IOC Report
WinMerge-2.16.42.1-x64-Setup.exe

loading gif

Files

File Path
Type
Category
Malicious
WinMerge-2.16.42.1-x64-Setup.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
C:\Users\user\AppData\Local\Temp\is-HF95R.tmp\WinMerge-2.16.42.1-x64-Setup.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Program Files\WinMerge\ColorSchemes\Default.ini (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\Midnight.ini (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\Modern.ini (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\Solarized Dark.ini (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\Solarized Light.ini (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\is-8UKVC.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\is-AQH9Q.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\is-IO4Q6.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\is-PBBPB.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\is-RSHNB.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\LICENSE-2.0.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\URL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\is-6G321.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\is-DS1S3.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\is-QBVN2.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\tika.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\DownloadFiles.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\LICENSE.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\URL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\is-1L4US.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\is-NN7IM.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\is-P08A3.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\java.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\URL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\is-6NH6U.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\is-6OQG1.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\is-OQGB5.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\license.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\plantuml.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\dumpbin\dumpbin.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\dumpbin\is-F97RA.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\ildasm\ildasm.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\ildasm\is-4B0OG.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\is-CPJ9E.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\jq\COPYING (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Commands\jq\is-E7351.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Commands\jq\is-FJVRV.tmp
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\jq\jq.exe (copy)
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\LICENSE.md (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Commands\md4c\is-0IU8S.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\md4c\is-BHR6Q.tmp
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\is-NQKQ9.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Commands\md4c\is-OJLM1.tmp
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\is-PKEVK.tmp
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\libmd4c-html.dll (copy)
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\libmd4c.dll (copy)
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\md2html.bat (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\md4c\md2html.exe (copy)
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\is-0P0FI.tmp
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\is-1GCQU.tmp
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\is-880H6.tmp
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\msys-2.0.dll (copy)
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\msys-gcc_s-1.dll (copy)
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\patch.exe (copy)
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\cygwin\cygwin.ldif (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\cygwin\is-0GOII.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\COPYING (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\CYGWIN_LICENSE (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\cygserver.README (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\is-K0II3.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\is-MK4KP.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\is-NUC84.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\info\is-97RI7.tmp
gzip compressed data, max compression, from Unix, original size modulo 2^32 210247
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\info\is-RFVQ3.tmp
gzip compressed data, max compression, from Unix, original size modulo 2^32 36614
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\info\libgomp.info.gz (copy)
gzip compressed data, max compression, from Unix, original size modulo 2^32 210247
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\info\libquadmath.info.gz (copy)
gzip compressed data, max compression, from Unix, original size modulo 2^32 36614
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\licenses\gcc-libs\RUNTIME.LIBRARY.EXCEPTION (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\licenses\gcc-libs\is-HQH5N.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man1\is-D4SL0.tmp
gzip compressed data, max compression, from Unix, original size modulo 2^32 34708
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man1\patch.1.gz (copy)
gzip compressed data, max compression, from Unix, original size modulo 2^32 34708
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man3\is-E25BL.tmp
gzip compressed data, max compression, from Unix, original size modulo 2^32 17339
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man3\regex.3.gz (copy)
gzip compressed data, max compression, from Unix, original size modulo 2^32 17339
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man7\is-9M5G8.tmp
gzip compressed data, max compression, from Unix, original size modulo 2^32 12431
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man7\regex.7.gz (copy)
gzip compressed data, max compression, from Unix, original size modulo 2^32 12431
dropped
C:\Program Files\WinMerge\Commands\q\LICENSE.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\q\URL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\q\is-C59QH.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\q\is-DOAEN.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\q\is-N05SV.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\q\q.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\LICENSE.md (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\is-2TL7E.tmp
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\is-J16CJ.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\is-VSMSJ.tmp
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\tidy.dll (copy)
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\tidy.exe (copy)
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\yq\LICENSE.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\yq\URL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\yq\is-DIATK.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\yq\is-RBRPC.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\yq\is-TPH1A.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\yq\yq.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Contributors.txt (copy)
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\ChangeLog.html (copy)
HTML document, Unicode text, UTF-8 text, with very long lines (10419), with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\GPL.rtf (copy)
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
dropped
C:\Program Files\WinMerge\Docs\ReadMe.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\ReleaseNotes.html (copy)
HTML document, ASCII text, with very long lines (10419), with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\WinMerge.chm (copy)
MS Windows HtmlHelp Data
dropped
C:\Program Files\WinMerge\Docs\is-56MFI.tmp
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
dropped
C:\Program Files\WinMerge\Docs\is-BMD2A.tmp
HTML document, Unicode text, UTF-8 text, with very long lines (10419), with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\is-C129A.tmp
HTML document, ASCII text, with very long lines (10419), with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\is-PI6OJ.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\is-QH5MF.tmp
MS Windows HtmlHelp Data
dropped
C:\Program Files\WinMerge\Filters\ADAMulti.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\ASPNET.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\CSharp_loose.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Delphi.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\FileFilter.tmpl (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Frontpage.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\MASM.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Merge_GnuC_loose.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Merge_VB_loose.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Merge_VC_loose.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\SourceControl.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Symbian.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\XML_html.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-42S43.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-6N9U1.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-9EULG.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-A1JNB.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-BVLTA.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-F6A3H.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-FNCNS.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-FNJFI.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-GGI4M.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-KMDT6.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-LOMSC.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-N77QE.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-T4POQ.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\ChangeLog.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\Contributors.txt (copy)
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\History.txt (copy)
