unknown
https://aka.ms/dotnet-cli-telemetry
unknown
https://www.unicode.org/copyright.html.
unknown
https://aka.ms/dotnet/download
unknown
https://aka.ms/dotnet/app-launch-failedDownload
unknown
http://appsyndication.org/2006/appsyn
unknown
https://github.com/dotnet/runtime;
unknown
https://github.com/dotnet/runtime7
unknown
https://github.com/dotnet/templating/blob/main/build/nuget.exe
unknown
https://aka.ms/dotnet/app-launch-failedWould
unknown
https://aka.ms/dotnet-cli-telemetryy?
unknown
https://github.com/dotnet/runtime?
unknown
https://opensource.org/licenses/MIT
unknown
https://contoso.com/License
unknown
https://aka.ms/dev-privacy
unknown
https://aka.ms/dotnet-license-windows
unknown
http://llvm.org
unknown
https://dot.net/coreL
unknown
http://creativecommons.org/publicdomain/zero/1.0/
unknown
http://www.mono-project.com/docs/about-mono/
unknown
http://www.xamarin.com)
unknown
https://aka.ms/dotnet/sdk-not-foundFailed
unknown
https://dot.net/coreP
unknown
https://aka.ms/dotnet-core-applaunch?
unknown
https://github.com/dotnet/runtime0
unknown
https://github.com/dotnet/runtime
unknown
https://github.com/dotnet/runtimed5
unknown
https://aka.ms/dotnet-docs
unknown
https://dot.net/corev
unknown
https://aka.ms/dotnet-core-applaunch?framework=&framework_version=missing_runtime=true&arch=&rid=&os
unknown
https://aka.ms/dotnet-warnings/
unknown
https://github.com/BurntSushi/aho-corasick
unknown
https://aka.ms/dotnet-license-windowsl
unknown
https://github.com/dotnet/runtime/issues/71847
unknown
https://github.com/dotnet/runtime_
unknown
https://aka.ms/serializationformat-binary-obsolete
unknown
https://contoso.com/
unknown
https://aka.ms/binaryformatter
unknown
https://aka.ms/dotnet-license-windo
unknown
https://github.com/dotnet/runtimeI_#
unknown
https://aka.ms/dotnet-cli-telemetry">.NET
unknown
There are 90 hidden URLs, click here to show them.

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
BundleCachePath
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
BundleUpgradeCode
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
BundleAddonCode
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
BundleDetectCode
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
BundlePatchCode
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
BundleVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
BundleProviderKey
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
BundleTag
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
EngineVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
DisplayIcon
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
ModifyPath
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
NoElevateOnModify
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
QuietUninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\{d42cea76-6b02-403c-8fa9-b35c717db802}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\{d42cea76-6b02-403c-8fa9-b35c717db802}
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\{d42cea76-6b02-403c-8fa9-b35c717db802}
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
Resume
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce
{d42cea76-6b02-403c-8fa9-b35c717db802}
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
BundleResumeCommandLine
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
Installed
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
Resume
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Config.Msi\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
C:\Config.Msi\475f6e.rbs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
C:\Config.Msi\475f6e.rbsLow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C420C4C303126A2579B0071C059A6C1A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5AB98BC651ABE4356AE8224639E29514
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DA64ADA99F90DCE509E0BDFD9481CCCB
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\91CBD56019568CC5496332F269F48029
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07BCC610837992A5B808D15998DF7E9B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB4D168A7B23F2853B9247A799A88935
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C7CF432868478D54ADF220F6B2EB452
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0A6401532FC6D795E91294DA47A70708
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\623DAB89112A2F25D83B9CE532532DA4
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A89CF5E5A13FD265385421E624017E67
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9558E2DDDB20867519B5509BFEDFEA51
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0AD45B22427AC56599A70E2AF479B1FA
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EECEAE49C79DD35538A9EF759E78C04A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC037574975BF175D8BACA257ACE2858
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C60663761A66ED75CA77E9DD1C6B6957
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A9DF8773164ACC75A972E9DC499AAAA8
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37F161A08767DFB568DCC1A0FFE48A33
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ABE83EF23354C885EB7C5CAED82C79E7
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8271E7ED54F124D5C82892E1F7B5FA36
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B0CDF582DE57F45A8D6A5B302A4BFE2
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71818AA729397D451B84AB13D020D44A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C729B842490205589B07AF0B1A24BBD
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C09AA3D56FD2E55AB311D081A62EA6
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1E7DCA96F0487752958A7C4CF7DEDEB
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4C5C2C687C9B6C151B53867D402403CE
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4DD740D82677DB05481B93C6081AC3C5
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6121B26DEE91F675DACF2134C3811B08
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8E31F33631268105FB507CD0C514DEBB
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8B4CEF3B7A7475751B35BD6D2D4B4E7D
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A0347D1EADE7C04538CFCF9EFA5C0D1F
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE6204D70A84D9B529E68DAF8A3601E0
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\56380ABBD1C2C325786ACF93178C8EBD
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F29F626C0908F2D56931A16560CDB634
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\954BCB35D509ED659ACDD52D69205FE1
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F0AEB1F0450EC3356A18E6062FD9185B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CA0178F7552B5F58B38B6B6DEE75B9C
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1EEDA03F40B5E3C5FA8FBDED673BB86C
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9B22C334E1B9D7C5FA0434EC743BD642
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\206FBF358D5C825548F86A7F68A0C0DC
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF1ABCE6BA7629F51AC6B10DF806ACF6
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4EE010F07E92B2518A55DBBF23D1F40
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\77121307C194CCD58A622FCF3B0B02DB
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22D8AD45E8E6E2654B74A4ECE8FE743D
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\770857C89CCC0775DAE1490DA9E7CD68
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7ECC5C56717BF0B5C93A707166BE0F58
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA466F095F9859452BEB763E942BCC72
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2530DBA41C8F99652889AD92388F67E7
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4393663533BC8B05CBFDFB8B57A0DA78
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A149B9B32C3D59F5980CD64446C085FF
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C8DC49C18FA4FC508EC322BAA10F95D
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ABE185FC3DF004159B46D5D4679B3337
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97FF0946BDD7BA2559FAD5E409D1EB24
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53AD5BB497C9E875DAA364DC9E9165CF
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B868650D186595F50A74AD4C1F1D91CA
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6927AD1E4D87A2852A672455CFD773B8
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\44D3CCD7F0A0EE851BCA77D4A5DA3BD4
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0D9DB547E47B34955A847904FA6216F6
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9BC9B20CC0F73525DBC2611C81223679
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6838EEE63CCCE125A86374155BFFFC73
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7B2BB211222BAA56BB374EC020F7431
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB769449983A035508291E6841D93CCB
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1B4E54E809EE15F5FA6BF0C38302AA8D
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7EAD8078DB4734E56A5A82D5E2B123C6
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB76E9F99250009549B242DC5AD37FBF
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF268A625F34ACC5EB6506248487A916
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\356726E9F347A7556BACDD12E91DDCB8
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\16B6BDFF23E0D0153A81495E6D6EF07B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A6915294B8A8B552AB10AE1C668517F
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4CF4304B00F19C52B992F5F288BFA1B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCEC5DE2AD962DC55BF1226EBD609ADA
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB828F53C189A2150B0E8006C71D5CEE
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9EF7FBC5DFB0FC8519EB9B11D38A8DC0
