IOC Report
PUESTO.zip

loading gif

Files

File Path
Type
Category
Malicious
PUESTO.zip
Zip archive data, at least v2.0 to extract, compression method=store
initial sample
C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\8ed7d446-8ca0-4033-8ba8-134e21ff8b0a.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\9970e656-5a23-4ff3-a809-60052b548627.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\2f285213-d6c8-47e5-a9a8-596c05bc09ce.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-671BB02A-9D8.pma
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\454f151e-40ec-400e-986d-bdf9a63b70cc.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\6be93d34-cb91-496d-b691-746515aa6b9b.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\927e73ba-726d-4809-9a3f-376e46a5df37.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks (copy)
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS
SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001
OpenPGP Secret Key
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json
JSON data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 2
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)
ASCII text, with very long lines (1597), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons
SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 12, cookie 0x3, schema 4, UTF-8, version-valid-for 7
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\76f29ef5-465a-4495-a995-246d9a06ba80.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\878cde3e-8e3f-4737-b8d5-2a766927974e.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\94ca455a-cbdd-4746-90b6-d40a1c51c0f6.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF377f0.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF38c14.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\ced9dfef-9d9d-4ff0-9f20-7ddc085209e0.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\e70acbc8-7ad5-493d-bcb9-b51e9633eed2.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history
SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13374341426204789
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts
SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\SiteList.xml
XML 1.0 document, ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1
data
modified
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\281031e7-4b90-4177-bcf8-dc01dc81194f.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\6fe5d36d-7ff2-450a-a95e-f3899a207b5a.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF38c14.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens
SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\d31e8f12-a2ad-457a-a44e-c6b538f2da91.tmp
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 11, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 11
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json
ASCII text, with very long lines (3951), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\c8e88c1e-55a1-4012-9a42-db488f2dfc0e.tmp
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\cc709b08-ce9f-4d92-8061-5d70dcc45df4.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\e7c53983-f061-4fdb-8a13-196b84d799b3.tmp
ASCII text, with very long lines (1597), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal
SQLite Write-Ahead Log, version 3007000
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF39991.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic
ASCII text, with no line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371
data
dropped
C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations
JSON data
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{7285ED85-92E0-11EF-8C2F-ECF4BBFF258B}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{7285ED87-92E0-11EF-8C2F-ECF4BBFF258B}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{7285ED88-92E0-11EF-8C2F-ECF4BBFF258B}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres
data
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\favicon[1].ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\xmltreeview[1]
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\269bef93-8013-4b2b-b8ee-205614b58fb2.tmp
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
dropped
C:\Users\user\AppData\Local\Temp\Importer_0_4\RecoveryStore.{7285ED85-92E0-11EF-8C2F-ECF4BBFF258B}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Temp\Importer_0_4\{7285ED87-92E0-11EF-8C2F-ECF4BBFF258B}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Temp\Importer_0_Importer_0_4_4\cookies.json
JSON data
modified
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\ce1fba47-6bf9-4d6c-a682-594c5621dacc.tmp
very short file (no magic)
dropped
C:\Users\user\AppData\Local\Temp\cv_debug.log
JSON data
dropped
C:\Users\user\AppData\Local\Temp\dfb8295e-108f-4fac-8d39-ee8fa4513874.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\128.png
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\af\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\am\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ar\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\az\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\be\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\bg\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\bn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ca\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\cs\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\cy\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\da\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\de\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\el\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\en\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\en_CA\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\en_GB\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\en_US\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\es\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\es_419\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\et\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\eu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\fa\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\fi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\fil\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\fr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\fr_CA\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\gl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\gu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\hi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\hr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\hu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\hy\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\id\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\is\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\it\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\iw\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ja\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ka\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\kk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\km\