IOC Report
WinSCP-6.3.5-Setup.exe

loading gif

Files

File Path
Type
Category
Malicious
WinSCP-6.3.5-Setup.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
C:\Program Files (x86)\WinSCP\WinSCP.exe (copy)
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
 malicious
C:\Users\user\AppData\Local\Temp\is-9B42P.tmp\WinSCP-6.3.5-Setup.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\Program Files (x86)\WinSCP\DragExt64.dll (copy)
PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Extensions\ArchiveDownload.WinSCPextension.ps1 (copy)
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\BatchRename.WinSCPextension.ps1 (copy)
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\CompareFiles.WinSCPextension.ps1 (copy)
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\GenerateHttpUrl.WinSCPextension.ps1 (copy)
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\KeepLocalUpToDate.WinSCPextension.ps1 (copy)
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\SearchText.WinSCPextension.ps1 (copy)
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\SynchronizeAnotherServer.WinSCPextension.ps1 (copy)
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\VerifyFileChecksum.WinSCPextension.ps1 (copy)
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\ZipUpload.WinSCPextension.ps1 (copy)
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\is-2OK6J.tmp
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\is-8TIJ5.tmp
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\is-BQ1JP.tmp
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\is-CQOQS.tmp
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\is-HUOBU.tmp
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\is-O19AE.tmp
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\is-P36QM.tmp
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\is-PDQCT.tmp
ASCII text
dropped
C:\Program Files (x86)\WinSCP\Extensions\is-US3B1.tmp
ASCII text
dropped
C:\Program Files (x86)\WinSCP\PuTTY\LICENCE (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\WinSCP\PuTTY\is-00T6O.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\WinSCP\PuTTY\is-1UBMP.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\WinSCP\PuTTY\is-OJFBS.tmp
MS Windows HtmlHelp Data
dropped
C:\Program Files (x86)\WinSCP\PuTTY\is-VK93L.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\WinSCP\PuTTY\pageant.exe (copy)
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\WinSCP\PuTTY\putty.chm (copy)
MS Windows HtmlHelp Data
dropped
C:\Program Files (x86)\WinSCP\PuTTY\puttygen.exe (copy)
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.ar (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.be (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.bg (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.ca (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.ch (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.chs (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.cs (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.da (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.de (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.el (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.es (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.et (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.fa (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.fi (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.fr (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.hr (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.hu (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.in (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.is (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.it (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.jp (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.ko (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.lt (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.ms (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.nl (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.no (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.pl (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.pt (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.ptg (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.ro (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.ru (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.sk (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.srl (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.sv (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.ta (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.tr (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.uk (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.vi (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\WinSCP.xxk (copy)