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2AA0365A597D425AA56F77814A1170C
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD7DEF2DC0A0CDE5EA2470D63FBFECAB
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\24DBAEB8E7034425FA1935D925335EF1
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2A528EE0E5EE5225583708255EDCC96B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4B96E21E9815EB599BA21BCD9672726
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7254196BA91A82E5399FC2EFCAD57A2B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\28B64F07C4E100A54A33C1141DDEE455
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3112AB3CFA086A9568FFB30975DE158F
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C5DFAE5F20EDE875E980B4216D95C1BE
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\084CFE841312D215FA268AAB4A7A6B8F
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9AB1B03D29D391358A5C6E6D942191B1
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0034576AEFD6192559A4F9624A013D97
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DE06E0B8ED7F7AC588552583B6E1C3AF
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6898021B5DAC6155AB5EB68CC7BC5299
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2708FC8E5DB58DA519D02FD2E1941049
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7B41313EF223DFC50B3039F89A96EB69
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F258EFB8DE15945568A82E84D8C55FD5
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E15C0A4994B244558EE6C0661C7F7C9
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\31654D117F9F58E5E9C2F1F519257890
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2F894F69525B3D957AAA5911D394E5DD
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5082C6B833E51A052B2B7921DD1EA84A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\09C8B996A34B6C054946C23EA240804B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B0CA7C48205D8455D94197269760F352
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC3AA8FB7AC9C5B50B246954764CCBC7
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6FE921025A15B9D558207493116677EA
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6ACDD68136BCFD53A658750C9E7DA0B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F3C804FE001D0A5FAE49B4CA016F032
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\865BD9F3DED4F1A5E89629C8BE05FE2A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3AEC12E931EA8555AA9735E8DD46396B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AEDC1FA643D81A5FADB6749692F3565
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\78EA80AA6755AD854A11A7D4D40C5BD0
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3AA8309978636D85AA0956FB5365165B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E39BA6AF1CD91BC52AC2116A1FFE2916
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F414933D2CD36DD5889A689320CE9E68
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9415478A446589458A895F3DDA8BB6C7
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\33392F449EFFC295487FF45A7EC6724B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\16EDFA88289D814538F3AEAB872DB20A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4DD298BDD4AE9845EB72267A6F9AB67B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\23FB78A3F8C2E025081F93E3289D6456
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C429A12C9D29005981C704FBB840B7A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA50A50680FCC7B5AA7340E7F6255A30
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3F9499DCB925EF57854F6397FAB44F0
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F158FB4C2BAB46549AF617FD4E90177
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\219744808DCF1A054A748A28E18E6999
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FAD036D04669C7A539C871EEEBFEDF49
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE6ABAB0727CF453B26C06E18420297
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A11C38FEAA71C9155BA2FB1B1CA258A9
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0F6ACACA0CB74225F80F895B5D2A5D0A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\167B0121BA40B8B59B11084FEB3AABA5
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B881F2372DE1795EBF105E21BA38C49
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACE72442B369BAB50B2347819C6D2A84
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\66A2C39ADD8DFE851B1170A51A85268B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1D7FEC951869C0A5184EC3A5515D9159
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B86A378F9E581C1538D3C3B392C7D832
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E0A88C5168E6E0254A0C1803C6A09BD5
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\35D8ADA7C30A4C850A16CEC9AA71C4BC
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\150D9756FBF9F4452ADC693963704587
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\900B5E48976AA2D589A3061E63CE8866
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A41645512FCA6665B9166AF49166B261
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F82020C0751C2FB5EA4048EF9A89C383
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A64FF8EE44BF360579D0B92B63D70A39
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F07FC92ABF216D57866B9438DF96426
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A55E1E27BCCE9535A9B06A22EB2D9EBC
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\443B667D46F06115B95001F76CDFB6BD
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3762E3717C08B14528FC692717DCD71C
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\92C3947DFD9B93B5D8217CA96EC927E1
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\580D92D49988627558AD28971215A317
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1FC80FD338F58755FA6B02CCBF5C919F
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ECA8F45BB1E6BDB59BBE871E1EE752B0
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DFA2FAACC3D3735BB167556B04590E2
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1FDAFB8CF97BFF55AAE7F2DD9331D557
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\404C78AE819676E57BA2EA8CCAD1EEA6
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8FCEC0259FF9CF154A8186E837AA6B08
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\930CE32B445C116539A71E74A1E846EA
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A958016CC95A1653B1A3122D68A5966
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AABD2417E74C9B254BB57A689B2CEAED
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF24C8F183A280A5C9219911C4769F82
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4E8BEAFDFCAC3D05BB2E40B6BC29312D
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E57B8418E0D365954BAC655718CC0D7A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB67B5F11EB9F1E50BF7A5DEC10FF91A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\59F8C8B3A0DD9EB5D822A373B48BCE13
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1644978499110D350B6FBE66101021F5
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B9D4D57BD6FAF69508C431CAAE9999B3
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FF42D8B6B7E33E55FB8C89E5F31A775D
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\84020E6F9847E585B9A02BB2CF704B55
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3DC39DC79C3AC1519E0FF6C8741CFF1
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7EF4028E251AC60589C0BCBEBE0EA07B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F95744E1A28D578589164BFFA31C6D2B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\751E88A0F0114AB5C861F8554187E1EE
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E786AD9ED9639315CA958112D498C294
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F18E14392DBDB95F877103583D4F096
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBF4D5CEC4D7A752B57F1B807CFAB0F
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\271EC414CC6C26E5184E949B0189884B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34D08AE2C700B265B9E311F5DCFEE129
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E228518F7E224B598F92284CD1316A4
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B989F0D14B014FB56A43074D1E34E513
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D4D68B49ADCD1625393D4C08E837F070
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF38FF3C56067E15292974E8A9550C6A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9B4DCBE69A24BED549617A6EFD60AE60
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0774C7A868DB6AB58920776BE8C3DD9F
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F84D27D3297F67F5AB7F073044966A9E
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\192D5C2AF50F4DA5F9C861AC58022F43
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1434275664020FF57A917031874AC461
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED9AAB9289E06325BA623DCB43403C8A
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8DCDAE8ED4A82E52925E652D65E06F6
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E308A5FCD7F83745A806DC6BA4CDF488
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F182536966601095598B87D415E5B614
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1FBF3C8969E193950BA1ABE848814FDD
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D01F676D98829050AABDE2C52D38D2E
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FFEEEBBD7B32AA5A855AB3793BD658B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1CD9BA634A6C57554922A1E0DEE56A04
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A175DDD7BDE948C55AD790F7D36222D4
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4F00100C086A9F5D98620123FAC1341
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01AF066A5DE7851529049B1E67BE3A8E
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\09FCCED34455DB25D994B732B1A050B5