ISO-8859 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\Links.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\Sample.tpl (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\is-4ACJK.tmp
ISO-8859 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\is-93L49.tmp
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\is-DIQ1I.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\is-F7TDG.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\is-PUD7L.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\GPL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Languages\de.po (copy)
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\fr.po (copy)
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text, with very long lines (302)
dropped
C:\Program Files\WinMerge\Frhed\Languages\heksedit.lng (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-200EI.tmp
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-2MN8C.tmp
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-CCQC7.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-HUG4Q.tmp
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-O2DB3.tmp
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text, with very long lines (302)
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-S9C5V.tmp
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\ja.po (copy)
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\nl.po (copy)
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\sl.po (copy)
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\hekseditU.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Frhed\is-2MFA1.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\is-935IJ.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\LogoImages\WinMergeLogo.png (copy)
PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files\WinMerge\LogoImages\WinMergeLogoSmall.png (copy)
PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files\WinMerge\LogoImages\is-96KGB.tmp
PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files\WinMerge\LogoImages\is-CS9M3.tmp
PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files\WinMerge\Merge7z\7z.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Merge7z\History.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Merge7z\Lang\af.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\an.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ar.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ast.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\az.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ba.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\be.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\bg.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\bn.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\br.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ca.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\co.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\cs.txt (copy)
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Merge7z\Lang\cy.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\da.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\de.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\el.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\eo.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\es.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\et.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\eu.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ext.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\fa.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\fi.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\fr.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\fur.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\fy.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ga.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\gl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\gu.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\he.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\hi.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\hr.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\hu.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\hy.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\id.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\io.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-01LNJ.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-07BJA.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-0IRRC.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-1OFLI.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-1SB7D.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-27I22.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-2O7O2.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-33DHC.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-3731M.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-392DM.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-3DP3G.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-3T0M2.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-3UTCI.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-46539.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-4A1LQ.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-4DLTP.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-4K9R7.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-4MOF6.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-5ICPD.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-6KSS7.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-6PJLL.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-70O2M.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-718BR.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-79BHC.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-7LQUD.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-8EBB0.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-8O0N0.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-9AA3C.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-9F7PJ.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-9JS4V.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-9UNSO.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-A4HNU.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-AU4P3.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-C4LM4.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-CLMUB.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-CPONI.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-DO11C.tmp
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-E8V58.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-E9VD0.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-EDUEO.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-EE207.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-ET271.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-EUQ5Q.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-FAEPP.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-FD31F.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-FHELA.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-FJHEN.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-FK0UG.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-FOVOP.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-GA276.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-GIFJG.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-GIMGK.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-GQOE0.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-GQPKU.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-GUMVN.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-HER2G.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-HNAUF.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-IHDI8.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-IRL8E.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-J1N08.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-J984S.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-JDFNF.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-JRH28.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-K5BUD.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-KH76E.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-L0DOI.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-LCFR4.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-MENC1.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-MG6R1.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-N0RHV.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-P32TC.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-P6A6M.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-PKQIJ.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-PTD7L.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-PU4EF.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-Q81PM.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-RBN1M.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-RKJVB.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-S8INT.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-SBJ13.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-SCC10.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-SPDD7.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-T09KQ.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-TEEG1.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-TI0RK.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-TJO52.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-TK9IC.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-UD6PT.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-UFTBK.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-UV5E7.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-VJL97.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-VTBA3.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\it.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ja.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ka.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\kaa.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\kab.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\kk.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ko.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ku-ckb.