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\kn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ko\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\lo\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\lt\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\lv\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ml\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\mn\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\mr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ms\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\my\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ne\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\nl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\no\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\pa\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\pl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\pt_BR\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\pt_PT\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ro\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ru\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\si\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\sk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\sl\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\sr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\sv\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\sw\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ta\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\te\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\th\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\tr\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\uk\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\ur\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\vi\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\zh_CN\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\zh_HK\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\zh_TW\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_locales\zu\messages.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\_metadata\verified_contents.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\dasherSettingSchema.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\manifest.json
JSON data
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\offscreendocument.html
HTML document, ASCII text
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\offscreendocument_main.js
ASCII text, with very long lines (3700)
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\page_embed_script.js
ASCII text
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\CRX_INSTALL\service_worker_bin_prod.js
ASCII text, with very long lines (3705)
dropped
C:\Users\user\AppData\Local\Temp\scoped_dir2520_652812131\dfb8295e-108f-4fac-8d39-ee8fa4513874.tmp
Google Chrome extension, version 3
dropped
C:\Users\user\AppData\Local\Temp\~DF5455923DC95DCAC1.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFE947715A5CB6E41F.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFEA75A6B99FBFDC28.TMP
data
dropped
There are 201 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
C:\Users\user\Desktop\PUESTO\PUESTO\bin\bin\DIMSA.Principal.exe
"C:\Users\user\Desktop\PUESTO\PUESTO\bin\bin\DIMSA.Principal.exe"
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files (x86)\Microsoft Office\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\user\Desktop\PUESTO\PUESTO\bin\bin\DIMSA.Negocios.General.xml"
C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\user\Desktop\PUESTO\PUESTO\bin\bin\DIMSA.Negocios.General.xml
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3964 CREDAT:17410 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\BHO\ie_to_edge_stub.exe" --from-ie-to-edge=3 --ie-frame-hwnd=202c4
C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe
"C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --from-ie-to-edge=3 --ie-frame-hwnd=202c4
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=1996,i,16843677924463720048,2768008526204556817,262144 /prefetch:3
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3964 CREDAT:333058 /prefetch:2
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3964 CREDAT:529666 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6028 --field-trial-handle=1996,i,16843677924463720048,2768008526204556817,262144 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=6956 --field-trial-handle=1996,i,16843677924463720048,2768008526204556817,262144 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=7060 --field-trial-handle=1996,i,16843677924463720048,2768008526204556817,262144 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.47\cookie_exporter.exe
cookie_exporter.exe --cookie-json=1156
There are 5 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://duckduckgo.com/chrome_newtab
unknown
https://duckduckgo.com/ac/?q=
unknown
https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline
unknown
https://www.last.fm/
unknown
http://1.8.5.61/ServicioWebBCT/BCTService.svc
unknown
http://www.fontbureau.com/designers
unknown
https://services.bingapis.com/undersideproactive/api/v1/trigger
13.107.5.80
https://docs.google.com/
unknown
https://www.youtube.com
unknown
http://www.sajatypeworks.com
unknown
http://www.founder.com.cn/cn/cThe
unknown
https://www.instagram.com
unknown
https://web.skype.com/?browsername=edge_canary_shoreline
unknown
https://drive.google.com/
unknown
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1
unknown
https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2
unknown
http://www.galapagosdesign.com/DPlease
unknown
https://www.messenger.com
unknown
https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge
unknown
https://outlook.office.com/mail/compose?isExtension=true
unknown
http://www.urwpp.deDPlease
unknown
http://www.zhongyicts.com.cn
unknown
http://www.reddit.com/
unknown
https://i.y.qq.com/n2/m/index.html
unknown
https://www.deezer.com/
unknown
https://web.telegram.org/
unknown
https://drive-daily-2.corp.google.com/
unknown
https://drive-daily-4.corp.google.com/
unknown
https://vibe.naver.com/today
unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
unknown
https://drive-daily-1.corp.google.com/
unknown
https://excel.new?from=EdgeM365Shoreline
unknown
https://drive-daily-5.corp.google.com/
unknown
http://www.carterandcone.coml
unknown
http://www.fontbureau.com/designers/frere-jones.html
unknown
https://www.tiktok.com/
unknown
http://www.youtube.com/
unknown
https://drive-preprod.corp.google.com/
unknown
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2
unknown
https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1
unknown
https://y.music.163.com/m/
unknown
https://clients2.googleusercontent.com/crx/blobs/AYA8VyyVmiyWvldTRU0qGaR4RUSL6-YrG6uKRsMPsRWu4uzTWsENQ0Oe4TwjJlNxU5Vx3wW0XCsKQHAJ2XkWCO0eQ7UF3N9B6xg6w6N4ZQ_ezL5_s1EfR63s25vMOuhpdI4AxlKa5cntVqVuAOGwNK_pRVduNn5fPIzZ/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_83_1_0.crx
216.58.212.161
https://bard.google.com/
unknown
http://www.fontbureau.com/designersG
unknown
https://web.whatsapp.com
unknown
http://www.fontbureau.com/designers/?
