IOC Report
WinMerge-2.16.42.1-x64-Setup.exe

loading gif

Files

File Path
Type
Category
Malicious
WinMerge-2.16.42.1-x64-Setup.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
C:\Users\user\AppData\Local\Temp\is-UAN49.tmp\WinMerge-2.16.42.1-x64-Setup.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
modified
 malicious
C:\Program Files\WinMerge\ColorSchemes\Default.ini (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\Midnight.ini (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\Modern.ini (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\Solarized Dark.ini (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\Solarized Light.ini (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\is-2NN26.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\is-2PJ95.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\is-95E7P.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\is-LSRQE.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ColorSchemes\is-QLCD7.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\LICENSE-2.0.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\URL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\is-5UK3C.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\is-Q7I9M.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\is-U552Q.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Apache-Tika\tika.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\DownloadFiles.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\LICENSE.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\URL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\is-J0G1K.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\is-RHQ7R.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\is-TI4KR.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\Java\java.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\URL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\is-0DQDS.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\is-5TT1R.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\is-9NNL4.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\license.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\PlantUML\plantuml.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\dumpbin\dumpbin.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\dumpbin\is-OKI3E.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\ildasm\ildasm.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\ildasm\is-BG924.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\is-QDPG4.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\jq\COPYING (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Commands\jq\is-M8DN4.tmp
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\jq\is-UNI1O.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Commands\jq\jq.exe (copy)
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\LICENSE.md (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Commands\md4c\is-01OJE.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\md4c\is-2BIF0.tmp
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\is-7F9O8.tmp
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\is-H30VV.tmp
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\is-QI0H0.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Commands\md4c\libmd4c-html.dll (copy)
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\libmd4c.dll (copy)
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\md4c\md2html.bat (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\md4c\md2html.exe (copy)
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\is-LHVU8.tmp
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\is-PL0C0.tmp
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\is-RH2AK.tmp
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\msys-2.0.dll (copy)
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\msys-gcc_s-1.dll (copy)
PE32 executable (DLL) (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\bin\patch.exe (copy)
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\cygwin\cygwin.ldif (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\cygwin\is-7CCUQ.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\COPYING (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\CYGWIN_LICENSE (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\cygserver.README (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\is-1J3J1.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\is-4244D.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\doc\Msys\is-D4ROF.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\info\is-GE2F3.tmp
gzip compressed data, max compression, from Unix, original size modulo 2^32 210247
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\info\is-KVURD.tmp
gzip compressed data, max compression, from Unix, original size modulo 2^32 36614
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\info\libgomp.info.gz (copy)
gzip compressed data, max compression, from Unix, original size modulo 2^32 210247
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\info\libquadmath.info.gz (copy)
gzip compressed data, max compression, from Unix, original size modulo 2^32 36614
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\licenses\gcc-libs\RUNTIME.LIBRARY.EXCEPTION (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\licenses\gcc-libs\is-QFR17.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man1\is-PVN7H.tmp
gzip compressed data, max compression, from Unix, original size modulo 2^32 34708
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man1\patch.1.gz (copy)
gzip compressed data, max compression, from Unix, original size modulo 2^32 34708
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man3\is-O2OLC.tmp
gzip compressed data, max compression, from Unix, original size modulo 2^32 17339
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man3\regex.3.gz (copy)
gzip compressed data, max compression, from Unix, original size modulo 2^32 17339
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man7\is-OAE1R.tmp
gzip compressed data, max compression, from Unix, original size modulo 2^32 12431
dropped
C:\Program Files\WinMerge\Commands\msys2\usr\share\man\man7\regex.7.gz (copy)
gzip compressed data, max compression, from Unix, original size modulo 2^32 12431
dropped
C:\Program Files\WinMerge\Commands\q\LICENSE.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\q\URL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\q\is-883O4.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\q\is-AE60A.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\q\is-P2R54.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\q\q.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\LICENSE.md (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\is-H1MRE.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\is-JQ84E.tmp
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\is-O4U6I.tmp
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\tidy.dll (copy)
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\tidy-html5\tidy.exe (copy)
PE32 executable (console) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\Commands\yq\LICENSE.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\yq\URL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\yq\is-0URJH.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\yq\is-75HBF.tmp
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\yq\is-QCED5.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Commands\yq\yq.bat (copy)
DOS batch file, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Contributors.txt (copy)
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\ChangeLog.html (copy)
HTML document, Unicode text, UTF-8 text, with very long lines (10419), with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\GPL.rtf (copy)
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
dropped
C:\Program Files\WinMerge\Docs\ReadMe.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\ReleaseNotes.html (copy)
HTML document, ASCII text, with very long lines (10419), with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\WinMerge.chm (copy)
MS Windows HtmlHelp Data
dropped
C:\Program Files\WinMerge\Docs\is-A83LN.tmp
MS Windows HtmlHelp Data
dropped
C:\Program Files\WinMerge\Docs\is-AU5OB.tmp
HTML document, Unicode text, UTF-8 text, with very long lines (10419), with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\is-JTKBP.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Docs\is-OQP0O.tmp
Rich Text Format data, version 1, ANSI, code page 1252, default language ID 1033
dropped
C:\Program Files\WinMerge\Docs\is-TQ5R4.tmp
HTML document, ASCII text, with very long lines (10419), with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\ADAMulti.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\ASPNET.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\CSharp_loose.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Delphi.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\FileFilter.tmpl (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Frontpage.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\MASM.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Merge_GnuC_loose.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Merge_VB_loose.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Merge_VC_loose.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\SourceControl.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\Symbian.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\XML_html.flt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-2JLJ0.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-48EUL.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-4MAJS.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-5S810.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-86KD6.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-8LHOI.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-90M06.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-C9ASJ.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-GA46K.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-IQAC2.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-KU68J.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-MTBD4.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Filters\is-N9DSO.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\ChangeLog.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\Contributors.txt (copy)