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ku.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ky.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\lij.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\lt.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\lv.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\mk.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\mn.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\mng.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\mng2.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\mr.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ms.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\nb.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ne.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\nl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\nn.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\pa-in.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\pl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ps.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\pt-br.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\pt.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ro.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ru.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sa.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\si.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sk.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sq.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sr-spc.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sr-spl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sv.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sw.txt (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ta.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\tg.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\th.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\tk.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\tr.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\tt.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ug.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\uk.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\uz-cyrl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\uz.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\va.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\vi.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\yo.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\zh-cn.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\zh-tw.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\License.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Merge7z\Merge7z.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Merge7z\is-3Q5AC.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Merge7z\is-6RILS.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Merge7z\is-8AOD8.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Merge7z\is-VGS3E.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\AI.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\ApplyPatch.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\CompareMSExcelFiles.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\CompareMSPowerPointFiles.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\CompareMSVisioFiles.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\CompareMSWordFiles.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\IgnoreColumns.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\IgnoreCommentsC.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\IgnoreFieldsComma.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\IgnoreFieldsTab.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\IgnoreLeadingLineNumbers.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\Plugins.xml (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\PrediffLineFilter.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\editor addin.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\insert datetime.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-3QJAR.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-49CBC.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\is-4O62B.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\is-6EJQ2.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-78I73.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-A9BMJ.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\is-ASUI9.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-EQOE1.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-M0P5H.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-MC8SA.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-ML646.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-SU96U.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-TNEMF.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-U9QM3.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-UOVVP.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\ShellExtensionU.dll (copy)
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\ShellExtensionX64.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinIMerge\GPL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinIMerge\WinIMergeLib.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinIMerge\freeimage-license-gplv2.txt (copy)
ASCII text, with very long lines (803), with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinIMerge\is-PH40M.tmp
ASCII text, with very long lines (803), with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinIMerge\is-QSS6A.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinIMerge\is-U20AJ.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinMerge32BitPluginProxy.exe (copy)
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\WinMergeContextMenu.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinMergeContextMenuPackage.msix (copy)
Zip archive data, at least v4.5 to extract, compression method=deflate
dropped
C:\Program Files\WinMerge\WinMergeU.VisualElementsManifest.xml (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinMergeU.exe (copy)
PE32+ executable (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinWebDiff\LICENSE.txt (copy)
ASCII text, with very long lines (755), with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\LICENSE_LibXDiff.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\LICENSE_RapidJSON.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\LICENSE_WebView2.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\LICENSE_wil.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\WinWebDiffLib.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinWebDiff\is-3RCE5.tmp
ASCII text, with very long lines (755), with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\is-4KGDL.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\is-8FE3E.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\is-BBDTH.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\is-O9CED.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\is-PRA2U.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\is-10V3S.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\is-2Q494.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\is-49D4M.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\is-8JE44.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\is-AB4CR.tmp
PE32+ executable (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\is-ANPMO.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\is-H85BR.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\is-JU2MR.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\is-JVB9Q.tmp
Zip archive data, at least v4.5 to extract, compression method=deflate
dropped
C:\Program Files\WinMerge\is-PGCN6.tmp
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\unins000.dat
InnoSetup Log 64-bit WinMerge, version 0x418, 61365 bytes, 302494\37\user\376, C:\Program Files\WinMerge\376\377\377\007
dropped
C:\Program Files\WinMerge\unins000.exe (copy)
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\unins000.msg
InnoSetup messages, version 5.5.3, 221 messages (UTF-16), &About Setup...
dropped
C:\Program Files\WinMerge\vcomp140.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge\User's Guide.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Thu Oct 24 09:20:20 2024, mtime=Thu Oct 24 09:20:20 2024, atime=Sun Jul 28 20:00:50 2024, length=1029392, window=hide
dropped
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge\WinMerge.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Thu Oct 24 09:20:18 2024, mtime=Thu Oct 24 09:20:19 2024, atime=Sun Jul 28 20:11:38 2024, length=5942376, window=hide
dropped
C:\Users\user\AppData\Local\Temp\is-57SIR.tmp\_isetup\_setup64.tmp
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BF8GAP1YQKBCKBJTASWO.temp
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\db37f98b03e7cdde.customDestinations-ms (copy)
data
dropped
There are 417 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\AppData\Local\Temp\is-HF95R.tmp\WinMerge-2.16.42.1-x64-Setup.tmp
"C:\Users\user\AppData\Local\Temp\is-HF95R.tmp\WinMerge-2.16.42.1-x64-Setup.tmp" /SL5="$20436,9350605,121344,C:\Users\user\Desktop\WinMerge-2.16.42.1-x64-Setup.exe"
malicious
C:\Users\user\Desktop\WinMerge-2.16.42.1-x64-Setup.exe
"C:\Users\user\Desktop\WinMerge-2.16.42.1-x64-Setup.exe"
C:\Windows\System32\regsvr32.exe
"C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\WinMerge\ShellExtensionX64.dll"
C:\Program Files\WinMerge\WinMerge32BitPluginProxy.exe
"C:\Program Files\WinMerge\WinMerge32BitPluginProxy.exe" /RegServer
C:\Program Files\WinMerge\WinMergeU.exe
"C:\Program Files\WinMerge\WinMergeU.exe" /s- /minimize /noninteractive /set-usertasks-to-jumplist 4097
C:\Program Files\WinMerge\WinMergeU.exe
"C:\Program Files\WinMerge\WinMergeU.exe"

URLs

Name
IP
Malicious
http://www.gnu.org/
unknown
http://www.cl.cam.ac.uk/~mgk25/unicode.html
unknown
https://github.com/htacg/tidy-html5/blob/master/README/LOCALIZE.md
unknown
https://github.com/wvxwxvw
unknown
https://sourceforge.net/tracker/?group_id=13216&atid=363216
unknown
http://www.appinf.com/properties/bla-activation-threshold
unknown
https://github.com/WinMerge/winmerge-v2/issues/41
unknown
https://stedolan.github.io/jq/)
unknown
https://freeimage.sourceforge.io/)
unknown
https://github.com/WinMerge/winmerge/discussions.