unknown
http://www.founder.com.cn/cn/bThe
unknown
https://m.kugou.com/
unknown
https://www.office.com
unknown
http://www.fontbureau.com/designers?
unknown
https://outlook.live.com/mail/0/
unknown
http://www.tiro.com
unknown
http://www.amazon.com/
unknown
https://powerpoint.new?from=EdgeM365Shoreline
unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
unknown
http://www.goodfont.co.kr
unknown
http://www.twitter.com/
unknown
https://tidal.com/
unknown
http://www.typography.netD
unknown
http://www.galapagosdesign.com/staff/dennis.htm
unknown
http://fontfabrik.com
unknown
https://gaana.com/
unknown
https://drive-staging.corp.google.com/
unknown
https://outlook.live.com/mail/compose?isExtension=true
unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
unknown
http://www.fonts.com
unknown
http://www.sandoll.co.kr
unknown
https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
unknown
http://www.sakkal.com
unknown
https://latest.web.skype.com/?browsername=edge_canary_shoreline
unknown
https://word.new?from=EdgeM365Shoreline
unknown
http://www.apache.org/licenses/LICENSE-2.0
unknown
http://www.fontbureau.com
unknown
https://outlook.live.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
unknown
https://outlook.office.com/mail/0/
unknown
http://www.nytimes.com/
unknown
https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo
unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico
unknown
https://m.soundcloud.com/
unknown
https://mail.google.com/mail/mu/mp/266/#tl/Inbox
unknown
https://drive-autopush.corp.google.com/
unknown
https://music.amazon.com
unknown
https://outlook.office.com/mail/inbox?isExtension=true&sharedHeader=1&client_flight=outlookedge
unknown
https://open.spotify.com
unknown
https://twitter.com/
unknown
https://web.skype.com/?browsername=edge_stable_shoreline
unknown
https://www.onenote.com/stickynotesstaging?isEdgeHub=true
unknown
https://m.vk.com/
unknown
http://www.fontbureau.com/designers/cabarga.htmlN
unknown
file:///C:/Users/user/Desktop/PUESTO/PUESTO/bin/bin/DIMSA.Negocios.General.xml
http://www.founder.com.cn/cn
unknown
https://chrome.cloudflare-dns.com/dns-query
172.64.41.3
https://drive-daily-6.corp.google.com/
unknown
https://drive-daily-0.corp.google.com/
unknown
https://www.onenote.com/stickynotes?isEdgeHub=true
unknown
http://www.jiyu-kobo.co.jp/
unknown
https://www.iheart.com/podcast/
unknown
https://music.yandex.com
unknown
http://www.fontbureau.com/designers8
unknown
http://www.wikipedia.com/
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
chrome.cloudflare-dns.com
172.64.41.3
ssl.bingadsedgeextension-prod-europe.azurewebsites.net
94.245.104.56
googlehosted.l.googleusercontent.com
216.58.212.161
sni1gl.wpc.nucdn.net
152.199.21.175
clients2.googleusercontent.com
unknown
bzib.nelreports.net
unknown

IPs

IP
Domain
Country
Malicious
13.107.5.80
unknown
United States
13.107.246.57
unknown
United States
94.245.104.56
ssl.bingadsedgeextension-prod-europe.azurewebsites.net
United Kingdom
192.168.2.17
unknown
unknown
13.107.246.70
unknown
United States
162.159.61.3
unknown
United States
239.255.255.250
unknown
Reserved
216.58.212.161
googlehosted.l.googleusercontent.com
United States
173.223.110.175
unknown
United States
172.64.41.3
chrome.cloudflare-dns.com
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\TabbedBrowsing
NTPMigrationVer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListXMLVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListXMLVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
SoftwareFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
VendorId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
DeviceId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
SubSysId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\GPU
Revision
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
CVListDomainAttributeSet
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
StaleCompatCache
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\VersionManager
FirstCheckForUpdateLowDateTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\VersionManager
FirstCheckForUpdateHighDateTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
CompatibilityFlags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
HomepagesUpgradeVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
SecuritySafe
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\1f\417C44EB
@ieframe.dll,-12512
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\Active
{7285ED85-92E0-11EF-8C2F-ECF4BBFF258B}
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
SearchBandMigrationVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
FullScreen
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Recovery\PendingRecovery
Active
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Type
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435B-BC74-9C25C1C588A9}
Flags
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MAO Settings
DiscardLoadTimes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
ImageStoreRandomFolder
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{00021493-0000-0000-C000-000000000046}\Enum
Implementing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Suggested Sites
DataStreamEnabledState
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Suggested Sites
MigrationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
IEAppEolNotificationLastShownTimeStamp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy
SearchScopesUpgradeVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\Component Categories64\{00021494-0000-0000-C000-000000000046}\Enum
Implementing
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
DefaultScope
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
2BB20B33B4171CDAAB6469225AE6A582ED33D7B488
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
KnownProvidersUpgradeTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
DisplayName