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\History.txt (copy)
ISO-8859 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\Links.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\Sample.tpl (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\is-3A4QE.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\is-3P06G.tmp
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\is-A48B5.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\is-EH03O.tmp
ISO-8859 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Docs\is-JED1G.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\GPL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\Languages\de.po (copy)
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\fr.po (copy)
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text, with very long lines (302)
dropped
C:\Program Files\WinMerge\Frhed\Languages\heksedit.lng (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-6IPI2.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-CQ6K8.tmp
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-ELRQ5.tmp
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-LHA2S.tmp
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-QJ1OV.tmp
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text, with very long lines (302)
dropped
C:\Program Files\WinMerge\Frhed\Languages\is-QJRBC.tmp
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\ja.po (copy)
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\nl.po (copy)
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\Languages\sl.po (copy)
GNU gettext message catalogue, Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Frhed\hekseditU.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Frhed\is-DGDQL.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Frhed\is-SEBEO.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\LogoImages\WinMergeLogo.png (copy)
PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files\WinMerge\LogoImages\WinMergeLogoSmall.png (copy)
PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files\WinMerge\LogoImages\is-123RC.tmp
PNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files\WinMerge\LogoImages\is-AJPUG.tmp
PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
dropped
C:\Program Files\WinMerge\Merge7z\7z.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Merge7z\History.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Merge7z\Lang\af.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\an.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ar.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ast.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\az.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ba.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\be.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\bg.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\bn.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\br.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ca.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\co.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\cs.txt (copy)
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Merge7z\Lang\cy.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\da.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\de.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\el.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\eo.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\es.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\et.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\eu.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ext.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\fa.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\fi.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\fr.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\fur.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\fy.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ga.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\gl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\gu.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\he.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\hi.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\hr.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\hu.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\hy.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\id.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\io.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-062RB.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-095NN.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-18MT0.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-18VUR.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-1OLB5.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-2FJR9.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-2K3ER.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-2KI1C.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-3BTA1.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-3QGBK.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-3SHFN.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-40BBT.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-460A9.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-55RUK.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-5BGTK.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-5DDJJ.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-5H1TG.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-5IF1K.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-5JV0F.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-5LSIG.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-5NB3V.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-7B519.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-7HKTF.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-7JJ6E.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-81U24.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-86JF7.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-8J2GB.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-8M9MB.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-8OUR1.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-A2H5R.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-A79QI.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-CC8DO.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-D9ULS.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-DJV3P.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-EIVB1.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-F1C4H.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-G0RIE.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-G6U2G.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-GLNOI.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-GQ8OJ.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-HSRKA.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-I0SMR.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-I4R65.tmp
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-I8C88.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-IB9K7.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-IGN31.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-IQRO7.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-IV017.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-IV9B1.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-KOF2H.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-KPC0E.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-KT48M.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-KVANL.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-L3JBH.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-L5DSD.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-LESGM.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-LKCB9.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-LM6PD.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-MBIS3.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-MFTUR.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-MIG3S.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-MP3U7.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-NSAVI.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-O2RF7.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-O4BKH.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-O6AIB.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-O6IBK.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-OATG4.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-P8F36.tmp
ASCII text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-PJATC.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-Q5E7J.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-Q6405.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-Q6RS3.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-QE2TL.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-QTVOA.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-RFFJN.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-RLC0B.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-RLCQE.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-RR2CP.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-RRR6V.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-S4I54.tmp