unknown
https://winmerge.org/
unknown
https://www.transifex.com/rockytdr/teams/91037/nl/)
unknown
https://github.com/WinMerge/winmerge
unknown
https://winmerge.org.
unknown
http://www.html-tidy.org/)
unknown
http://dev.w3.org/html5/spec-author-view
unknown
http://xml.org/sax/features/namespace-prefixes
unknown
https://winmerge.org/.
unknown
http://bonedaddy.net/pabs3/files/frhed/
unknown
http://xml.org/sax/features/string-interning
unknown
https://winmerge.org
unknown
http://repository.certum.pl/ccsca2021.cer0
unknown
https://sourceforge.net/tracker/?group_id=13216&atid=113216
unknown
https://winmerge.org:
unknown
http://192.168.1.101:3703/soap/WinMerge/Program%20Icons/Splash%20and%20About/concept.psd
unknown
http://sourceforge.net/tracker/?group_id=13216&atid=113216
unknown
https://jrsoftware.org/isinfo.php)
unknown
https://github.com/msys2/MSYS2-packages/tree/master/patch)
unknown
http://repository.certum.pl/ctsca2021.cer0
unknown
https://ethanschoonover.com/solarized/
unknown
https://manual.winmerge.org
unknown
https://github.com/Patriccollu/Lingua_Corsa-Infurmatica/#readme
unknown
https://downzen.com
unknown
http://www.appinf.com/properties/bla-maximum-amplification
unknown
https://7-zip.org/history.txt
unknown
http://ccsca2021.ocsp-certum.com05
unknown
https://github.com/plantuml/plantuml/releases/download/v1.2023.0/plantuml-1.2023.0-sources.jar
unknown
http://www.palkornel.hu/innosetup%1
unknown
https://github.com/mikefarah/yq/archive/refs/tags/v4.11.1.zip
unknown
http://www.certum.pl/CPS0
unknown
http://google.github.io/googletest/)
unknown
http://www.innosetup.com/
unknown
https://WinMerge.org/1
unknown
https://manual.winmerge.org/index.htmlDocs/WinMerge%s.chmhttps://winmerge.org/
unknown
http://winmerge.org/docs/manual/
unknown
http://www.gnu.org/philosophy/why-not-lgpl.html
unknown
http://crl.certum.pl/ctnca.crl0k
unknown
http://validator.w3.org/nu/
unknown
https://github.com/git/git/tree/master/xdiff)
unknown
https://cygwin.com/problems.html
unknown
https://bugs.winmerge.org/
unknown
http://frhed.sourceforge.netN
unknown
https://github.com/WinMerge/winwebdiff/)
unknown
https://sourceforge.net/forum/?group_id=13216
unknown
https://github.com/winmerge/winimergeB
unknown
https://manual.winmerge.org/
unknown
https://github.com/WinMerge/winmerge/blob/master/ColorSchemes/Solarized%20Dark.ini
unknown
https://forums.winmerge.org/.
unknown
https://pocoproject.org/)
unknown
http://www.zeroscience.mk/mk/vulnerabilities/ZSL-2011-4997.php
unknown
https://repo1.maven.org/maven2/org/apache/tika/tika-app/2.6.0/tika-app-2.6.0.jar
unknown
http://www.html-tidy.org/
unknown
http://frhed.sourceforge.net/Docs
unknown
http://xml.org/sax/features/validation
unknown
http://frhed.sourceforge.net/
unknown
https://github.com/harelba/q/archive/refs/tags/2.0.19.zip
unknown
https://manual.winmerge.org/Quick_start.html.
unknown
https://savannah.gnu.org/projects/patch/
unknown
http://www.appinf.com/features/enable-partial-readshttp://www.appinf.com/properties/bla-maximum-ampl
unknown
https://github.com/htacg/tidy-html5/issues/
unknown
http://www.html-tidy.org/Accessibility/
unknown
https://manual.winmerge.org/.