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6CAFD0FC07A5B3050B3D59E0AC386008
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E57B32E43A15D9A5ABA9ECBE93458510
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1FF6BF74DAD90519EF3CB7FB875505
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\094759AD95AE9B249B6DE3086FBFE00D
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\dotnet\shared\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\dotnet_runtime_64.32.18380_x64
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\dotnet_runtime_64.32.18380_x64
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\dotnet_runtime_64.32.18380_x64
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\dotnet\Setup\InstalledVersions\x64\sharedfx\Microsoft.NETCore.App
8.0.8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RuntimeExceptionHelperModules
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\mscordaccore.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\KnownManagedDebuggingDlls
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\mscordaccore.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\KnownFunctionTableDlls
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\mscordaccore.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls
C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.8\coreclr.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
LocalPackage
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
AuthorizedCDFPrefix
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
Comments
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
Contact
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
HelpTelephone
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
InstallDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
InstallSource
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
ModifyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
NoModify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
Readme
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
SystemComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
URLUpdateInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
WindowsInstaller
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
Language
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
AuthorizedCDFPrefix
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
Comments
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
Contact
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
HelpTelephone
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
InstallDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
InstallSource
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
ModifyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
NoModify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
Readme
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
SystemComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
URLUpdateInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
WindowsInstaller
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
Language
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\D1465FFBBB85F7051078D28C9CA93A1B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\InstallProperties
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ACB23DB-4D32-49ED-A5E3-F4E2F8D9D2AA}
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\BD32BCA923D4DE945A3E4F2E8F9D2DAA
Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\Features
Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\BD32BCA923D4DE945A3E4F2E8F9D2DAA
MainFeature
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\Features
MainFeature
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\Patches
AllPatches
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA
ProductName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA
PackageCode
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA
Language
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA
Assignment
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA
AdvertiseFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA
InstanceType
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA
AuthorizedLUAApp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA
DeploymentFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\D1465FFBBB85F7051078D28C9CA93A1B
BD32BCA923D4DE945A3E4F2E8F9D2DAA
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\SourceList
PackageName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\SourceList\Net
1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\SourceList\Media
1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA
Clients
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\BD32BCA923D4DE945A3E4F2E8F9D2DAA\SourceList
LastUsedSource
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Config.Msi\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
C:\Config.Msi\475f72.rbs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
C:\Config.Msi\475f72.rbsLow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37383B7A8D64E475FBCA961BB0AFD582
85442EF769708244992CA9F0D8BA39CC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C66D8CD17D38DF854A1039C903F08DE6
85442EF769708244992CA9F0D8BA39CC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8B425CE84687ECA53B02D26312E6CB21
85442EF769708244992CA9F0D8BA39CC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\dotnet\host\fxr\8.0.8\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\dotnet\host\fxr\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\dotnet\host\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Dotnet_CLI_HostFxr_64.32.18380_x64
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Dotnet_CLI_HostFxr_64.32.18380_x64
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Dotnet_CLI_HostFxr_64.32.18380_x64
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\dotnet\Setup\InstalledVersions\x64\hostfxr
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
LocalPackage
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
AuthorizedCDFPrefix
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
Comments
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
Contact
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
HelpTelephone
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
InstallDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
InstallSource
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
ModifyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
NoModify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
Readme
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
SystemComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
URLUpdateInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
WindowsInstaller
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
Language
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
AuthorizedCDFPrefix
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
Comments
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
Contact
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
HelpTelephone
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
InstallDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
InstallSource
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
ModifyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
NoModify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
Readme
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
SystemComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
URLUpdateInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
WindowsInstaller
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
Language
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\82ABE9C65DD50D0401BCD51D6D4ECF26
85442EF769708244992CA9F0D8BA39CC
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\InstallProperties
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7FE24458-0796-4428-99C2-9A0F8DAB93CC}
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\85442EF769708244992CA9F0D8BA39CC
Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\Features
Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\85442EF769708244992CA9F0D8BA39CC
MainFeature
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\Features
MainFeature
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\85442EF769708244992CA9F0D8BA39CC\Patches
AllPatches
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC
ProductName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC
PackageCode
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC
Language
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC
Assignment
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC
AdvertiseFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC
InstanceType
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC
AuthorizedLUAApp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC
DeploymentFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\82ABE9C65DD50D0401BCD51D6D4ECF26
85442EF769708244992CA9F0D8BA39CC
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC\SourceList
PackageName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC\SourceList\Net
1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC\SourceList\Media
1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC
Clients
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\85442EF769708244992CA9F0D8BA39CC\SourceList
LastUsedSource
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Config.Msi\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
C:\Config.Msi\475f76.rbs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts
C:\Config.Msi\475f76.rbsLow
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D0ACCE788C8DD055A83DC2CB939051D