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-SC7H2.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-SEQFO.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-T5LO6.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-TPUIS.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-TQKGS.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-U4CMV.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-U6B2R.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-UFVDL.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-V2DS1.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-VB2M5.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is-VHVRF.tmp
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\is.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\it.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ja.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ka.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\kaa.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\kab.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\kk.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ko.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ku-ckb.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ku.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ky.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\lij.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\lt.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\lv.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\mk.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\mn.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\mng.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\mng2.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\mr.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ms.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\nb.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ne.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\nl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\nn.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\pa-in.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\pl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ps.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\pt-br.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\pt.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ro.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ru.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sa.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\si.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sk.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sq.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sr-spc.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sr-spl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sv.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\sw.txt (copy)
ASCII text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ta.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\tg.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\th.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\tk.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\tr.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\tt.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\ug.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\uk.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\uz-cyrl.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\uz.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\va.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\vi.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\yo.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\zh-cn.txt (copy)
Unicode text, UTF-8 text
dropped
C:\Program Files\WinMerge\Merge7z\Lang\zh-tw.txt (copy)
Unicode text, UTF-8 (with BOM) text
dropped
C:\Program Files\WinMerge\Merge7z\License.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Merge7z\Merge7z.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Merge7z\is-2OE2K.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\Merge7z\is-9TLH0.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Merge7z\is-F216O.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\Merge7z\is-T2IQ8.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\AI.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\ApplyPatch.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\CompareMSExcelFiles.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\CompareMSPowerPointFiles.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\CompareMSVisioFiles.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\CompareMSWordFiles.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\IgnoreColumns.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\IgnoreCommentsC.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\IgnoreFieldsComma.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\IgnoreFieldsTab.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\IgnoreLeadingLineNumbers.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\Plugins.xml (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\PrediffLineFilter.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\editor addin.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\insert datetime.sct (copy)
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-2HSEA.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-3QIHI.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-7SDCN.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-9OSMP.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-M5C1V.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-NH2UA.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-NSMAB.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\is-NTAH8.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-OOK1U.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-R5IB7.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-SDIOV.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\MergePlugins\is-TGIBM.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\is-TTL9V.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\is-UABSB.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\MergePlugins\is-UG553.tmp
HTML document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\ShellExtensionU.dll (copy)
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\ShellExtensionX64.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinIMerge\GPL.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinIMerge\WinIMergeLib.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinIMerge\freeimage-license-gplv2.txt (copy)
ASCII text, with very long lines (803), with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinIMerge\is-4MHIU.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinIMerge\is-7D00P.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinIMerge\is-L2LCJ.tmp
ASCII text, with very long lines (803), with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinMerge32BitPluginProxy.exe (copy)
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\WinMergeContextMenu.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinMergeContextMenuPackage.msix (copy)
Zip archive data, at least v4.5 to extract, compression method=deflate
dropped
C:\Program Files\WinMerge\WinMergeU.VisualElementsManifest.xml (copy)
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinMergeU.exe (copy)
PE32+ executable (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinWebDiff\LICENSE.txt (copy)
ASCII text, with very long lines (755), with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\LICENSE_LibXDiff.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\LICENSE_RapidJSON.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\LICENSE_WebView2.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\LICENSE_wil.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\WinWebDiffLib.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\WinWebDiff\is-1MJTI.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\is-24R37.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\is-56PDA.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\is-FJG2V.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\is-KTPRH.tmp
ASCII text, with very long lines (755), with CRLF line terminators
dropped
C:\Program Files\WinMerge\WinWebDiff\is-NDGUQ.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\is-55BS4.tmp
Unicode text, UTF-8 text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\is-8KFIH.tmp
PE32+ executable (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\is-94VSN.tmp
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\is-9AAPN.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\is-BOKA5.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
C:\Program Files\WinMerge\is-EMDIS.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\is-GS16B.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\is-N4IAN.tmp
Zip archive data, at least v4.5 to extract, compression method=deflate
dropped
C:\Program Files\WinMerge\is-N9202.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\is-RITAQ.tmp
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\Program Files\WinMerge\unins000.dat
InnoSetup Log 64-bit WinMerge, version 0x418, 61373 bytes, 609290\37\user, C:\Program Files\WinMerge\376\377\377\007
modified
C:\Program Files\WinMerge\unins000.exe (copy)
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files\WinMerge\unins000.msg
InnoSetup messages, version 5.5.3, 221 messages (UTF-16), &About Setup...