unknown
http://xml.org/sax/properties/lexical-handler
unknown
http://xml.org/sax/features/string-interning&acQ8
unknown
http://repository.certum.pl/ctsca2021.cer0A
unknown
http://www.appinf.com/features/enable-partial-reads
unknown
https://winmerge.orgn#
unknown
http://crl.certum.pl/ctsca2021.crl0o
unknown
https://WinMerge.org/q
unknown
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
unknown
https://winmerge.org/translations/http://www.gnu.org/licenses/gpl-2.0.html&amp
unknown
https://github.com/harelba/q/releases/download/2.0.19/q-AMD64-Windows.exe
unknown
http://ccsca2021.crl.certum.pl/ccsca2021.crl0s
unknown
https://github.com/microsoft/wil)
unknown
http://www.geocities.co.jp/SiliconValley-SanJose/8165/winmerge.htmld
unknown
https://github.com/keeleyt83/winmerge-solarized-dark
unknown
http://xml.org/sax/features/external-parameter-entities
unknown
https://www.boost.org/)
unknown
https://frhed.sourceforge.net/)
unknown
https://forums.winmerge.org
unknown
https://jrsoftware.org/files/is/license.txt)
unknown
https://TamilNeram.github.io
unknown
https://github.com/WinMerge/winmerge/issues
unknown
http://subca.ocsp-certum.com05
unknown
https://gyazo.com/f5f267546db27f2dc801c00df8cb4251
unknown
http://subca.ocsp-certum.com02
unknown
https://github.com/WinMerge/winmerge/discussions
unknown
http://subca.ocsp-certum.com01
unknown
http://home.c2i.net/freewaretips/
unknown
http://xml.org/sax/features/external-parameter-entitieson
unknown
There are 90 hidden URLs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge.Project.File
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge.Project.File\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge.Project.File\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge.Project.File\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WinMerge.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WinMergeU.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Thingamahoochie\WinMerge
Executable
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge
Executable
HKEY_LOCAL_MACHINE\SOFTWARE\Thingamahoochie\WinMerge
ContextMenuEnabled
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge
ContextMenuEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Thingamahoochie\WinMerge\Locale
LanguageId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Setup Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: App Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Icon Group
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Setup Type
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Selected Components
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Deselected Components
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Selected Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Deselected Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Language
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
DisplayIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
QuietUninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
URLUpdateInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
NoModify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
NoRepair
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
InstallDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
MajorVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
MinorVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup CodeFile: UseAs3WayMergeTool
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup CodeFile: MergeAtRightPane
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup CodeFile: MergeAtCenterPane
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup CodeFile: MergeAtLeftPane
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup CodeFile: AutoMergeAtStartup
HKEY_LOCAL_MACHINE\SOFTWARE\Thingamahoochie\WinMerge
ContextMenuEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShellExtension.WinMergeShell.1
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShellExtension.WinMergeShell.1\CLSID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShellExtension.WinMergeShell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShellExtension.WinMergeShell\CLSID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShellExtension.WinMergeShell\CurVer
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\ProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\VersionIndependentProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\background\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\background\shellex\DragDropHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\ProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\VersionIndependentProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\background\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\background\shellex\DragDropHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{06029E17-28B5-456A-B866-4E79D98612FD}\1.0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{06029E17-28B5-456A-B866-4E79D98612FD}\1.0\FLAGS
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{06029E17-28B5-456A-B866-4E79D98612FD}\1.0\0\win64
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{06029E17-28B5-456A-B866-4E79D98612FD}\1.0\HELPDIR
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge32BitPluginProxy.Loader.1
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge32BitPluginProxy.Loader.1\CLSID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge32BitPluginProxy.Loader