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconURLFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconPath
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
FaviconURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
URL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURLFallback
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SuggestionsURL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MINIE
TabBandWidth
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionHigh
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\BrowserEmulation
IECompatVersionLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
3DB9590C4C4C26C4CCBDD94ECAD790359708C3267B
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\User Preferences
2BB20B33B4171CDAAB6469225AE6A582ED33D7B488
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LatestUpsellAttemptedSessionTime
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\Microsoft\Edge\IEToEdge
LastStubPath
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0031-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0032-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0033-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0034-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0034-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0035-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0036-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0037-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0038-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0039-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0040-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0041-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0041-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0042-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0043-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0044-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0045-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0046-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0047-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0048-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0049-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0050-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0051-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0052-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0052-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0052-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0052-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0053-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0054-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0054-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0055-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0055-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0055-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0055-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0056-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0057-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0057-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0058-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0059-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0059-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0060-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0061-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0062-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0062-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0062-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0062-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0063-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0064-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0064-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0064-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0064-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0065-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0065-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0066-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0067-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0068-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0069-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0070-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0071-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0072-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0072-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0073-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0074-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0074-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0075-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0076-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0077-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0078-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0079-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0080-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0081-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0082-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0083-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0084-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0085-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0086-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0087-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0088-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0089-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0090-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0091-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0091-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0091-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0091-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0092-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0093-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0093-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0094-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0095-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0096-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0097-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0098-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0098-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0013-0001-0099-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}\InprocServer32