dropped
C:\Program Files\WinMerge\vcomp140.dll (copy)
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
dropped
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge\User's Guide.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Thu Oct 24 09:28:03 2024, mtime=Thu Oct 24 09:28:03 2024, atime=Sun Jul 28 20:00:50 2024, length=1029392, window=hide
dropped
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge\WinMerge.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Archive, ctime=Thu Oct 24 09:28:01 2024, mtime=Thu Oct 24 09:28:02 2024, atime=Sun Jul 28 20:11:38 2024, length=5942376, window=hide
dropped
C:\Users\user\AppData\Local\Temp\is-9I7HC.tmp\_isetup\_setup64.tmp
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\MDSXPH18M6LEPQILBVW3.temp
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\db37f98b03e7cdde.customDestinations-ms (copy)
data
dropped
There are 417 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\AppData\Local\Temp\is-UAN49.tmp\WinMerge-2.16.42.1-x64-Setup.tmp
"C:\Users\user~1\AppData\Local\Temp\is-UAN49.tmp\WinMerge-2.16.42.1-x64-Setup.tmp" /SL5="$1045C,9350605,121344,C:\Users\user\Desktop\WinMerge-2.16.42.1-x64-Setup.exe"
malicious
C:\Users\user\Desktop\WinMerge-2.16.42.1-x64-Setup.exe
"C:\Users\user\Desktop\WinMerge-2.16.42.1-x64-Setup.exe"
C:\Windows\System32\regsvr32.exe
"C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\WinMerge\ShellExtensionX64.dll"
C:\Program Files\WinMerge\WinMerge32BitPluginProxy.exe
"C:\Program Files\WinMerge\WinMerge32BitPluginProxy.exe" /RegServer
C:\Program Files\WinMerge\WinMergeU.exe
"C:\Program Files\WinMerge\WinMergeU.exe" /s- /minimize /noninteractive /set-usertasks-to-jumplist 4097
C:\Program Files\WinMerge\WinMergeU.exe
"C:\Program Files\WinMerge\WinMergeU.exe"

URLs

Name
IP
Malicious
http://www.gnu.org/
unknown
https://github.com/wvxwxvw
unknown
https://sourceforge.net/tracker/?group_id=13216&atid=363216
unknown
http://www.appinf.com/properties/bla-activation-threshold
unknown
https://github.com/WinMerge/winmerge-v2/issues/41
unknown
https://stedolan.github.io/jq/)
unknown
https://freeimage.sourceforge.io/)
unknown
https://github.com/WinMerge/winmerge/discussions.
unknown
https://winmerge.org/
unknown
https://www.transifex.com/rockytdr/teams/91037/nl/)
unknown
https://github.com/WinMerge/winmerge
unknown
https://winmerge.org.
unknown
http://www.html-tidy.org/)
unknown
https://github.com/WinMerge/winwebdiffD
unknown
https://useiconic.com/open
unknown
http://xml.org/sax/features/namespace-prefixes
unknown
https://winmerge.org/.
unknown
http://bonedaddy.net/pabs3/files/frhed/
unknown
http://xml.org/sax/features/string-interning
unknown
https://winmerge.org
unknown
http://repository.certum.pl/ccsca2021.cer0
unknown
https://sourceforge.net/tracker/?group_id=13216&atid=113216
unknown
https://winmerge.org:
unknown
http://192.168.1.101:3703/soap/WinMerge/Program%20Icons/Splash%20and%20About/concept.psd
unknown
http://sourceforge.net/tracker/?group_id=13216&atid=113216
unknown
https://jrsoftware.org/isinfo.php)
unknown
https://github.com/msys2/MSYS2-packages/tree/master/patch)
unknown
http://repository.certum.pl/ctsca2021.cer0
unknown
https://ethanschoonover.com/solarized/
unknown
https://manual.winmerge.org
unknown
https://github.com/Patriccollu/Lingua_Corsa-Infurmatica/#readme
unknown
https://downzen.com
unknown
http://https://www.google.com/search?q=cssContentSizewidthheightPage.getLayoutMetrics
unknown
http://www.appinf.com/properties/bla-maximum-amplification
unknown
https://7-zip.org/history.txt
unknown
http://ccsca2021.ocsp-certum.com05
unknown
https://github.com/plantuml/plantuml/releases/download/v1.2023.0/plantuml-1.2023.0-sources.jar
unknown
http://www.palkornel.hu/innosetup%1
unknown
https://github.com/mikefarah/yq/archive/refs/tags/v4.11.1.zip
unknown
http://plantuml.com/paypal
unknown
http://www.certum.pl/CPS0
unknown
http://google.github.io/googletest/)
unknown
http://www.innosetup.com/
unknown
https://WinMerge.org/1
unknown
https://manual.winmerge.org/index.htmlDocs/WinMerge%s.chmhttps://winmerge.org/
unknown
http://winmerge.org/docs/manual/
unknown
http://www.gnu.org/philosophy/why-not-lgpl.html
unknown
http://crl.certum.pl/ctnca.crl0k
unknown
http://xml.org/sax/features/string-internings
unknown
https://github.com/git/git/tree/master/xdiff)
unknown
https://bugs.winmerge.org/
unknown
http://frhed.sourceforge.netN
unknown
https://github.com/WinMerge/winwebdiff/)
unknown
https://sourceforge.net/forum/?group_id=13216
unknown
https://github.com/winmerge/winimergeB
unknown
https://manual.winmerge.org/
unknown
https://github.com/WinMerge/winmerge/blob/master/ColorSchemes/Solarized%20Dark.ini
unknown
https://forums.winmerge.org/.