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-0PHNM.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-12FUS.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-24MJE.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-252L7.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-25U96.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-2I3LS.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-2NLBT.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-2OH6T.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-3OA4A.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-6D65U.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-7TGIJ.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-9C1M4.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-A0EPI.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-AQ578.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-B45FB.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-BO0F5.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-D09V8.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-E9RG6.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-EJ8B7.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-EKLQ1.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-F9A3R.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-FQG0H.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-G6EB7.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-I1HPU.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-JJBU1.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-L0PL5.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-L7Q5O.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-MU78M.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-NR0U8.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-O60P0.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-P7JQO.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-P93HC.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-PTP8A.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-RHNVA.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-S743B.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-SI23F.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-SU27Q.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-UNNRO.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\Translations\is-V0JFT.tmp
PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\WinSCP.com (copy)
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\WinSCP.map (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\WinSCP\WinSCPnet.dll (copy)
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files (x86)\WinSCP\is-A0CCT.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\WinSCP\is-HCFOU.tmp
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\is-JIVJ0.tmp
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\WinSCP\is-MITNN.tmp
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
C:\Program Files (x86)\WinSCP\is-PM78M.tmp
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\WinSCP\is-TES8D.tmp
PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\is-VH8LO.tmp
PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
dropped
C:\Program Files (x86)\WinSCP\license.txt (copy)
ASCII text, with CRLF line terminators
dropped
C:\Program Files (x86)\WinSCP\unins000.dat
InnoSetup Log WinSCP, version 0x418, 90320 bytes, 549163\37\user\, C:\Program Files (x86)\WinSCP\376\377\377\
dropped
C:\Program Files (x86)\WinSCP\unins000.exe (copy)
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
C:\Program Files (x86)\WinSCP\unins000.msg
InnoSetup messages, version 6.0.0, 261 messages (UTF-16), Cancel installation
dropped
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has Working directory, Archive, ctime=Thu Oct 31 17:45:48 2024, mtime=Thu Oct 31 17:45:49 2024, atime=Tue Sep 10 14:43:42 2024, length=23010336, window=hide
dropped
C:\Users\Public\Desktop\WinSCP.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has Working directory, Archive, ctime=Thu Oct 31 17:45:48 2024, mtime=Thu Oct 31 17:45:53 2024, atime=Tue Sep 10 14:43:42 2024, length=23010336, window=hide
dropped
C:\Users\user\AppData\Local\Temp\is-MJOGT.tmp\Commander 32.bmp
PC bitmap, Windows 98/2000 and newer format, 32 x 32 x 32, cbSize 4234, bits offset 138