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge32BitPluginProxy.Loader\CurVer
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\ProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\VersionIndependentProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\LocalServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\LocalServer32
ServerExecutable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\Version
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B8AA7CCC-2D80-4FCB-BF92-145831C091F6}\1.0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B8AA7CCC-2D80-4FCB-BF92-145831C091F6}\1.0\FLAGS
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B8AA7CCC-2D80-4FCB-BF92-145831C091F6}\1.0\0\win32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B8AA7CCC-2D80-4FCB-BF92-145831C091F6}\1.0\HELPDIR
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\TypeLib
Version
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Locale
LanguageId
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
UserFilterPath
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge
UserTasksFlags
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
MainLeft
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
MainTop
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
MainRight
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
MainBottom
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
MainMax
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
TabBarAutoMaxWidth
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
UserFilterPath
There are 118 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
B08000
direct allocation
page read and write
64F000
heap
page read and write
6C0000
heap
page read and write
53E8000
direct allocation
page read and write
7FF64B441000
unkown
page readonly
874EFFE000
stack
page read and write
22F0F513000
heap
page read and write
50D000
unkown
page write copy
448C000
direct allocation
page read and write
213701B0000
heap
page read and write
22F0F2DD000
heap
page read and write
213704A5000
heap
page read and write
4B2E000
stack
page read and write
5CE000
unkown
page readonly
401000
unkown
page execute read
51FE000
direct allocation
page read and write
32B3000
heap
page read and write
22F0F2DC000
heap
page read and write
5A7000
heap
page read and write
5FB000
heap
page read and write
5467000
direct allocation
page read and write
213702BE000
heap
page read and write
5E8000
heap
page read and write
22F0F240000
heap
page read and write
6F60000
direct allocation
page read and write
2542000
direct allocation
page read and write
213702BF000
heap
page read and write
EA0000
heap
page read and write
7FF64B5A0000
unkown
page write copy
5F5000
heap
page read and write
64C000
heap
page read and write
21370274000
heap
page read and write
1440000
heap
page read and write
5F4000
heap
page read and write
8230000
heap
page read and write
32A5000
heap
page read and write
5FD000
heap
page read and write
53F9000
direct allocation
page read and write
B9E1FFB000
stack
page read and write
644000
heap
page read and write
23A2000
direct allocation
page read and write
7FF64B140000
unkown
page readonly
5B3000
heap
page read and write
5EB000
heap
page read and write
4511000
direct allocation
page read and write
22F0F4F0000
unkown
page readonly
31F0000
direct allocation
page read and write
22C0000
direct allocation
page read and write
5238000
direct allocation
page read and write
32A0000
heap
page read and write
506000
unkown
page read and write
7FF64B5AD000
unkown
page read and write
7FF64B5B9000
unkown
page readonly
647000
heap
page read and write
523F000
direct allocation
page read and write
213702A5000
heap
page read and write
213702B5000
heap
page read and write
7FF64B140000
unkown
page readonly
22F10EE5000
heap
page read and write
5271000
direct allocation
page read and write
608000
heap
page read and write
AFA000
direct allocation
page read and write
44BA000
direct allocation
page read and write
19C000
stack
page read and write
2253000
heap
page read and write
7FF64B5DD000
unkown
page write copy
7FF64B471000
unkown
page readonly
148E000
stack
page read and write
7FF64B57E000
unkown
page write copy
5CA000
unkown
page read and write
2372000
direct allocation
page read and write
5F3000
heap
page read and write
7FF64B5A0000
unkown
page write copy
14CE000
stack
page read and write
23B8000
direct allocation
page read and write
22F12EC0000
trusted library allocation
page read and write
419000
unkown
page write copy
700000
heap
page read and write
11FE000
stack
page read and write
51A000
unkown
page readonly
7FE32000
direct allocation
page read and write
513000
unkown
page readonly
659000
heap
page read and write
5F8000
heap
page read and write
53F2000
direct allocation
page read and write
51F0000
direct allocation
page read and write
B9E1DFD000
stack
page read and write
AD6000
direct allocation
page read and write
707000
heap
page read and write
7FF64B441000
unkown
page readonly
230B000
direct allocation
page read and write
234E000
direct allocation
page read and write
213702B5000
heap
page read and write
64A000
heap
page read and write
450A000
direct allocation
page read and write
607000
heap
page read and write
213702BB000
heap
page read and write
6D0000
heap
page read and write
5B0000
unkown
page readonly
601000
heap
page read and write
22F0F430000
heap
page read and write
7FF64B5B9000
unkown
page readonly