unknown
https://pocoproject.org/)
unknown
http://www.zeroscience.mk/mk/vulnerabilities/ZSL-2011-4997.php
unknown
http://xml.org/sax/features/validationE
unknown
http://frhed.sourceforge.net/Docs
unknown
http://xml.org/sax/features/validation
unknown
http://frhed.sourceforge.net/
unknown
https://github.com/harelba/q/archive/refs/tags/2.0.19.zip
unknown
https://manual.winmerge.org/Quick_start.html.
unknown
http://gnu.org/licenses/gpl.html
unknown
https://download.java.net/java/GA/jdk19.0.2/fdb695a9d9064ad6b064dc6df578380c/7/GPL/openjdk-19.0.2_wi
unknown
https://savannah.gnu.org/projects/patch/
unknown
http://www.appinf.com/features/enable-partial-readshttp://www.appinf.com/properties/bla-maximum-ampl
unknown
http://plantuml.com/patreon
unknown
https://manual.winmerge.org/.
unknown
http://xml.org/sax/properties/lexical-handler
unknown
http://xml.org/sax/features/namespacesLEAUT
unknown
http://xml.org/sax/properties/lexical-handlerent
unknown
http://repository.certum.pl/ctsca2021.cer0A
unknown
http://www.appinf.com/features/enable-partial-reads
unknown
https://winmerge.orgn#
unknown
http://crl.certum.pl/ctsca2021.crl0o
unknown
http://xml.org/sax/features/external-general-entitiesold
unknown
https://WinMerge.org/q
unknown
http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
unknown
https://winmerge.org/translations/http://www.gnu.org/licenses/gpl-2.0.html&amp
unknown
https://github.com/harelba/q/releases/download/2.0.19/q-AMD64-Windows.exe
unknown
http://ccsca2021.crl.certum.pl/ccsca2021.crl0s
unknown
https://github.com/microsoft/wil)
unknown
http://www.geocities.co.jp/SiliconValley-SanJose/8165/winmerge.htmld
unknown
https://github.com/keeleyt83/winmerge-solarized-dark
unknown
http://xml.org/sax/features/external-parameter-entities
unknown
https://www.boost.org/)
unknown
https://frhed.sourceforge.net/)
unknown
https://forums.winmerge.org
unknown
https://jrsoftware.org/files/is/license.txt)
unknown
https://TamilNeram.github.io
unknown
https://github.com/WinMerge/winmerge/issues
unknown
http://subca.ocsp-certum.com05
unknown
https://gyazo.com/f5f267546db27f2dc801c00df8cb4251
unknown
http://subca.ocsp-certum.com02
unknown
https://github.com/WinMerge/winmerge/discussions
unknown
http://subca.ocsp-certum.com01
unknown
There are 90 hidden URLs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge.Project.File
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge.Project.File\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge.Project.File\shell\edit\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge.Project.File\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WinMerge.exe
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Thingamahoochie\WinMerge
Executable
HKEY_LOCAL_MACHINE\SOFTWARE\Thingamahoochie\WinMerge
ContextMenuEnabled
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge
ContextMenuEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Thingamahoochie\WinMerge\Locale
LanguageId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Setup Version
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: App Path
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Icon Group
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Setup Type
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Selected Components
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Deselected Components
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Selected Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Deselected Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup: Language
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
DisplayIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
QuietUninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
URLUpdateInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
NoModify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
NoRepair
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
InstallDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
MajorVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
MinorVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup CodeFile: UseAs3WayMergeTool
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup CodeFile: MergeAtRightPane
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup CodeFile: MergeAtCenterPane
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup CodeFile: MergeAtLeftPane
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1
Inno Setup CodeFile: AutoMergeAtStartup
HKEY_LOCAL_MACHINE\SOFTWARE\Thingamahoochie\WinMerge
ContextMenuEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShellExtension.WinMergeShell.1
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShellExtension.WinMergeShell.1\CLSID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShellExtension.WinMergeShell
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShellExtension.WinMergeShell\CLSID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ShellExtension.WinMergeShell\CurVer
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\ProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\VersionIndependentProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\background\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\ProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\VersionIndependentProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\InprocServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\InprocServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4E716236-AA30-4C65-B225-D68BBA81E9C2}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\background\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\background\shellex\DragDropHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\DragDropHandlers\WinMerge