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}\InprocServer32
ThreadingModel
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}
NULL
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
UpsellDisabled
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
QuietExpirationTime
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
freseenversion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
freseen
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Defaults
is_dse_recommended
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\Defaults
is_startup_page_recommended
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\DualEngineCacheContainerTracker
0GVV7W6G
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowProperties\132420
WindowTabManagerFileMappingId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ahfgeienlihckogmohjhadlkjgocpleb
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
dgiklkfkllikcanfonkcabmbdfmgleag
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
fikbjbembnmfhppjfnmfkahdhfohhjmg
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ghbmnnjooekpmoecnnnilnnbdlolhkhi
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
iglcjdemknebjbklcgkfaebgojjphkec
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ihmafllikibpmigkcoadcmckbfhibefp
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
jdiccldimpdaibmpdkjnbmckianbfold
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
mhjfbmdgcfjbbpaeojofohoefgiehjai
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
ncbjelpjchkpbikbpkcchkhkblodoama
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default\extensions.settings
nkeimhogjdpnpccoofpliimaahmaaome
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
prefs.preference_reset_time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\ThirdParty
StatusCodes
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\BLBeacon
state
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
dr
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\StabilityMetrics
user_experience_metrics.stability.exited_cleanly
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
media.cdm.origin_data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.reporting
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
media.storage_id_salt
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_startup_urls
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.prompt_wave
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.account_id
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.prompt_seed
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_homepage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.last_username
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
default_search_provider_data.template_url_data
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
safebrowsing.incidents_sent
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
pinned_tabs
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
search_provider_overrides
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
edge.services.last_account_id
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
software_reporter.prompt_version
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
session.startup_urls
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
session.restore_on_startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
settings_reset_prompt.last_triggered_for_default_search
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
prefs.preference_reset_time
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
browser.show_home_button
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
homepage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\PreferenceMACs\Default
homepage_is_newtabpage
HKEY_CURRENT_USER\SOFTWARE\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
lastrun
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\IEToEdge
RedirectionMode
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowProperties\132420
WindowTabManagerFileMappingId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowProperties\132420
WindowTabManagerFileMappingId
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\$RECYCLE.BIN
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\ProgramData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\ProgramData\Microsoft\Windows\DRM
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\Favorites
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\LocalLow
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\History
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Low
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\WER
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Feeds
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Temp\Low
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\IEShims\NormalizedPaths
C:\Users\user\AppData\Local\Microsoft\PlayReady
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Content
CachePrefix
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Content
CacheVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Content
CacheLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Cookies
CachePrefix
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Cookies
CacheVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Cookies
CacheLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\History
CachePrefix