22F0F450000
heap
page read and write
22F0F53C000
heap
page read and write
5B0000
unkown
page readonly
5BB000
heap
page read and write
9CF000
stack
page read and write
22F0F2D4000
heap
page read and write
44D6000
direct allocation
page read and write
2250000
heap
page read and write
7FF64B5B9000
unkown
page readonly
22B9000
heap
page read and write
44A4000
direct allocation
page read and write
AF3000
direct allocation
page read and write
874F1FF000
stack
page read and write
7FF64B5AD000
unkown
page read and write
B9E1EFE000
stack
page read and write
3140000
heap
page read and write
7FE2E000
direct allocation
page read and write
213702A2000
heap
page read and write
21370281000
heap
page read and write
53BE000
direct allocation
page read and write
5222000
direct allocation
page read and write
22F10EE0000
heap
page read and write
400000
unkown
page readonly
5460000
direct allocation
page read and write
53E0000
direct allocation
page read and write
649000
heap
page read and write
93000
stack
page read and write
500000
heap
page read and write
E6D000
stack
page read and write
41C000
unkown
page readonly
B9E18DE000
stack
page read and write
A52000
direct allocation
page read and write
5BF000
heap
page read and write
424000
unkown
page readonly
6D8000
heap
page read and write
44C8000
direct allocation
page read and write
44C1000
direct allocation
page read and write
18D000
stack
page read and write
235A000
direct allocation
page read and write
417000
unkown
page read and write
5CD000
heap
page read and write
502000
unkown
page write copy
36EF000
stack
page read and write
22F0F260000
heap
page read and write
646000
heap
page read and write
35EE000
stack
page read and write
5CE000
unkown
page readonly
5214000
direct allocation
page read and write
21370180000
heap
page read and write
A95000
direct allocation
page read and write
649000
heap
page read and write
412000
unkown
page write copy
5A9000
heap
page read and write
2137029F000
heap
page read and write
21370190000
heap
page read and write
12F3000
stack
page read and write
21370296000
heap
page read and write
5287000
direct allocation
page read and write
7FF64B5B6000
unkown
page read and write
12F1000
stack
page read and write
213702BE000
heap
page read and write
213702BE000
heap
page read and write
21370275000
heap
page read and write
874F0FE000
stack
page read and write
874E93E000
stack
page read and write
2137028C000
heap
page read and write
4520000
direct allocation
page read and write
21B0000
direct allocation
page execute and read and write
65B000
heap
page read and write
874E94A000
stack
page read and write
530000
heap
page read and write
588000
heap
page read and write
528E000
direct allocation
page read and write
644000
heap
page read and write
32A0000
heap
page read and write
5BB000
heap
page read and write
5D2000
heap
page read and write
232F000
direct allocation
page read and write
213702BE000
heap
page read and write
29F0000
trusted library allocation
page read and write
3320000
heap
page read and write
7FF64B141000
unkown
page execute read
22F0F4D0000
heap
page read and write
5278000
direct allocation
page read and write
44AB000
direct allocation
page read and write
580000
heap
page read and write
5295000
direct allocation
page read and write
44B2000
direct allocation
page read and write
9B000
stack
page read and write
706000
heap
page read and write
21370280000
heap
page read and write
401000
unkown
page execute read
7FF64B5B9000
unkown
page readonly
356F000
stack
page read and write
14F0000
heap
page read and write
32A0000
heap
page read and write
21370290000
heap
page read and write
5E5000
heap
page read and write
5B1000
unkown
page execute read
5DF000
heap
page read and write
5CF000
heap
page read and write
7FF64B471000
unkown
page readonly
7FF64B57E000
unkown
page read and write
21370294000
heap
page read and write
BE0000
heap
page read and write
22F0F2D8000
heap
page read and write
502000
unkown
page read and write
213702B5000
heap
page read and write
65D000
heap
page read and write
AC0000
direct allocation
page read and write
31F0000
direct allocation
page read and write
2137028E000
heap
page read and write
2240000
direct allocation
page read and write
5DC000
heap
page read and write
7FF64B5B6000
unkown
page read and write
646000
heap
page read and write
7FF64B5DE000
unkown
page readonly
44DE000
direct allocation
page read and write
5D6000
heap
page read and write
7FF64B471000
unkown
page readonly
B01000
direct allocation
page read and write
B9E1AFE000
stack
page read and write
5C3000
unkown
page readonly
17EF000
stack
page read and write
7FF64B140000
unkown
page readonly
22F0F315000
heap
page read and write
117E000
stack
page read and write
213702B5000
heap
page read and write
32AB000
heap
page read and write
22F0F307000
heap
page read and write
2385000
direct allocation
page read and write
32AB000
heap
page read and write
5E7000
heap
page read and write
FEB000
stack
page read and write
21370240000
heap
page read and write
50A000
unkown
page read and write
F3B000
heap
page read and write
5CA000
heap
page read and write
213702B5000
heap
page read and write
14FA000
heap
page read and write
22DA000
direct allocation
page read and write
1430000
heap
page read and write
ADD000
direct allocation
page read and write
2B80000
heap
page read and write
6230000
direct allocation
page read and write
5AE000
heap
page read and write
44EC000
direct allocation
page read and write
5280000
direct allocation