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{06029E17-28B5-456A-B866-4E79D98612FD}\1.0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{06029E17-28B5-456A-B866-4E79D98612FD}\1.0\FLAGS
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{06029E17-28B5-456A-B866-4E79D98612FD}\1.0\0\win64
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{06029E17-28B5-456A-B866-4E79D98612FD}\1.0\HELPDIR
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{64200B75-83AE-464A-88C6-262E175BBA92}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge32BitPluginProxy.Loader.1
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge32BitPluginProxy.Loader.1\CLSID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge32BitPluginProxy.Loader
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinMerge32BitPluginProxy.Loader\CurVer
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\ProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\VersionIndependentProgID
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\LocalServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\LocalServer32
ServerExecutable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AA6F8426-159F-418E-9FE3-EFB0C46C3DBF}\Version
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B8AA7CCC-2D80-4FCB-BF92-145831C091F6}\1.0
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B8AA7CCC-2D80-4FCB-BF92-145831C091F6}\1.0\FLAGS
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B8AA7CCC-2D80-4FCB-BF92-145831C091F6}\1.0\0\win32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B8AA7CCC-2D80-4FCB-BF92-145831C091F6}\1.0\HELPDIR
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\TypeLib
Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\ProxyStubClsid32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\TypeLib
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46C062C2-0497-4004-9FAC-06E4021DA550}\TypeLib
Version
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Locale
LanguageId
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
UserFilterPath
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge
UserTasksFlags
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
MainLeft
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
MainTop
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
MainRight
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
MainBottom
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
MainMax
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
TabBarAutoMaxWidth
HKEY_CURRENT_USER\SOFTWARE\Thingamahoochie\WinMerge\Settings
UserFilterPath
There are 114 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
110F000
stack
page read and write
8E5000
heap
page read and write
7FF673E31000
unkown
page readonly
93000
stack
page read and write
2200000
direct allocation
page read and write
443E000
direct allocation
page read and write
3379000
heap
page read and write
24A2000
direct allocation
page read and write
4471000
direct allocation
page read and write
3370000
heap
page read and write
2309000
direct allocation
page read and write
4404000
direct allocation
page read and write
7FF673F3E000
unkown
page read and write
640000
heap
page read and write
1270000
heap
page read and write
513000
unkown
page readonly
32F0000
heap
page read and write
80F000
stack
page read and write
1240000
heap
page read and write
21A440D5000
heap
page read and write
7FF673F79000
unkown
page readonly
FDD000
stack
page read and write
367E000
stack
page read and write
337A000
heap
page read and write
CF1000
stack
page read and write
502000
unkown
page write copy
21C1000
direct allocation
page read and write
24D0000
heap
page read and write
37A000
unkown
page write copy
440B000
direct allocation
page read and write
21A42486000
heap
page read and write
21A42446000
heap
page read and write
401000
unkown
page execute read
7FE2E000
direct allocation
page read and write
76EF000
direct allocation
page read and write
3370000
heap
page read and write
502F000
stack
page read and write
953000
heap
page read and write
3381000
heap
page read and write
4480000
direct allocation
page read and write
9EB000
stack
page read and write
4421000
direct allocation
page read and write
53E2000
direct allocation
page read and write
430000
heap
page read and write
8BB000
heap
page read and write
21A43F20000
heap
page read and write
7FF673F9E000
unkown
page readonly
21A42467000
heap
page read and write
21A424D5000
heap
page read and write
21A42437000
heap
page read and write
31E0000
direct allocation
page read and write
4453000
direct allocation
page read and write
DE0000
heap
page read and write
412000
unkown
page write copy
8D5000
heap
page read and write
24A6000
direct allocation
page read and write
5244000
direct allocation
page read and write
616BF45000
stack
page read and write
64AF0DE000
stack
page read and write
1A47B980000
heap
page read and write
21A42464000
heap
page read and write
2390000
direct allocation
page read and write
4469000
direct allocation
page read and write
445A000
direct allocation
page read and write
6550000
direct allocation
page read and write
424000
unkown
page readonly
120E000
stack
page read and write
527E000
direct allocation
page read and write
1A47BD05000
heap
page read and write
7FF673B01000
unkown
page execute read
500000
unkown
page execute read
5261000
direct allocation
page read and write
8DB000
heap
page read and write
7FF673B00000
unkown
page readonly
2220000
direct allocation
page read and write
21A4244C000