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\History
CacheVersion
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\History
CacheLimit
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry
OperationalData
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Owner
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
SessionHash
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
Sequence
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFiles0000
HKEY_CURRENT_USER\SOFTWARE\Microsoft\RestartManager\Session0000
RegFilesHash
There are 651 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
1C5E000
stack
page read and write
643EAFE000
unkown
page readonly
1B9800280000
trusted library allocation
page read and write
1677C102000
heap
page read and write
8A9A000
unkown
page readonly
8140000
trusted library allocation
page read and write
A2FE000
stack
page read and write
1FD2A370000
heap
page read and write
A028000
unkown
page readonly
B932000
heap
page read and write
7D800264000
trusted library allocation
page read and write
5AB4000
heap
page read and write
7D800220000
trusted library allocation
page read and write
B80E000
stack
page read and write
1C90000
heap
page read and write
8EBECFE000
stack
page read and write
190F000
stack
page read and write
1677C088000
heap
page read and write
1B98002D0000
trusted library allocation
page read and write
1677C073000
heap
page read and write
1FD2A446000
heap
page read and write
8DC2000
unkown
page readonly
643F5FE000
stack
page read and write
37C1000
trusted library allocation
page read and write
5C8A000
unkown
page readonly
1E37000
trusted library allocation
page read and write
2D568FE000
unkown
page readonly
199A000
trusted library allocation
page execute and read and write
1677C200000
heap
page read and write
1D6F4640000
heap
page read and write
396C000
trusted library allocation
page read and write
7D800210000
trusted library allocation
page read and write
B90E000
stack
page read and write
5AB0000
heap
page read and write
2D55757000
stack
page read and write
1B46000
trusted library allocation
page read and write
2D566FE000
unkown
page readonly
1B980023C000
trusted library allocation
page read and write
5AA6000
unkown
page readonly
1B9800290000
trusted library allocation
page read and write
1FD2A400000
heap
page read and write
870B000
trusted library allocation
page read and write
3920000
trusted library allocation
page read and write
8710000
trusted library allocation
page execute and read and write
1FD2A390000
heap
page read and write
2D55DFE000
stack
page read and write
1677C013000
heap
page read and write
1B54000
heap
page execute and read and write
1E60000
heap
page read and write
1677DAB0000
heap
page read and write
7030000
heap
page read and write
1777000
heap
page read and write
7D80023C000
trusted library allocation
page read and write
1B9800258000
trusted library allocation
page read and write
2D55BFE000
stack
page read and write
1AC0000
trusted library allocation
page read and write
2D567FB000
stack
page read and write
7D800230000
trusted library allocation
page read and write
170F000
stack
page read and write
856A000
heap
page read and write
198A000
trusted library allocation
page execute and read and write
8EBEDFF000
stack
page read and write
158E000
stack
page read and write
1719000
heap
page read and write
643EEFE000
unkown
page readonly
1E40000
trusted library allocation
page read and write
5A7A000
trusted library allocation
page read and write
5A80000
trusted library allocation
page read and write
11F6000
stack
page read and write
1E52000
trusted library allocation
page execute and read and write
8700000
trusted library allocation
page read and write
6290000
unkown
page readonly
1600000
heap
page read and write
1FD2A464000
heap
page read and write
1605000
heap
page read and write
A130000
trusted library allocation
page read and write
643F1FE000
stack
page read and write
198C000
trusted library allocation
page execute and read and write
2D565FE000
stack
page read and write
643E9FE000
stack
page read and write
B6CE000
stack
page read and write
1710000
heap
page read and write
8750000
heap
page execute and read and write
6D50000
heap
page read and write
2D560FE000
unkown
page readonly
3967000
trusted library allocation
page read and write
1FD2A426000
heap
page read and write
1AB0000
trusted library allocation
page read and write
8912000
unkown
page readonly
7D80024C000
trusted library allocation
page read and write
1B98002CC000
trusted library allocation
page read and write
1D6F2DF0000
heap
page read and write
1C97000
heap
page read and write
1D6F2FF5000
heap
page read and write
1B9800230000
trusted library allocation
page read and write
2D55EFE000
unkown
page readonly
7D800238000
trusted library allocation
page read and write
867D000
trusted library allocation
page read and write
5CB0000
unkown
page readonly
8670000
trusted library allocation
page read and write
8EBED7F000
stack
page read and write
6EDC000
heap
page read and write
A3FE000
stack
page read and write
59DE000
stack
page read and write
1B20000
heap
page read and write
1FD2A471000
heap
page read and write
197A000
trusted library allocation
page execute and read and write
643F3FE000
stack
page read and write
8E30000
trusted library allocation
page read and write
7D800258000
trusted library allocation
page read and write
7D800254000
trusted library allocation
page read and write
1677C2F0000
heap
page read and write
1C80000
trusted library allocation
page read and write
7D800201000
trusted library allocation
page read and write
8682000
unkown
page readonly
8130000
trusted library allocation
page read and write
1ACB000
trusted library allocation
page execute and read and write
6EE6000
heap
page read and write
7D8002A8000
trusted library allocation
page read and write
8040000
heap
page read and write
643E7FE000
stack
page read and write
10F8000
stack
page read and write
B910000
heap
page read and write