8F242AB35BDB6904F9CB33C36D36BBDA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BBB993545ADD68342A9E16F83B5CA481
8F242AB35BDB6904F9CB33C36D36BBDA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89F3C9AE1B9F21259808FCAE2F1BE5D0
8F242AB35BDB6904F9CB33C36D36BBDA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C800E4E8A750405BB433020B4516B5C
8F242AB35BDB6904F9CB33C36D36BBDA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C42953EC13DAFD158BA48A50E20D4800
8F242AB35BDB6904F9CB33C36D36BBDA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5EBC16A282192F409DA3695A72A73E2
8F242AB35BDB6904F9CB33C36D36BBDA
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Dotnet_CLI_SharedHost_8.0_x64
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Dotnet_CLI_SharedHost_8.0_x64
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies\Dotnet_CLI_SharedHost_8.0_x64
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\dotnet\Setup\InstalledVersions\x64
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\dotnet\Setup\InstalledVersions\x64\sharedhost
Version
HKEY_LOCAL_MACHINE\SOFTWARE\dotnet\Setup\InstalledVersions\x64\sharedhost
Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
LocalPackage
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
AuthorizedCDFPrefix
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
Comments
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
Contact
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
HelpTelephone
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
InstallDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
InstallSource
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
ModifyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
NoModify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
Readme
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
SystemComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
URLUpdateInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
WindowsInstaller
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
Language
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
AuthorizedCDFPrefix
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
Comments
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
Contact
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
HelpTelephone
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
InstallDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
InstallSource
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
ModifyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
NoModify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
Readme
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
SystemComponent
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
URLUpdateInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
WindowsInstaller
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
Language
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\D881F2EC0135A4B72CA89D27FD72F577
8F242AB35BDB6904F9CB33C36D36BBDA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\InstallProperties
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BA242F8-BDB5-4096-9FBC-333CD663BBAD}
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8F242AB35BDB6904F9CB33C36D36BBDA
Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\Features
Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\8F242AB35BDB6904F9CB33C36D36BBDA
MainFeature
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\Features
MainFeature
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F242AB35BDB6904F9CB33C36D36BBDA\Patches
AllPatches
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA
ProductName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA
PackageCode
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA
Language
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA
Assignment
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA
AdvertiseFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA
InstanceType
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA
AuthorizedLUAApp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA
DeploymentFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\D881F2EC0135A4B72CA89D27FD72F577
8F242AB35BDB6904F9CB33C36D36BBDA
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA\SourceList
PackageName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA\SourceList\Net
1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA\SourceList\Media
1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA
Clients
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\8F242AB35BDB6904F9CB33C36D36BBDA\SourceList
LastUsedSource
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings
StringCacheGeneration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings
StringCacheGeneration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment
PATH
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings
StringCacheGeneration
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\21\417C44EB
@%SystemRoot%\System32\ci.dll,-100
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\21\417C44EB
@%SystemRoot%\System32\ci.dll,-101
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\21\417C44EB
@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\21\417C44EB
@%SystemRoot%\System32\fveui.dll,-843
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\21\417C44EB
@%SystemRoot%\System32\fveui.dll,-844
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\21\417C44EB
@%SystemRoot%\System32\wuaueng.dll,-400
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\21\417C44EB
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\21\417C44EB
@%SystemRoot%\system32\NgcRecovery.dll,-100
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce
{d42cea76-6b02-403c-8fa9-b35c717db802}
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
BundleResumeCommandLine
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
Resume
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d42cea76-6b02-403c-8fa9-b35c717db802}
Resume
There are 493 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
7FF8867A4000
direct allocation
page read and write
FFD000
heap
page read and write
7FF8868C0000
direct allocation
page read and write
1E914660000
heap
page read and write
3398000
heap
page read and write
35FF000
trusted library allocation
page read and write
137E000
heap
page read and write
133B77C1000
trusted library allocation
page read and write
5A0000
heap
page read and write
950000
heap
page read and write
2F10000
heap
page read and write
7FF8868E0000
direct allocation
page read and write
2720000
heap
page read and write
7FF886730000
direct allocation
page execute read
1E914751000
heap
page read and write
A2E000
stack
page read and write
29A0000
heap
page read and write
3274000
trusted library allocation
page read and write
7FF886884000
direct allocation
page read and write
7FF887960000
trusted library allocation
page read and write
7FF8878C0000
trusted library allocation
page read and write
1E914714000
heap
page read and write
7FF66CB20000
unkown
page readonly
8FE000
stack
page read and write
29D0000
heap
page read and write
2BD4000
trusted library allocation
page read and write
7FF8877E0000
trusted library allocation
page execute and read and write
E57000
heap
page read and write
1E914713000
heap
page read and write
72D000
heap
page read and write
327A000
trusted library allocation
page read and write
7FF8FF5F0000
unkown
page read and write
4C8000
heap
page read and write
401000
unkown
page readonly
4E74979000
stack
page read and write
38C0000
heap
page read and write
7FF887B10000
trusted library allocation
page read and write
133CF1E3000
heap
page read and write
133CF208000
heap
page read and write
7FF8E61A2000
unkown
page readonly
133C7105000
trusted library allocation
page read and write
133C70FD000
trusted library allocation
page read and write
5A7C000
stack
page read and write
A3E000
stack
page read and write
413000
unkown
page readonly
19C000
stack
page read and write
7FF8866F8000
direct allocation
page execute read
7FF8E6146000
unkown
page read and write
A91000
unkown
page execute read
7FF887B20000
trusted library allocation
page read and write
7FF887AE0000
trusted library allocation
page read and write
E19000
unkown
page readonly
1E914722000
heap
page read and write
7DF4C3450000
trusted library allocation
page execute and read and write
7FF8E6148000
unkown
page read and write
A90000
unkown
page readonly
7FF8876C3000
trusted library allocation
page execute and read and write
136F000
heap
page read and write
7FF886904000
direct allocation
page read and write
1380000
heap
page read and write
133B8CC2000
trusted library allocation
page read and write
DD1000
unkown
page readonly
F70000
heap
page read and write
DD1000
unkown
page readonly
7FF887A10000
trusted library allocation
page read and write
117D000
heap
page read and write
37CB000
stack
page read and write
4E0000
heap
page read and write
133B879D000
trusted library allocation
page read and write
133B8E8C000
trusted library allocation
page read and write
44E000
stack
page read and write
2780000
heap
page read and write
116F000
heap
page read and write
39CB000
heap
page read and write
133B4F99000
heap
page read and write
E174F9000
stack
page read and write
7FF887AB0000
trusted library allocation
page read and write
8F0000
heap
page read and write
E17000
heap
page read and write
7FF8879C0000
trusted library allocation
page read and write
133B879F000
trusted library allocation
page read and write
7FF66CB20000
unkown
page readonly
11BE000
stack
page read and write
E50000
heap
page read and write
329F000
trusted library allocation
page read and write
329E000
trusted library allocation
page read and write
390000
unkown
page readonly
2BDA000
trusted library allocation