heap
page read and write
23D5000
heap
page read and write
616C9FF000
stack
page read and write
8D5000
heap
page read and write
64AF3FC000
stack
page read and write
2302000
direct allocation
page read and write
21A42444000
heap
page read and write
880000
heap
page read and write
51E7000
direct allocation
page read and write
64E000
stack
page read and write
12C0000
heap
page read and write
960000
heap
page read and write
888000
heap
page read and write
21A4245E000
heap
page read and write
8E8000
heap
page read and write
21A42360000
heap
page read and write
8EB000
heap
page read and write
1A47BCF0000
heap
page read and write
690000
heap
page read and write
22FB000
direct allocation
page read and write
444C000
direct allocation
page read and write
1A47B950000
heap
page read and write
8F2000
heap
page read and write
7FF673F6D000
unkown
page read and write
6220000
direct allocation
page read and write
21E1000
direct allocation
page read and write
53E9000
direct allocation
page read and write
1A47B960000
heap
page read and write
F10000
heap
page read and write
F1E000
heap
page read and write
1A47D640000
heap
page read and write
1A47D5A0000
heap
page read and write
8C0000
heap
page read and write
2DD0000
heap
page read and write
31E0000
heap
page read and write
905000
heap
page read and write
4A30000
heap
page read and write
7FF673F79000
unkown
page readonly
947000
heap
page read and write
76E1000
direct allocation
page read and write
5268000
direct allocation
page read and write
360000
unkown
page readonly
7FF673F3E000
unkown
page read and write
7FF673F9E000
unkown
page readonly
5253000
direct allocation
page read and write
7FF673B01000
unkown
page execute read
2770000
heap
page read and write
5204000
direct allocation
page read and write
944000
heap
page read and write
3370000
heap
page read and write
4436000
direct allocation
page read and write
361000
unkown
page execute read
810000
direct allocation
page execute and read and write
943000
heap
page read and write
2A50000
heap
page read and write
21A42468000
heap
page read and write
2110000
direct allocation
page read and write
412000
unkown
page read and write
5228000
direct allocation
page read and write
8CA000
heap
page read and write
68E000
stack
page read and write
21A42476000
heap
page read and write
400000
unkown
page readonly
441A000
direct allocation
page read and write
2343000
direct allocation
page read and write
7FF673E31000
unkown
page readonly
8D5000
heap
page read and write
64AF5FF000
stack
page read and write
21A42410000
heap
page read and write
2216000
direct allocation
page read and write
337A000
heap
page read and write
76D1000
direct allocation
page read and write
21A42436000
heap
page read and write
2D1E000
stack
page read and write
83F000
stack
page read and write
7FF673B00000
unkown
page readonly
502000
unkown
page read and write
1A47BA96000
heap
page read and write
89E000
heap
page read and write
FE8000
stack
page read and write
510000
heap
page read and write
2233000
direct allocation
page read and write
21A4245F000
heap
page read and write
21A4248F000
heap
page read and write
223A000
direct allocation
page read and write
648000
heap
page read and write
7FF673F60000
unkown
page write copy
7FF673F3E000
unkown
page write copy
21A42434000
heap
page read and write
21A4245D000
heap
page read and write
19C000
stack
page read and write
506000
unkown
page read and write
2224000
direct allocation
page read and write
7FF673F4C000
unkown
page write copy
21A4245C000
heap
page read and write
1A47BA20000
heap
page read and write
7FF673F5F000
unkown
page read and write
50D000
unkown
page read and write
51A000
unkown
page readonly
22E5000
direct allocation
page read and write
5457000
direct allocation
page read and write
21A42260000
heap
page read and write
21A42446000
heap
page read and write
2241000
direct allocation
page read and write
4AB0000
heap
page read and write
5212000
direct allocation
page read and write
1A47BA44000
heap
page read and write
2380000
direct allocation
page read and write
4461000
direct allocation
page read and write
7FF673E31000
unkown
page readonly
7FF673F60000
unkown
page write copy
616BF2E000
stack
page read and write
8F4000
heap
page read and write
51F000
unkown
page readonly
616C6FD000
stack
page read and write
7FF673F6D000
unkown
page read and write
7FF673F9D000
unkown
page write copy
D50000
heap
page read and write
706000
heap
page read and write
21A4244F000
heap
page read and write
1A47BA10000
unkown
page readonly
21A4245F000
heap
page read and write
64AF0EE000
stack
page read and write
4AB0000
heap
page read and write
8D2000
heap
page read and write
53B0000
direct allocation
page read and write
7FF673F4C000
unkown
page write copy
21A42445000
heap
page read and write
29E0000
trusted library allocation
page read and write
616C8FB000
stack
page read and write
4412000
direct allocation
page read and write
33F0000
heap
page read and write
21A4244E000
heap
page read and write
944000
heap
page read and write
21A42465000
heap
page read and write
22A7000
direct allocation
page read and write
F1A000
heap
page read and write
8F4000
heap
page read and write
7FF673B01000
unkown
page execute read
7FF673E01000
unkown
page readonly
7FF673B00000
unkown
page readonly
9F0000
heap
page read and write
3370000
heap
page read and write
4428000
direct allocation
page read and write
1A47BAFB000
heap
page read and write
7FF673B00000
unkown
page readonly
2264000
direct allocation
page read and write
D60000
heap
page read and write
2370000
heap
page read and write
1A47BCF3000
heap
page read and write
1A47BA9F000
heap
page read and write
2248000