1B980024C000
trusted library allocation
page read and write
5A5E000
stack
page read and write
2D564FE000
unkown
page readonly
643F2FE000
unkown
page readonly
7D8002AC000
trusted library allocation
page read and write
7D80020C000
trusted library allocation
page read and write
856D000
heap
page read and write
1677DC02000
heap
page read and write
1B9800238000
trusted library allocation
page read and write
9F32000
unkown
page readonly
1AC5000
trusted library allocation
page execute and read and write
5C00000
trusted library allocation
page execute and read and write
643F0FE000
unkown
page readonly
9710000
trusted library allocation
page execute and read and write
643EBFE000
stack
page read and write
8910000
unkown
page readonly
1B9800220000
trusted library allocation
page read and write
1677BFE0000
heap
page read and write
1677C03B000
heap
page read and write
174D000
heap
page read and write
1AB2000
trusted library allocation
page execute and read and write
5AA8000
unkown
page readonly
5C70000
unkown
page readonly
A140000
unclassified section
page read and write
171E000
heap
page read and write
1D6F2C10000
heap
page read and write
5A70000
trusted library allocation
page read and write
1992000
trusted library allocation
page read and write
5A90000
unkown
page readonly
1B9800254000
trusted library allocation
page read and write
1677C084000
heap
page read and write
5BBE000
stack
page read and write
1677C000000
heap
page read and write
1996000
trusted library allocation
page execute and read and write
599E000
stack
page read and write
6EA0000
heap
page read and write
876C000
trusted library section
page read and write
2D562FE000
unkown
page readonly
6D55000
heap
page read and write
1540000
heap
page read and write
6D30000
trusted library section
page readonly
868C000
unkown
page readonly
8680000
unkown
page readonly
C10000
unkown
page readonly
1B98002C0000
trusted library allocation
page read and write
5C72000
unkown
page readonly
1FD2A413000
heap
page read and write
105E000
unkown
page readonly
7D800284000
trusted library allocation
page read and write
643EDFE000
stack
page read and write
8660000
trusted library allocation
page execute and read and write
1D6F2FF0000
heap
page read and write
609E000
stack
page read and write
1AC7000
trusted library allocation
page execute and read and write
19A0000
heap
page read and write
1ABA000
trusted library allocation
page execute and read and write
1AC2000
trusted library allocation
page read and write
8767000
trusted library section
page read and write
1677C045000
heap
page read and write
1E50000
trusted library allocation
page execute and read and write
1960000
trusted library allocation
page read and write
2D55CFE000
unkown
page readonly
8E20000
trusted library allocation
page read and write
8EBEC7C000
stack
page read and write
C12000
unkown
page readonly
1982000
trusted library allocation
page execute and read and write
1677C002000
heap
page read and write
878B000
trusted library section
page read and write
1460000
heap
page read and write
1972000
trusted library allocation
page execute and read and write
A29E000
stack
page read and write
9F30000
unkown
page readonly
1FD2A41A000
heap
page read and write
1677C2E0000
heap
page readonly
1677C021000
heap
page read and write
1B40000
trusted library allocation
page read and write
643E8FE000
unkown
page readonly
1B50000
heap
page execute and read and write
8678000
trusted library allocation
page read and write
6EB0000
heap
page read and write
643F6FE000
unkown
page readonly
6D9B000
stack
page read and write
1FD2A45F000
heap
page read and write
1B98002A8000
trusted library allocation
page read and write
1990000
trusted library allocation
page read and write
1B98002B0000
trusted library allocation
page read and write
643E328000
stack
page read and write
5E98000
unkown
page readonly
1FD2A402000
heap
page read and write
6E9D000
stack
page read and write
2D563FE000
stack
page read and write
B7CE000
stack
page read and write
17DD000
heap
page read and write
15CE000
stack
page read and write
A2B0000
heap
page read and write
1D6F2D10000
heap
page read and write
1FD2A3C0000
heap
page read and write
8740000
heap
page read and write
589E000
stack
page read and write
A19D000
stack
page read and write
1B0E000
stack
page read and write
1D6F2C18000
heap
page read and write
1B9800284000
trusted library allocation
page read and write
1677C060000
heap
page read and write
8162000
trusted library allocation
page read and write
5A92000
unkown
page readonly
3952000
trusted library allocation
page read and write
7D800290000
trusted library allocation
page read and write
1B9800264000
trusted library allocation
page read and write
1FD2A502000
heap
page read and write
1B4A000
trusted library allocation
page read and write
8540000
heap
page read and write
8DC0000
unkown
page readonly
7D800280000
trusted library allocation
page read and write
1B9800274000
trusted library allocation
page read and write
1986000
trusted library allocation
page execute and read and write
7D800274000
trusted library allocation
page read and write
8760000
trusted library section
page read and write
665A000
unkown
page readonly
5CB2000
unkown
page readonly
5A61000
trusted library allocation
page read and write
9720000
heap
page read and write
47C1000
trusted library allocation
page read and write
868E000
unkown
page readonly
643EFFD000
stack
page read and write
2D55FFE000
stack
page read and write
1B9800201000
trusted library allocation
page read and write
6292000
unkown
page readonly
17F3000
heap
page read and write
2D561FE000
stack
page read and write
1D6F2E10000
heap
page read and write
1677C02D000
heap
page read and write
1677C024000
heap
page read and write
1E66000
heap
page read and write
643ECFE000
unkown
page readonly
643F4FE000
unkown
page readonly
There are 249 hidden memdumps, click here to show them.

DOM / HTML

URL
Malicious
file:///C:/Users/user/Desktop/PUESTO/PUESTO/bin/bin/DIMSA.Negocios.General.xml