page read and write
7FF66CB21000
unkown
page execute read
7FF8879F0000
trusted library allocation
page read and write
2110000
heap
page read and write
7E0000
heap
page read and write
1E91471F000
heap
page read and write
1E915FE0000
heap
page execute and read and write
940000
unkown
page read and write
133B8FFA000
trusted library allocation
page read and write
2AF0000
trusted library allocation
page read and write
DD1000
unkown
page readonly
7FF887770000
trusted library allocation
page read and write
1E914768000
heap
page read and write
2CDF000
trusted library allocation
page read and write
9A6000
heap
page read and write
133CEECF000
heap
page read and write
8EE000
stack
page read and write
CFB000
stack
page read and write
3E60000
heap
page read and write
401000
unkown
page execute read
327B000
trusted library allocation
page read and write
7FF8F8BC0000
unkown
page readonly
2BD0000
trusted library allocation
page read and write
7FF8866C3000
direct allocation
page read and write
1E91471B000
heap
page read and write
D40000
unkown
page read and write
D60000
unkown
page readonly
25A0000
heap
page read and write
3294000
trusted library allocation
page read and write
D61000
unkown
page execute read
7FF88669D000
direct allocation
page read and write
35FA000
trusted library allocation
page read and write
133B4F9B000
heap
page read and write
117E000
heap
page read and write
7FF8866D3000
direct allocation
page read and write
1E914690000
heap
page read and write
30C0000
trusted library allocation
page read and write
1580000
heap
page read and write
7FF886890000
direct allocation
page read and write
7FF8868D0000
direct allocation
page execute read
1E915FA0000
unclassified section
page read and write
B01000
unkown
page readonly
693A000
heap
page read and write
7FF887B00000
trusted library allocation
page read and write
17E0000
heap
page read and write
7FF8E8563000
unkown
page write copy
4E74AFF000
stack
page read and write
7FF8F83C1000
unkown
page execute read
137E000
heap
page read and write
E5F000
heap
page read and write
1E918C1C000
direct allocation
page read and write
3240000
trusted library allocation
page read and write
4293000
trusted library allocation
page read and write
11AF000
stack
page read and write
10C000
stack
page read and write
444F000
stack
page read and write
7FF887A50000
trusted library allocation
page read and write
7FF8866B1000
direct allocation
page read and write
73D000
heap
page read and write
E67000
heap
page read and write
7FF8F8BB1000
unkown
page execute read
133B780D000
trusted library allocation
page read and write
7FF8E6682000
unkown
page readonly
1E9146F6000
heap
page read and write
1E914712000
heap
page read and write
3271000
trusted library allocation
page read and write
7FF66CB37000
unkown
page readonly
4EF000
heap
page read and write
BD0000
heap
page read and write
440000
heap
page read and write
3275000
trusted library allocation
page read and write
7FF8868A0000
direct allocation
page execute read
7FF8F82F7000
unkown
page readonly
3D00000
heap
page read and write
E177B6000
stack
page read and write
1E914723000
heap
page read and write
72D000
heap
page read and write
46CE000
stack
page read and write
1E9146B0000
unclassified section
page read and write
52C000
heap
page read and write
7FF8E6637000
unkown
page write copy
1819000
unkown
page readonly
137E000
heap
page read and write
133B7F3D000
trusted library allocation
page read and write
138F000
heap
page read and write
D61000
unkown
page execute read
7FF886860000
direct allocation
page read and write
2850000
heap
page read and write
56A000
heap
page read and write
D61000
unkown
page execute read
13FF000
heap
page read and write
3273000
trusted library allocation
page read and write
417000
unkown
page read and write
E1858C000
stack
page read and write
BFC000
stack
page read and write
4E0000
heap
page read and write
133C6E31000
trusted library allocation
page read and write
7FF887930000
trusted library allocation
page read and write
2F70000
trusted library allocation
page read and write
484B000
stack
page read and write
1E914718000
heap
page read and write
45CC000
stack
page read and write
DE0000
unkown
page read and write
1E91471A000
heap
page read and write
572F000
stack
page read and write
133B8E80000
trusted library allocation
page read and write
7FF8E6145000
unkown
page write copy
D61000
unkown
page execute read
1380000
heap
page read and write
E176F9000
stack
page read and write
7FF887A30000
trusted library allocation
page read and write
7FF8876CD000
trusted library allocation
page execute and read and write
1E91474C000
heap
page read and write
116D000
heap
page read and write
1167000
heap
page read and write
2820000
heap
page read and write
133B4F10000
trusted library section
page read and write
E179BE000
stack
page read and write
2EA0000
heap
page read and write
BDE000
stack
page read and write
7FF8879D0000
trusted library allocation
page read and write
7FF886750000
direct allocation
page execute read
E6F000
heap
page read and write
7FF8F8580000
unkown
page readonly
53D000
heap
page read and write
FDD000
heap
page read and write
6FD000
heap
page read and write
6B0000
heap
page read and write
7FF8E8562000
unkown
page read and write
133B4F30000
trusted library allocation
page read and write
7FF886850000
direct allocation
page execute read
5F3A000
heap
page read and write
DAE000
unkown
page readonly
13D0000
heap
page read and write
2FE0000
heap
page read and write
2BD6000
trusted library allocation
page read and write
2F70000
trusted library allocation
page read and write
133CEE90000
heap
page read and write
2B6F000
stack
page read and write
E6F000
heap
page read and write
116D000
heap
page read and write
306E000
stack
page read and write
1E916400000
direct allocation
page read and write
7FF8876C0000
trusted library allocation
page read and write
7FF8866A0000
direct allocation
page read and write
A80000
heap
page read and write
7FF886758000
direct allocation
page execute read
C76000
heap
page read and write
133C70CE000
trusted library allocation
page read and write
DC000
stack
page read and write
133B7BC5000
trusted library allocation
page read and write
116F000
heap
page read and write
3240000
heap
page read and write
7FF8F8370000
unkown
page readonly
133B4E90000
heap
page read and write
133CF090000
heap
page read and write
DAE000
unkown
page readonly
DD1000
unkown
page readonly
133CF0F8000
heap
page read and write
327F000
trusted library allocation
page read and write
7FF66CB41000
unkown
page write copy
1E914729000
heap
page read and write
3E63000
trusted library allocation
page read and write
133C6E41000
trusted library allocation
page read and write
7FF886780000
direct allocation
page execute read
FED000
heap
page read and write
E4E000
heap
page read and write
73D000
heap
page read and write
7FF887950000
trusted library allocation
page read and write
401000
unkown
page readonly
3260000
heap
page read and write
E1860C000
stack
page read and write
2A80000
heap
page read and write
7FF8E8550000
unkown
page readonly
7FF8E6137000
unkown
page read and write
7FF886858000
direct allocation
page execute read
7FF8E8564000
unkown
page readonly
7FF8F855F000
unkown
page write copy
E178B9000
stack
page read and write
7FF8E8551000
unkown
page execute read
E1793E000
stack
page read and write
569000
heap
page read and write
7FF8879E0000
trusted library allocation
page read and write
1270000
heap
page read and write
900000
trusted library allocation
page read and write
DAE000
unkown
page write copy
7FF8F83C0000
unkown
page readonly
133B843E000
trusted library allocation
page read and write
7FF8868A8000
direct allocation
page execute read
7FF8876D0000
trusted library allocation
page read and write
4363000
trusted library allocation
page read and write
116D000
heap
page read and write
7FF8F85C5000
unkown
page readonly
2BDF000
trusted library allocation
page read and write
2CDC000
trusted library allocation
page read and write
7FF8E663F000
unkown
page read and write
3290000
heap
page read and write
7FF8867A8000
direct allocation
page execute read
133B4F97000
heap
page read and write
FCB000
heap
page read and write
1140000
heap
page read and write
1E914731000
heap
page read and write
1E914720000
heap
page read and write
1E914720000
heap
page read and write
7FF8F8BBF000
unkown
page read and write
FB8000
heap
page read and write
7FF8F82D1000
unkown
page execute read
FED000
heap
page read and write
6AF000
stack
page read and write
D50000
heap
page read and write
2CD7000
trusted library allocation
page read and write
7FF8FF5F2000
unkown
page readonly
5F30000
heap
page read and write
7FF887940000
trusted library allocation
page read and write
7FF8F82F4000
unkown
page read and write
3297000
trusted library allocation
page read and write
1E9160F2000
unkown
page readonly
1E916114000
heap
page read and write
DAE000
unkown
page readonly
7FF8868D4000
direct allocation
page read and write
3DE000
unkown
page readonly
3280000
trusted library allocation
page read and write
1E914760000
heap
page read and write
400000
unkown
page readonly
1E91473E000
heap
page read and write
D61000
unkown
page execute read
327C000
trusted library allocation
page read and write
7FF8F8581000
unkown
page execute read
DCE000
unkown
page write copy
FEF000
heap
page read and write
1E916310000
heap
page read and write
E6F000
heap
page read and write
1370000
heap
page read and write
3C63000
trusted library allocation
page read and write
28D0000
heap
page read and write
37A0000
heap
page read and write
1E91474B000
heap
page read and write
133C70FB000
trusted library allocation
page read and write
2860000
heap
page read and write
4DE000
heap
page read and write
360000
heap
page read and write
13D0000
heap
page read and write
51E000
heap
page read and write
7FF8878A4000
trusted library allocation
page read and write