page read and write
237D000
direct allocation
page read and write
A81000
direct allocation
page read and write
AA1000
direct allocation
page read and write
32A0000
heap
page read and write
8DF000
stack
page read and write
7FF64B140000
unkown
page readonly
21370291000
heap
page read and write
44E5000
direct allocation
page read and write
22B0000
heap
page read and write
500000
unkown
page execute read
430000
heap
page read and write
4518000
direct allocation
page read and write
50D000
unkown
page read and write
16EF000
stack
page read and write
B40000
heap
page read and write
526A000
direct allocation
page read and write
412000
unkown
page read and write
44CF000
direct allocation
page read and write
644000
heap
page read and write
239B000
direct allocation
page read and write
6560000
direct allocation
page read and write
2430000
direct allocation
page read and write
AB9000
direct allocation
page read and write
874E946000
stack
page read and write
44FA000
direct allocation
page read and write
7FF64B5DE000
unkown
page readonly
213702A5000
heap
page read and write
F47000
heap
page read and write
5254000
direct allocation
page read and write
601000
heap
page read and write
647000
heap
page read and write
22F0F510000
heap
page read and write
22F136C0000
heap
page read and write
21371D10000
heap
page read and write
9D0000
direct allocation
page read and write
346E000
stack
page read and write
5CA000
unkown
page write copy
64F000
heap
page read and write
5263000
direct allocation
page read and write
7FF64B59F000
unkown
page read and write
32AB000
heap
page read and write
7FF64B141000
unkown
page execute read
E80000
heap
page read and write
5A4000
heap
page read and write
53AE000
direct allocation
page read and write
5F3000
heap
page read and write
3420000
direct allocation
page read and write
5421000
direct allocation
page read and write
21370277000
heap
page read and write
22F0F33A000
heap
page read and write
57E000
stack
page read and write
647000
heap
page read and write
F30000
heap
page read and write
1250000
heap
page read and write
22F0F535000
heap
page read and write
5DF000
heap
page read and write
2230000
heap
page read and write
2430000
direct allocation
page read and write
22F0F269000
heap
page read and write
7FD20000
direct allocation
page read and write
5EB000
heap
page read and write
5C3000
unkown
page readonly
7FF64B58C000
unkown
page write copy
6BE000
stack
page read and write
5F4000
heap
page read and write
7FF64B471000
unkown
page readonly
660000
heap
page read and write
213702A5000
heap
page read and write
21370266000
heap
page read and write
9DF000
stack
page read and write
213702BE000
heap
page read and write
1255000
heap
page read and write
32A0000
heap
page read and write
654000
heap
page read and write
5AB000
heap
page read and write
21371D13000
heap
page read and write
7FF64B441000
unkown
page readonly
22F0F286000
heap
page read and write
21370264000
heap
page read and write
21370293000
heap
page read and write
7FF64B57E000
unkown
page read and write
659000
heap
page read and write
5FC000
heap
page read and write
1350000
heap
page read and write
21370220000
heap
page read and write
51F7000
direct allocation
page read and write
874E92E000
stack
page read and write
ACF000
direct allocation
page read and write
21370278000
heap
page read and write
F65000
heap
page read and write
31F0000
heap
page read and write
7FF64B141000
unkown
page execute read
5CF000
heap
page read and write
21370297000
heap
page read and write
21370278000
heap
page read and write
51F000
unkown
page readonly
59F000
heap
page read and write
7FF64B59E000
unkown
page read and write
525C000
direct allocation
page read and write
22F0F530000
heap
page read and write
5E5000
heap
page read and write
5D6000
heap
page read and write
59A000
heap
page read and write
2546000
direct allocation
page read and write
44F3000
direct allocation
page read and write
21A0000
heap
page read and write
5F3000
heap
page read and write
5D6000
heap
page read and write
28E0000
heap
page read and write
400000
unkown
page readonly
7FF64B57E000
unkown
page write copy
AE4000
direct allocation
page read and write
3321000
heap
page read and write
AEC000
direct allocation
page read and write
213702BE000
heap
page read and write
21370267000
heap
page read and write
604000
heap
page read and write
B9E19FE000
stack
page read and write
213704A0000
heap
page read and write
236B000
direct allocation
page read and write
B9E20FF000
stack
page read and write
22B5000
heap
page read and write
7FF64B5DD000
unkown
page write copy
7FF64B441000
unkown
page readonly
A21000
direct allocation
page read and write
B9E18EE000
stack
page read and write
5B1000
unkown
page execute read
21370430000
heap
page read and write
4501000
direct allocation
page read and write
21370225000
heap
page read and write
874EEFC000
stack
page read and write
23A9000
direct allocation
page read and write
3220000
heap
page read and write
4C0000
heap
page read and write
B9E18F6000
stack
page read and write
23E3000
direct allocation
page read and write
3050000
heap
page read and write
7FF64B141000
unkown
page execute read
2240000
direct allocation
page read and write
4BE000
stack
page read and write
7FF64B58C000
unkown
page write copy
14FE000
heap
page read and write
53DE000
direct allocation
page read and write
4C2F000
stack
page read and write
874F2FE000
stack
page read and write
There are 385 hidden memdumps, click here to show them.