dropped
C:\Users\user\AppData\Local\Temp\is-MJOGT.tmp\Explorer 32.bmp
PC bitmap, Windows 98/2000 and newer format, 32 x 32 x 32, cbSize 4234, bits offset 138
dropped
C:\Users\user\AppData\Local\Temp\is-MJOGT.tmp\Opened bookmark folder-stored session folder 32.bmp
PC bitmap, Windows 98/2000 and newer format, 32 x 32 x 32, cbSize 4234, bits offset 138
dropped
C:\Users\user\AppData\Local\Temp\is-MJOGT.tmp\PayPalCard.bmp
PC bitmap, Windows 3.x format, 171 x 47 x 32, image size 32148, resolution 3780 x 3780 px/m, cbSize 32202, bits offset 54
dropped
C:\Users\user\AppData\Local\Temp\is-MJOGT.tmp\_isetup\_setup64.tmp
PE32+ executable (console) x86-64, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2O25J8SO8ZWH1MSFGOZ7.temp
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6bb54d82fa42128d.customDestinations-ms (copy)
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6bb54d82fa42128d.customDestinations-ms~RF445a5a.TMP (copy)
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6bb54d82fa42128d.customDestinations-ms~RF446ca9.TMP (copy)
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6bb54d82fa42128d.customDestinations-ms~RF447573.TMP (copy)
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\AOWOBEDK1KKT3BOBAXGN.temp
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\C0ZAVFXCSZRCNEUDYICB.temp
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DIELH39JYRP48H7IQENI.temp
data
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\SendTo\WinSCP (for upload).lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Archive, ctime=Thu Oct 31 17:45:48 2024, mtime=Thu Oct 31 17:45:53 2024, atime=Tue Sep 10 14:43:42 2024, length=23010336, window=hide
dropped
C:\Users\user\AppData\Roaming\winscp.rnd
data
dropped
Chrome Cache Entry: 228
ASCII text, with very long lines (723)
downloaded
Chrome Cache Entry: 229
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 230
ASCII text, with very long lines (3533)
dropped
Chrome Cache Entry: 231
HTML document, Unicode text, UTF-8 text, with very long lines (523)
downloaded
Chrome Cache Entry: 232
PNG image data, 13 x 39, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 233
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 234
ASCII text, with very long lines (3253)
dropped
Chrome Cache Entry: 235
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 236
ASCII text, with very long lines (3673)
downloaded
Chrome Cache Entry: 237
JSON data
dropped
Chrome Cache Entry: 238
ASCII text, with very long lines (4158)
downloaded
Chrome Cache Entry: 239
ASCII text, with very long lines (11680)
downloaded
Chrome Cache Entry: 240
ASCII text, with very long lines (15105)
dropped
Chrome Cache Entry: 241
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 242
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 243
HTML document, ASCII text, with very long lines (815)
downloaded
Chrome Cache Entry: 244
ASCII text, with very long lines (2093)
downloaded
Chrome Cache Entry: 245
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 246
ASCII text, with very long lines (41295)
downloaded
Chrome Cache Entry: 247
ASCII text, with very long lines (43140)
downloaded
Chrome Cache Entry: 248
ASCII text, with very long lines (786)
downloaded
Chrome Cache Entry: 249
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 250
ASCII text
downloaded
Chrome Cache Entry: 251
Unicode text, UTF-8 text, with very long lines (38752)
downloaded
Chrome Cache Entry: 252
ASCII text
dropped
Chrome Cache Entry: 253
PNG image data, 350 x 148, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 254
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 255
ASCII text, with very long lines (3580)
downloaded
Chrome Cache Entry: 256
ASCII text, with very long lines (31997)
dropped
Chrome Cache Entry: 257
ASCII text, with very long lines (3533)
downloaded
Chrome Cache Entry: 258
ASCII text, with very long lines (32588)
dropped
Chrome Cache Entry: 259
PNG image data, 24 x 24, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 260
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 261
Web Open Font Format (Version 2), TrueType, length 20628, version 2.65
downloaded
Chrome Cache Entry: 262
ASCII text, with very long lines (9470)
downloaded
Chrome Cache Entry: 263
C++ source, ASCII text, with very long lines (2873)
downloaded
Chrome Cache Entry: 264
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 265
PNG image data, 55 x 54, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 266
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 267