24F0000
trusted library allocation
page read and write
717000
heap
page read and write
2BD2000
trusted library allocation
page read and write
4E73FB5000
stack
page read and write
2DE0000
heap
page read and write
133C70F7000
trusted library allocation
page read and write
D40000
unkown
page readonly
2EF0000
heap
page read and write
153F000
stack
page read and write
FED000
heap
page read and write
7FF8876DB000
trusted library allocation
page read and write
35F4000
trusted library allocation
page read and write
163E000
stack
page read and write
E1767D000
stack
page read and write
7FF886654000
direct allocation
page read and write
2BDE000
trusted library allocation
page read and write
582E000
stack
page read and write
3450000
heap
page read and write
35F5000
trusted library allocation
page read and write
3F63000
trusted library allocation
page read and write
133CF24D000
heap
page read and write
7FF88777C000
trusted library allocation
page execute and read and write
2CD8000
trusted library allocation
page read and write
11E3000
heap
page read and write
3650000
heap
page read and write
30E0000
heap
page read and write
B01000
unkown
page readonly
2DD0000
trusted library allocation
page read and write
1167000
heap
page read and write
133B8FF1000
trusted library allocation
page read and write
599C000
stack
page read and write
7FF88688C000
direct allocation
page read and write
FFD000
heap
page read and write
133C6E7E000
trusted library allocation
page read and write
1E914714000
heap
page read and write
E19000
unkown
page readonly
3410000
heap
page read and write
CBE000
stack
page read and write
1E914580000
heap
page read and write
1E914748000
heap
page read and write
7FF8F83B9000
unkown
page read and write
7FF886710000
direct allocation
page read and write
4E744FF000
stack
page read and write
7FF886720000
direct allocation
page read and write
133B68F7000
heap
page read and write
133B6A80000
heap
page execute and read and write
470B000
stack
page read and write
7FF887970000
trusted library allocation
page read and write
133CF2C0000
heap
page read and write
7FF8E612A000
unkown
page read and write
7FF8868B6000
direct allocation
page read and write
7FF8F82D0000
unkown
page readonly
E5D000
heap
page read and write
7FF8879F3000
trusted library allocation
page read and write
6ED000
heap
page read and write
7FF886880000
direct allocation
page execute read
413000
unkown
page readonly
1E9160F4000
unkown
page readonly
7FF8E5C95000
unkown
page execute read
560000
heap
page read and write
7FF8866F0000
direct allocation
page execute read
133C6E11000
trusted library allocation
page read and write
1400000
heap
page read and write
1E91471A000
heap
page read and write
133B6AC6000
heap
page read and write
E2E000
heap
page read and write
B19000
heap
page read and write
E5D000
heap
page read and write
4493000
trusted library allocation
page read and write
5C0000
heap
page read and write
35F1000
trusted library allocation
page read and write
7FF8F82F6000
unkown
page write copy
1E9146FC000
heap
page read and write
1E9147B7000
heap
page read and write
6F7000
heap
page read and write
1E91475E000
heap
page read and write
117D000
heap
page read and write
4E02000
heap
page read and write
DCE000
unkown
page read and write
7FF8866E0000
direct allocation
page read and write
1370000
heap
page read and write
7FF8E6142000
unkown
page read and write
1E9160B9000
heap
page read and write
D8E000
unkown
page readonly
7FF8E8593000
unkown
page readonly
1E91472A000
heap
page read and write
133B5070000
heap
page execute and read and write
114F000
heap
page read and write
3279000
trusted library allocation
page read and write
7FF886734000
direct allocation
page read and write
13AD000
heap
page read and write
7DF4C3470000
trusted library allocation
page execute and read and write
E5D000
heap
page read and write
6CF000
heap
page read and write
1E914719000
heap
page read and write
5F5F000
stack
page read and write
7FF886790000
direct allocation
page read and write
103E000
stack
page read and write
E172FE000
stack
page read and write
7FF887871000
trusted library allocation
page read and write
133B5050000
trusted library allocation
page read and write
7FF88787A000
trusted library allocation
page read and write
DCE000
unkown
page read and write
117D000
heap
page read and write
390000
unkown
page readonly
D3E000
stack
page read and write
A6B000
stack
page read and write
13B2000
heap
page read and write
133B4EF0000
heap
page read and write
7FF886779000
direct allocation
page read and write
DD1000
unkown
page readonly
7FF886698000
direct allocation
page read and write
7FF887AB3000
trusted library allocation
page read and write
1500000
trusted library allocation
page read and write
E1850E000
stack
page read and write
3E64000
heap
page read and write
DAE000
unkown
page read and write
C20000
heap
page read and write
133CF26D000
heap
page read and write
2CDB000
trusted library allocation
page read and write
2CDD000
trusted library allocation
page read and write
3280000
heap
page read and write
7FF886670000
direct allocation
page read and write
1377000
heap
page read and write
138F000
heap
page read and write
1E91472A000
heap
page read and write
E3E000
heap
page read and write
3291000
trusted library allocation
page read and write
1138000
heap
page read and write
D61000
unkown
page execute read
2BDD000
trusted library allocation
page read and write
7FF8868DC000
direct allocation
page read and write
21AF000
stack
page read and write
3840000
heap
page read and write
7FF887A20000
trusted library allocation
page read and write
35FB000
trusted library allocation
page read and write
117D000
heap
page read and write
133B8E3F000
trusted library allocation
page read and write
D61000
unkown
page execute read
133B4DB0000
heap
page read and write
E3E000
heap
page read and write
D60000
unkown
page readonly
2CDE000
trusted library allocation
page read and write
10FA000
stack
page read and write
133B85AB000
trusted library allocation
page read and write
424F000
stack
page read and write
327E000
trusted library allocation
page read and write
246000
heap
page read and write
133B78EA000
trusted library allocation
page read and write
2E60000
heap
page read and write
7FF8E8590000
unkown
page read and write
302D000
stack
page read and write
133B7703000
trusted library allocation
page read and write
DF0000
heap
page read and write
7FF886830000
direct allocation
page read and write
7FF8867A0000
direct allocation
page execute read
57A000
heap
page read and write
DAE000
unkown
page readonly
1E916102000
unkown
page readonly
34B0000
heap
page read and write
13B6000
heap
page read and write
299E000
stack
page read and write
7FF8868F4000
direct allocation
page read and write
FD7000
heap
page read and write
E17A3C000
stack
page read and write
7FF886740000
direct allocation
page read and write
7FF66CB43000
unkown
page readonly
DAE000
unkown
page readonly
504000
heap
page read and write
1184000
heap
page read and write
902000
trusted library allocation
page read and write
1E9160F0000
unkown
page readonly
7FF8868A4000
direct allocation
page read and write
1E91472A000
heap
page read and write
6D7000
heap
page read and write
D60000
unkown
page readonly
13FF000
stack
page read and write
9B000
stack
page read and write
7D0000
heap
page read and write
133CF0AC000
heap
page read and write
72F000
heap
page read and write
3210000
heap
page read and write
1E916100000
unkown
page readonly
7FF66CB37000
unkown
page readonly
7FF8878A2000
trusted library allocation
page read and write
7FF88685C000
direct allocation
page read and write
1380000
heap
page read and write
7FF8877A6000
trusted library allocation
page execute and read and write
133B50F0000
trusted library allocation
page read and write
37F0000
heap
page read and write
1E915FC0000
unkown
page readonly
E6F000
heap
page read and write
2DD0000
trusted library allocation
page read and write
138F000
heap
page read and write
1520000
heap
page read and write
E1737E000
stack
page read and write
E0F000
heap
page read and write
11E0000
heap
page read and write
900000
trusted library allocation
page read and write
7FF8868AC000
direct allocation
page read and write
7FF887B30000
trusted library allocation
page read and write
1E91471D000
heap
page read and write
7FF886708000
direct allocation
page execute read
1E914718000
heap
page read and write
72D000
heap
page read and write
7FF886870000
direct allocation
page read and write
3FB0000
heap
page read and write
AF0000
heap
page read and write
3F93000
trusted library allocation
page read and write
D60000
unkown
page readonly
C1E000
stack
page read and write
7FF8868B0000
direct allocation
page read and write
133B8F34000
trusted library allocation
page read and write
7FF887920000
trusted library allocation
page read and write
D60000
unkown
page readonly
7FF8F83BF000
unkown
page readonly
2BD3000
trusted library allocation
page read and write
7FF886704000
direct allocation
page read and write
7FF887A40000
trusted library allocation
page read and write
35F6000
trusted library allocation
page read and write
1E914730000
heap
page read and write
7FF66CB43000
unkown
page readonly
11E6000
heap
page read and write
11EA000
heap
page read and write
7FF886854000
direct allocation
page read and write
7FF886700000
direct allocation
page execute read
1E914760000
heap
page read and write
2BE0000
trusted library allocation
page read and write
DAE000
unkown
page readonly
2590000
heap
page read and write
35F3000
trusted library allocation
page read and write
115D000
heap
page read and write
26A0000
heap
page read and write
1E91476F000
heap
page read and write
4193000
trusted library allocation
page read and write
7FF8FF5A0000
unkown
page readonly
1E914723000
heap
page read and write
B3C000
stack
page read and write
3270000
trusted library allocation
page read and write