direct allocation
page read and write
21A43F23000
heap
page read and write
8C4000
heap
page read and write
400000
unkown
page readonly
360000
unkown
page readonly
7FF673B01000
unkown
page execute read
8CD000
heap
page read and write
2192000
direct allocation
page read and write
64AF7FF000
stack
page read and write
1A47D645000
heap
page read and write
8EA000
heap
page read and write
8CF000
heap
page read and write
31E0000
direct allocation
page read and write
901000
heap
page read and write
904000
heap
page read and write
5CE000
stack
page read and write
21A42340000
heap
page read and write
23D0000
heap
page read and write
8BB000
heap
page read and write
540000
heap
page read and write
7FF673F79000
unkown
page readonly
442F000
direct allocation
page read and write
51E0000
direct allocation
page read and write
2233000
direct allocation
page read and write
616C3FE000
stack
page read and write
7FF673E01000
unkown
page readonly
23D9000
heap
page read and write
33F1000
heap
page read and write
1A47BA35000
heap
page read and write
51EE000
direct allocation
page read and write
7FF673E01000
unkown
page readonly
8DE000
heap
page read and write
8DE000
heap
page read and write
37A000
unkown
page read and write
7FF673F5E000
unkown
page read and write
37E000
unkown
page readonly
2288000
direct allocation
page read and write
6F0000
heap
page read and write
1A47BA46000
heap
page read and write
21A42486000
heap
page read and write
EFE000
stack
page read and write
220F000
direct allocation
page read and write
8E8000
heap
page read and write
37E000
unkown
page readonly
5277000
direct allocation
page read and write
8FC000
heap
page read and write
4AB0000
heap
page read and write
8F2000
heap
page read and write
4AB0000
heap
page read and write
50A000
unkown
page read and write
29D0000
heap
page read and write
64AF0FA000
stack
page read and write
3370000
heap
page read and write
22C4000
direct allocation
page read and write
6F50000
direct allocation
page read and write
21A425F5000
heap
page read and write
89A000
heap
page read and write
700000
heap
page read and write
2318000
direct allocation
page read and write
5450000
direct allocation
page read and write
8E5000
heap
page read and write
4478000
direct allocation
page read and write
7FF673F3E000
unkown
page write copy
363F000
stack
page read and write
CF3000
stack
page read and write
1A47BD00000
heap
page read and write
43EC000
direct allocation
page read and write
2390000
direct allocation
page read and write
1680000
heap
page read and write
353E000
stack
page read and write
524C000
direct allocation
page read and write
8F7000
heap
page read and write
A7E000
stack
page read and write
2380000
direct allocation
page read and write
53A0000
direct allocation
page read and write
18D000
stack
page read and write
525A000
direct allocation
page read and write
8BF000
heap
page read and write
21A440D0000
heap
page read and write
417000
unkown
page read and write
616C2FE000
stack
page read and write
373000
unkown
page readonly
7FF673E31000
unkown
page readonly
1A47BD0C000
heap
page read and write
7FF673F76000
unkown
page read and write
21F9000
direct allocation
page read and write
7FF673E01000
unkown
page readonly
2161000
direct allocation
page read and write
401000
unkown
page execute read
8E7000
heap
page read and write
22DD000
direct allocation
page read and write
1A47BA28000
heap
page read and write
64AF4FF000
stack
page read and write
1230000
heap
page read and write
21A42486000
heap
page read and write
21A42473000
heap
page read and write
53D0000
direct allocation
page read and write
8F2000
heap
page read and write
21A42448000
heap
page read and write
616C7FE000
stack
page read and write
222C000
direct allocation
page read and write
21A42446000
heap
page read and write
7FF673F79000
unkown
page readonly
21A424D4000
heap
page read and write
419000
unkown
page write copy
21A425F0000
heap
page read and write
8D7000
heap
page read and write
DAE000
stack
page read and write
8F4000
heap
page read and write
707000
heap
page read and write
373000
unkown
page readonly
7FF673F9D000
unkown
page write copy
8D5000
heap
page read and write
41C000
unkown
page readonly
64AF0F6000
stack
page read and write
8FF000
heap
page read and write
22D2000
direct allocation
page read and write
50D000
unkown
page write copy
64AF6FF000
stack
page read and write
22B3000
direct allocation
page read and write
8EB000
heap
page read and write
21D5000
direct allocation
page read and write
530000
heap
page read and write
1A47FDF0000
heap
page read and write
58E000
stack
page read and write
34F0000
direct allocation
page read and write
22CB000
direct allocation
page read and write
522F000
direct allocation
page read and write
4AB0000
heap
page read and write
5270000
direct allocation
page read and write
21A42510000
heap
page read and write
1A47BAD6000
heap
page read and write
917000
heap
page read and write
4445000
direct allocation
page read and write
7FD20000
direct allocation
page read and write
53D8000
direct allocation
page read and write
7FF673F76000
unkown
page read and write
616BF3E000
stack
page read and write
7FE32000
direct allocation
page read and write
1A47BAA0000
heap
page read and write
5411000
direct allocation
page read and write
12CB000
heap
page read and write
9B000
stack
page read and write
221D000
direct allocation
page read and write
2D9E000
stack
page read and write
1A47F5F0000
trusted library allocation
page read and write
361000
unkown
page execute read
24D3000
heap
page read and write
1685000
heap
page read and write
210F000
stack
page read and write
There are 366 hidden memdumps, click here to show them.