ASCII text, with very long lines (1572)
downloaded
Chrome Cache Entry: 268
Web Open Font Format (Version 2), TrueType, length 27284, version 2.8978
downloaded
Chrome Cache Entry: 269
ASCII text, with very long lines (386)
downloaded
Chrome Cache Entry: 270
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3
downloaded
Chrome Cache Entry: 271
ASCII text, with very long lines (4892), with no line terminators
downloaded
Chrome Cache Entry: 272
ASCII text, with very long lines (1382)
dropped
Chrome Cache Entry: 273
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 274
ASCII text
downloaded
Chrome Cache Entry: 275
ASCII text, with very long lines (7884), with no line terminators
dropped
Chrome Cache Entry: 276
ASCII text, with very long lines (43140)
dropped
Chrome Cache Entry: 277
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3
dropped
Chrome Cache Entry: 278
ASCII text
dropped
Chrome Cache Entry: 279
ASCII text, with very long lines (327)
downloaded
Chrome Cache Entry: 280
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 281
ASCII text, with very long lines (316)
dropped
Chrome Cache Entry: 282
ASCII text, with very long lines (1055)
downloaded
Chrome Cache Entry: 283
exported SGML document, ASCII text
dropped
Chrome Cache Entry: 284
ASCII text, with very long lines (41295)
dropped
Chrome Cache Entry: 285
ASCII text
downloaded
Chrome Cache Entry: 286
ASCII text, with very long lines (31997)
downloaded
Chrome Cache Entry: 287
Web Open Font Format (Version 2), TrueType, length 27428, version 2.8978
downloaded
Chrome Cache Entry: 288
ASCII text
dropped
Chrome Cache Entry: 289
HTML document, ASCII text, with very long lines (2008)
downloaded
Chrome Cache Entry: 290
PNG image data, 350 x 148, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 291
ASCII text, with very long lines (1957)
downloaded
Chrome Cache Entry: 292
HTML document, ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 293
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 294
HTML document, ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 295
MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel
dropped
Chrome Cache Entry: 296
ASCII text, with very long lines (20634)
dropped
Chrome Cache Entry: 297
ASCII text, with very long lines (3673)
dropped
Chrome Cache Entry: 298
MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel
downloaded
Chrome Cache Entry: 299
ASCII text, with very long lines (2984)
downloaded
Chrome Cache Entry: 300
ASCII text, with very long lines (6040)
dropped
Chrome Cache Entry: 301
HTML document, Unicode text, UTF-8 text, with very long lines (43316)
dropped
Chrome Cache Entry: 302
ASCII text
dropped
Chrome Cache Entry: 303
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 304
ASCII text, with very long lines (1984)
downloaded
Chrome Cache Entry: 305
C++ source, ASCII text, with very long lines (2015)
downloaded
Chrome Cache Entry: 306
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 307
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
dropped
Chrome Cache Entry: 308
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 309
ASCII text, with very long lines (10048)
downloaded
Chrome Cache Entry: 310
ASCII text, with very long lines (2343)
dropped
Chrome Cache Entry: 311
ASCII text, with very long lines (1110)
dropped
Chrome Cache Entry: 312
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 313
ASCII text, with very long lines (4281)
downloaded
Chrome Cache Entry: 314
ASCII text, with very long lines (2015)
dropped
Chrome Cache Entry: 315
ASCII text
dropped
Chrome Cache Entry: 316
ASCII text, with very long lines (2343)
downloaded
Chrome Cache Entry: 317
JSON data
downloaded
Chrome Cache Entry: 318
HTML document, ASCII text, with very long lines (56043)
downloaded
Chrome Cache Entry: 319
ASCII text
downloaded
Chrome Cache Entry: 320
ASCII text, with very long lines (32076)
downloaded
Chrome Cache Entry: 321
HTML document, ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 322
ASCII text
dropped
Chrome Cache Entry: 323
ASCII text
downloaded
Chrome Cache Entry: 324
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 325
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 326
ASCII text, with very long lines (327)
dropped
Chrome Cache Entry: 327
ASCII text, with very long lines (9845)
downloaded
Chrome Cache Entry: 328
Web Open Font Format (Version 2), TrueType, length 20400, version 2.65
downloaded
Chrome Cache Entry: 329
ASCII text, with very long lines (786)
dropped
Chrome Cache Entry: 330
ASCII text, with very long lines (1382)
downloaded