DD1000
unkown
page readonly
D8E000
unkown
page readonly
10BE000
stack
page read and write
3320000
heap
page read and write
FCE000
heap
page read and write
434F000
stack
page read and write
E17B3B000
stack
page read and write
516000
heap
page read and write
126D000
stack
page read and write
3278000
trusted library allocation
page read and write
133CF0D2000
heap
page read and write
1E915F90000
heap
page readonly
E5F000
heap
page read and write
7FF887A19000
trusted library allocation
page read and write
FFD000
heap
page read and write
7FF8E8570000
unkown
page readonly
48E000
stack
page read and write
1E915FC4000
unkown
page readonly
494E000
stack
page read and write
DD1000
unkown
page readonly
D40000
unkown
page readonly
1380000
heap
page read and write
7FF8E6635000
unkown
page read and write
7FF8F0D11000
unkown
page readonly
1E914714000
heap
page read and write
DF0000
heap
page read and write
1E91472A000
heap
page read and write
4163000
trusted library allocation
page read and write
35FD000
trusted library allocation
page read and write
419000
unkown
page readonly
7FF8866CB000
direct allocation
page read and write
7FF886784000
direct allocation
page read and write
5E5F000
stack
page read and write
133CEF6C000
heap
page read and write
4393000
trusted library allocation
page read and write
133B9095000
trusted library allocation
page read and write
7FF887AF0000
trusted library allocation
page execute and read and write
1DC000
stack
page read and write
7FF66CB21000
unkown
page execute read
7FF886770000
direct allocation
page read and write
7FF887A2C000
trusted library allocation
page read and write
3690000
heap
page read and write
30D0000
trusted library allocation
page read and write
55E000
stack
page read and write
133B4F8E000
heap
page read and write
5F40000
heap
page read and write
7FF8F8BB0000
unkown
page readonly
35F7000
trusted library allocation
page read and write
BE0000
heap
page read and write
E30000
heap
page read and write
2F70000
trusted library allocation
page read and write
5D0000
heap
page read and write
419000
unkown
page readonly
569000
heap
page read and write
2DD0000
trusted library allocation
page read and write
133B5080000
trusted library allocation
page read and write
137E000
heap
page read and write
1E915FD2000
unkown
page readonly
6F0000
heap
page read and write
133CF094000
heap
page read and write
4DE000
heap
page read and write
E1868C000
stack
page read and write
133B6AC3000
heap
page read and write
133B4F50000
heap
page read and write
1183000
heap
page read and write
3440000
heap
page read and write
DCE000
unkown
page write copy
7FF8878B0000
trusted library allocation
page execute and read and write
133B9067000
trusted library allocation
page read and write
7FF887900000
trusted library allocation
page read and write
7FF8E6144000
unkown
page read and write
4093000
trusted library allocation
page read and write
7FF8E656F000
unkown
page readonly
133B8C8E000
trusted library allocation
page read and write
378E000
stack
page read and write
224E000
stack
page read and write
133B5144000
heap
page read and write
DAE000
unkown
page readonly
3272000
trusted library allocation
page read and write
37A3000
heap
page read and write
71E000
heap
page read and write
30B0000
heap
page read and write
4402000
heap
page read and write
13AB000
heap
page read and write
133B7038000
trusted library allocation
page read and write
17E6000
heap
page read and write
1E916110000
heap
page read and write
133CF0A8000
heap
page read and write
419000
unkown
page readonly
3800000
trusted library allocation
page read and write
7FF8F855E000
unkown
page read and write
513000
heap
page read and write
2CD4000
trusted library allocation
page read and write
D60000
unkown
page readonly
A91000
unkown
page execute read
7FF887880000
trusted library allocation
page execute and read and write
133B773E000
trusted library allocation
page read and write
2BDB000
trusted library allocation
page read and write
70F000
heap
page read and write
1E915FC2000
unkown
page readonly
400000
unkown
page readonly
133CEFB0000
heap
page read and write
133B4F20000
trusted library section
page read and write
7FF8868D8000
direct allocation
page execute read
3DE000
unkown
page readonly
2CD0000
trusted library allocation
page read and write
3E68000
heap
page read and write
2CD2000
trusted library allocation
page read and write
133B907B000
trusted library allocation
page read and write
733A000
heap
page read and write
35F9000
trusted library allocation
page read and write
1E91471C000
heap
page read and write
2BD9000
trusted library allocation
page read and write
7FF886760000
direct allocation
page read and write
2E70000
heap
page read and write
505000
heap
page read and write
B10000
heap
page read and write
13BF000
heap
page read and write
DCE000
unkown
page write copy
E1773E000
stack
page read and write
391000
unkown
page execute read
380C000
stack
page read and write
2CD6000
trusted library allocation
page read and write
AFE000
unkown
page read and write
A3C000
stack
page read and write
133B4F93000
heap
page read and write
7FF8E6641000
unkown
page read and write
133B7E83000
trusted library allocation
page read and write
DD1000
unkown
page readonly
391000
unkown
page execute read
DB1000
unkown
page readonly
2CDA000
trusted library allocation
page read and write
133CEE87000
heap
page execute and read and write
1150000
heap
page read and write
E2E000
heap
page read and write
7FF8868F0000
direct allocation
page execute read
1E91471A000
heap
page read and write
2BD7000
trusted library allocation
page read and write
3292000
trusted library allocation
page read and write
2DD0000
trusted library allocation
page read and write
E50000
heap
page read and write
3298000
trusted library allocation
page read and write
1E91472D000
heap
page read and write
4A0000
heap
page read and write
7FF8E614F000
unkown
page read and write
37EE000
stack
page read and write
7FF887A28000
trusted library allocation
page read and write
E0D000
heap
page read and write
7FF8F8371000
unkown
page execute read
133B6E11000
trusted library allocation
page read and write
2BD5000
trusted library allocation
page read and write
FFD000
heap
page read and write
2BD8000
trusted library allocation
page read and write
1E9146E0000
trusted library allocation
page read and write
57A000
heap
page read and write
1E918C13000
direct allocation
page read and write
7FF88771C000
trusted library allocation
page execute and read and write
2860000
heap
page read and write
1E91473B000
heap
page read and write
D41000
unkown
page execute read
7FF887A14000
trusted library allocation
page read and write
7FF8867AC000
direct allocation
page read and write
327D000
trusted library allocation
page read and write
133B8797000
trusted library allocation
page read and write
1E916116000
heap
page read and write
DAE000
unkown
page readonly
1E9146C0000
direct allocation
page read and write
1819000
unkown
page readonly
C20000
heap
page read and write
1130000
heap
page read and write
133CF2B0000
trusted library allocation
page read and write
133B6A60000
heap
page read and write
448B000
stack
page read and write
AFE000
unkown
page write copy
1378000
heap
page read and write
1348000
heap
page read and write
3D63000
trusted library allocation
page read and write
7FF88687D000
direct allocation
page read and write
27D0000
heap
page read and write
7FF887A60000
trusted library allocation
page read and write
39C0000
heap
page read and write
2A60000
heap
page read and write
4CF000
heap
page read and write
3296000
trusted library allocation
page read and write
7FF886840000
direct allocation
page read and write
2CE0000
trusted library allocation
page read and write
7FF886682000
direct allocation
page read and write
133B5060000
heap
page readonly
7FF886910000
direct allocation
page read and write
133B7CCE000
trusted library allocation
page read and write
133CEF35000
heap
page read and write
DCE000
unkown
page read and write
5802000
heap
page read and write
3FE000
unkown
page write copy
4E747FE000
stack
page read and write
B16000
heap
page read and write
FD8000
heap
page read and write
E17ABF000
stack
page read and write
7FF887AD0000
trusted library allocation
page read and write
2F70000
trusted library allocation
page read and write
5B7C000
stack
page read and write
1E914760000
heap
page read and write
E1870E000
stack
page read and write
6FE000
heap
page read and write
7FF8E61B1000
unkown
page execute read
32C0000
heap
page read and write
1E9146F0000
heap
page read and write
4693000
trusted library allocation
page read and write
72D000
heap
page read and write
417000
unkown
page write copy
9AA000
heap
page read and write
133B7C10000
trusted library allocation
page read and write
E19000
unkown
page readonly
280000
heap
page read and write
609E000
stack
page read and write
4EF000
heap
page read and write
3290000
trusted library allocation
page read and write
1E918C00000
direct allocation
page read and write
458F000
stack
page read and write
E2E000
heap
page read and write
E1747E000
stack
page read and write
20A000
stack
page read and write
39D0000
heap
page read and write
4263000
trusted library allocation
page read and write
7FF886888000
direct allocation
page execute read
7FF8E6143000
unkown
page write copy
7FF8878E0000
trusted library allocation
page read and write
7DF4C3460000
trusted library allocation
page execute and read and write
A90000
unkown
page readonly
3390000
heap
page read and write
1E914720000
heap
page read and write
7FF886900000
direct allocation
page execute read
E175F7000
stack
page read and write
E3E000
heap
page read and write
7FF8879B0000
trusted library allocation
page read and write
329D000
trusted library allocation
page read and write
7FF8E6638000
unkown
page read and write
133B7CE1000
trusted library allocation
page read and write