Chrome Cache Entry: 331
ASCII text, with very long lines (10048)
dropped
Chrome Cache Entry: 332
HTML document, ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 333
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 334
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
dropped
Chrome Cache Entry: 335
ASCII text, with very long lines (1984)
dropped
Chrome Cache Entry: 336
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 337
ASCII text, with very long lines (2586)
downloaded
Chrome Cache Entry: 338
ASCII text, with very long lines (53751)
dropped
Chrome Cache Entry: 339
ASCII text
downloaded
Chrome Cache Entry: 340
ASCII text, with very long lines (2345)
downloaded
Chrome Cache Entry: 341
ASCII text, with very long lines (2200)
downloaded
Chrome Cache Entry: 342
Unicode text, UTF-8 text, with very long lines (32000)
downloaded
Chrome Cache Entry: 343
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 344
assembler source, ASCII text, with very long lines (540)
downloaded
Chrome Cache Entry: 345
ASCII text, with very long lines (13496)
dropped
Chrome Cache Entry: 346
ASCII text, with very long lines (2345)
dropped
Chrome Cache Entry: 347
PNG image data, 55 x 54, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 348
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 349
ASCII text, with very long lines (2093)
dropped
Chrome Cache Entry: 350
C++ source, ASCII text, with very long lines (2015)
dropped
Chrome Cache Entry: 351
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 399x209, components 3
dropped
Chrome Cache Entry: 352
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 353
JSON data
downloaded
Chrome Cache Entry: 354
ASCII text, with very long lines (13496)
downloaded
Chrome Cache Entry: 355
exported SGML document, ASCII text
downloaded
Chrome Cache Entry: 356
ASCII text, with very long lines (3253)
downloaded
Chrome Cache Entry: 357
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 358
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 359
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 360
ASCII text
downloaded
Chrome Cache Entry: 361
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 362
ASCII text, with very long lines (11680)
dropped
Chrome Cache Entry: 363
ASCII text, with very long lines (2200)
dropped
Chrome Cache Entry: 364
ASCII text, with very long lines (9845)
dropped
Chrome Cache Entry: 365
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 399x209, components 3
downloaded
Chrome Cache Entry: 366
ASCII text, with very long lines (53751)
downloaded
Chrome Cache Entry: 367
ASCII text, with very long lines (32588)
downloaded
Chrome Cache Entry: 368
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 369
ASCII text, with very long lines (2586)
dropped
Chrome Cache Entry: 370
ASCII text, with very long lines (3580)
dropped
Chrome Cache Entry: 371
PNG image data, 13 x 39, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 372
ASCII text, with very long lines (6040)
downloaded
Chrome Cache Entry: 373
ASCII text, with very long lines (20634)
downloaded
Chrome Cache Entry: 374
ASCII text, with very long lines (2015)
downloaded
Chrome Cache Entry: 375
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 376
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
dropped
Chrome Cache Entry: 377
ASCII text, with very long lines (32076)
dropped
Chrome Cache Entry: 378
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 379
ASCII text, with very long lines (316)
downloaded
Chrome Cache Entry: 380
ASCII text, with very long lines (1055)
dropped
Chrome Cache Entry: 381
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 382
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
downloaded
Chrome Cache Entry: 383
HTML document, ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 384
ASCII text, with very long lines (5431)
downloaded
Chrome Cache Entry: 385
ASCII text, with very long lines (4909), with no line terminators
dropped
Chrome Cache Entry: 386
Unicode text, UTF-8 text, with very long lines (32000)
dropped
Chrome Cache Entry: 387
HTML document, ASCII text, with very long lines (829), with no line terminators
downloaded
Chrome Cache Entry: 388
ASCII text, with very long lines (20634)
dropped
Chrome Cache Entry: 389
ASCII text, with very long lines (53385)
dropped
Chrome Cache Entry: 390
JSON data
dropped
Chrome Cache Entry: 391
ASCII text, with very long lines (2984)
dropped
Chrome Cache Entry: 392
Unicode text, UTF-8 text, with very long lines (38752)
dropped
Chrome Cache Entry: 393