3380000
heap
page read and write
30B3000
heap
page read and write
E1870B000
stack
page read and write
133CF098000
heap
page read and write
133CF239000
heap
page read and write
117D000
heap
page read and write
2BD1000
trusted library allocation
page read and write
9A0000
heap
page read and write
7FF887910000
trusted library allocation
page read and write
35FC000
trusted library allocation
page read and write
7FF8E6120000
unkown
page read and write
E1757E000
stack
page read and write
133B4FD8000
heap
page read and write
45C000
stack
page read and write
229AB250000
heap
page read and write
133B5140000
heap
page read and write
3276000
trusted library allocation
page read and write
133B6E98000
trusted library allocation
page read and write
34D0000
heap
page read and write
DE0000
heap
page read and write
589B000
stack
page read and write
3240000
trusted library allocation
page read and write
7FF887980000
trusted library allocation
page read and write
7FF8E5520000
unkown
page readonly
E6F000
heap
page read and write
1146000
heap
page read and write
7FF66CB41000
unkown
page read and write
2F70000
trusted library allocation
page read and write
3240000
heap
page read and write
133CEF32000
heap
page read and write
3330000
heap
page read and write
5D6000
heap
page read and write
3D10000
heap
page read and write
3277000
trusted library allocation
page read and write
7FF8867B0000
direct allocation
page execute read
2920000
heap
page read and write
5F9E000
stack
page read and write
4593000
trusted library allocation
page read and write
3293000
trusted library allocation
page read and write
1819000
unkown
page readonly
1E914711000
heap
page read and write
7FF8E664B000
unkown
page read and write
329B000
trusted library allocation
page read and write
53D000
heap
page read and write
35F0000
trusted library allocation
page read and write
DCE000
unkown
page write copy
D61000
unkown
page execute read
35F8000
trusted library allocation
page read and write
592E000
stack
page read and write
7FF88675C000
direct allocation
page read and write
D5C000
stack
page read and write
E6F000
heap
page read and write
133B7DE3000
trusted library allocation
page read and write
2990000
heap
page read and write
2BDC000
trusted library allocation
page read and write
27A0000
heap
page read and write
E1E000
heap
page read and write
7FF8866F4000
direct allocation
page read and write
3242000
trusted library allocation
page read and write
1340000
heap
page read and write
7FF887990000
trusted library allocation
page read and write
1E9160DE000
heap
page read and write
2292A34F000
direct allocation
page read and write
6DE000
heap
page read and write
70C000
heap
page read and write
7FF8E6147000
unkown
page write copy
133B8CE1000
trusted library allocation
page read and write
B6B000
stack
page read and write
1E914733000
heap
page read and write
7FF8F0D10000
unkown
page read and write
ADE000
unkown
page readonly
4DE000
heap
page read and write
E7F000
heap
page read and write
D10000
trusted library allocation
page read and write
7FF8F8565000
unkown
page readonly
7FF886754000
direct allocation
page read and write
3280000
unkown
page read and write
D41000
unkown
page execute read
73D000
heap
page read and write
7FF887890000
trusted library allocation
page execute and read and write
7FF8FF5A1000
unkown
page execute read
D60000
unkown
page readonly
7FF88673C000
direct allocation
page read and write
2CD9000
trusted library allocation
page read and write
401000
unkown
page execute read
7FF886693000
direct allocation
page read and write
6B8000
heap
page read and write
6EF000
heap
page read and write
138F000
heap
page read and write
4E7467F000
stack
page read and write
108E000
stack
page read and write
6FE000
heap
page read and write
229AAE50000
direct allocation
page read and write
1E91474A000
heap
page read and write
7FF8876E0000
trusted library allocation
page read and write
7FF8F85DA000
unkown
page read and write
35F2000
trusted library allocation
page read and write
133B7CA7000
trusted library allocation
page read and write
7FF8E5521000
unkown
page execute read
480F000
stack
page read and write
2CD1000
trusted library allocation
page read and write
E4D000
heap
page read and write
7FF88678C000
direct allocation
page read and write
1368000
heap
page read and write
960000
heap
page read and write
133B4FAF000
heap
page read and write
26B0000
heap
page read and write
E17837000
stack
page read and write
117F000
heap
page read and write
11C0000
heap
page read and write
FD6000
heap
page read and write
35FE000
trusted library allocation
page read and write
7FF886738000
direct allocation
page execute read
D20000
trusted library allocation
page read and write
3295000
trusted library allocation
page read and write
7FF8878F0000
trusted library allocation
page read and write
133B8F77000
trusted library allocation
page read and write
26F0000
heap
page read and write
1E914760000
heap
page read and write
2CD3000
trusted library allocation
page read and write
7FF887860000
trusted library allocation
page read and write
ADE000
unkown
page readonly
6FE000
heap
page read and write
28AE000
stack
page read and write
93E000
stack
page read and write
133CF0A4000
heap
page read and write
133B4FDC000
heap
page read and write
7FF8F8562000
unkown
page read and write
133B78A1000
trusted library allocation
page read and write
4EF000
heap
page read and write
322E000
stack
page read and write
E30000
heap
page read and write
7FF887776000
trusted library allocation
page read and write
2DD0000
trusted library allocation
page read and write
7FF8E6156000
unkown
page write copy
7FF8F8525000
unkown
page readonly
4E7437F000
stack
page read and write
26E0000
heap
page read and write
30E0000
heap
page read and write
4463000
trusted library allocation
page read and write
133CF0A0000
heap
page read and write
13B6000
heap
page read and write
10B0000
heap
page read and write
2F90000
heap
page read and write
133CF104000
heap
page read and write
133B85B4000
trusted library allocation
page read and write
7FF8F0D01000
unkown
page execute read
3299000
trusted library allocation
page read and write
4E0000
heap
page read and write
329C000
trusted library allocation
page read and write
7FF88670C000
direct allocation
page read and write
7FF8E6154000
unkown
page read and write
116D000
heap
page read and write
1E91472E000
heap
page read and write
7FF886660000
direct allocation
page read and write
240000
heap
page read and write
3850000
trusted library allocation
page read and write
2CD5000
trusted library allocation
page read and write
B90000
heap
page read and write
4D6000
heap
page read and write
1E914760000
heap
page read and write
2DD0000
trusted library allocation
page read and write
7FF8866FC000
direct allocation
page read and write
7FF8E6135000
unkown
page write copy
2B80000
heap
page read and write
133B7855000
trusted library allocation
page read and write
7FF8876C4000
trusted library allocation
page read and write
1156000
heap
page read and write
7FF8E61B0000
unkown
page readonly
12E0000
heap
page read and write
DCE000
unkown
page read and write
7FF8E8591000
unkown
page write copy
F20000
trusted library allocation
page read and write
FEF000
heap
page read and write
1E914770000
heap
page read and write
133B4EB0000
heap
page read and write
329A000
trusted library allocation
page read and write
1E91471B000
heap
page read and write
4D7000
heap
page read and write
133B6AC0000
heap
page read and write
D60000
unkown
page readonly
14FE000
stack
page read and write
2890000
heap
page read and write
DB1000
unkown
page readonly
E67000
heap
page read and write
6EE000
stack
page read and write
72F000
heap
page read and write
57A000
heap
page read and write
7FF887AC0000
trusted library allocation
page read and write
133B50B0000
trusted library allocation
page read and write
7FF8878D0000
trusted library allocation
page read and write
2DD0000
trusted library allocation
page read and write
3FE000
unkown
page read and write
AD0000
heap
page read and write
7FF8866BC000
direct allocation
page read and write
133CEF3A000
heap
page read and write
2710000
heap
page read and write
133B8FDF000
trusted library allocation
page read and write
133B7B7C000
trusted library allocation
page read and write
133B8BA2000
trusted library allocation
page read and write
31E0000
heap
page read and write
31D0000
heap
page read and write
C70000
heap
page read and write
7FF887B50000
trusted library allocation
page read and write
13C3000
heap
page read and write
7FF8E8571000
unkown
page execute read
7FF8F0D00000
unkown
page readonly
7FF8879A0000
trusted library allocation
page read and write
12BE000
stack
page read and write
133CEE80000
heap
page execute and read and write
7FF8E613F000
unkown
page write copy
35E0000
heap
page read and write
EDF000
stack
page read and write
73D000
heap
page read and write
32A0000
trusted library allocation
page read and write
1E915FD0000
unkown
page readonly
7FF886640000
direct allocation
page execute read
6CC000
heap
page read and write
E173FE000
stack
page read and write
114C000
heap
page read and write
55C000
stack
page read and write
7FF886788000
direct allocation
page execute read
7FF8F85DC000
unkown
page readonly
E17273000
stack
page read and write
3600000
trusted library allocation
page read and write
2F20000
heap
page read and write
FB0000
heap
page read and write
33C0000
heap
page read and write
7FF8876C2000
trusted library allocation
page read and write
7FF8FF5DB000
unkown
page readonly
7FF8E664E000
unkown
page readonly
7FF8878A8000
trusted library allocation
page read and write
7FF8F83BC000
unkown
page write copy
1E916104000
unkown
page readonly
D30000
heap
page read and write
1E914738000
heap
page read and write
51E000
heap
page read and write
1550000
heap
page read and write
There are 1036 hidden memdumps, click here to show them.