HTML document, ASCII text, with very long lines (843), with no line terminators
downloaded
Chrome Cache Entry: 394
ASCII text, with very long lines (53385)
downloaded
Chrome Cache Entry: 395
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
downloaded
Chrome Cache Entry: 396
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 397
ASCII text, with very long lines (1957)
dropped
Chrome Cache Entry: 398
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 399
ASCII text, with very long lines (20634)
downloaded
Chrome Cache Entry: 400
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
downloaded
Chrome Cache Entry: 401
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 402
ASCII text, with very long lines (7884), with no line terminators
downloaded
Chrome Cache Entry: 403
Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
downloaded
Chrome Cache Entry: 404
PNG image data, 24 x 24, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 405
ASCII text, with very long lines (1110)
downloaded
Chrome Cache Entry: 406
HTML document, ASCII text, with very long lines (29689)
downloaded
Chrome Cache Entry: 407
ASCII text
downloaded
Chrome Cache Entry: 408
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 409
ASCII text, with very long lines (15105)
downloaded
Chrome Cache Entry: 410
ASCII text, with very long lines (4158)
dropped
Chrome Cache Entry: 411
Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
downloaded
Chrome Cache Entry: 412
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 413
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 414
HTML document, ASCII text
downloaded
Chrome Cache Entry: 415
GIF image data, version 89a, 1 x 1
downloaded
There are 317 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\AppData\Local\Temp\is-9B42P.tmp\WinSCP-6.3.5-Setup.tmp
"C:\Users\user\AppData\Local\Temp\is-9B42P.tmp\WinSCP-6.3.5-Setup.tmp" /SL5="$20406,10489221,930816,C:\Users\user\Desktop\WinSCP-6.3.5-Setup.exe"
malicious
C:\Windows\System32\regsvr32.exe
/s "C:\Program Files (x86)\WinSCP\DragExt64.dll"
 malicious
C:\Program Files (x86)\WinSCP\WinSCP.exe
"C:\Program Files (x86)\WinSCP\WinSCP.exe" /RegisterForDefaultProtocols
 malicious
C:\Program Files (x86)\WinSCP\WinSCP.exe
"C:\Program Files (x86)\WinSCP\WinSCP.exe" /ImportSitesIfAny
 malicious
C:\Program Files (x86)\WinSCP\WinSCP.exe
"C:\Program Files (x86)\WinSCP\WinSCP.exe" /Usage=TypicalInstallation:1,InstallationsUser+,InstallationParentProcess@,InstallationsFirstTypical+,LastInstallationAutomaticUpgrade:0,InstallationsGettingStarted+,InstallationsLaunch+,
 malicious
C:\Program Files (x86)\WinSCP\WinSCP.exe
"C:\Program Files (x86)\WinSCP\WinSCP.exe"
 malicious
C:\Users\user\Desktop\WinSCP-6.3.5-Setup.exe
"C:\Users\user\Desktop\WinSCP-6.3.5-Setup.exe"
C:\Windows\SysWOW64\regsvr32.exe
"C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\WinSCP\DragExt64.dll"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://winscp.net/eng/installed.php?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3552 --field-trial-handle=3276,i,636435449627489665,5607076903918076227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

URLs

Name
IP
Malicious
https://scontent-phx1-1.xx.fbcdn.net/v/t39.30808-1/351156904_264152706143983_3109134666055357303_n.jpg?stp=cp0_dst-jpg_s50x50&_nc_cat=100&ccb=1-7&_nc_sid=6738e8&_nc_ohc=VaXOflnuDHcQ7kNvgGYZY5H&_nc_zt=24&_nc_ht=scontent-phx1-1.xx&edm=AFugn8MEAAAA&_nc_gid=A5asr7dU5KxjBSbIZbIPEvJ&oh=00_AYAVosyj27yGB-nAl8xsHDz4QfMDJaExqAWoiWH0J70L6Q&oe=672987CE
57.144.134.128
https://www.facebook.com/platform/plugin/page/logging/
157.240.0.35
https://filezilla-project.org/bAcest
unknown
https://static.xx.fbcdn.net/rsrc.php/v3i7M54/y0/l/en_US/zYyn94Uppv5.js
157.240.251.9
https://static.xx.fbcdn.net/rsrc.php/v4/yk/l/0,cross/GY0bX-iB97s.css
157.240.251.9
https://jrsoftware.org/tb2kdl.php
unknown
https://stackoverflow.com/q/1359793/850848#14699663
unknown
https://winscp.net/install.php?mode=sponsorrequest&ver=6.3.5&lang=en&prevver=&scale=100&images=-ae
unknown
http://webdav.org/neon/hooks/webdav-lockinghttp://webdav.org/neon/hooks/webdav-lockingLocked
unknown
https://winscp.net/eng/docs/library_example_zip_and_uploadI=
unknown
https://openssl-library.org//Codi
unknown
https://winscp.net/eng/docs/library_example_keep_local_directory_up_to_date#options
unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yy/r/Chl8448Q49S.js
157.240.251.9
https://static.xx.fbcdn.net/rsrc.php/v3/yG/r/IJz2TIVxd6Q.js
157.240.251.9
https://filezilla-project.org/nAquest
unknown
https://winscp-static-746341.c.cdn77.org/assets/js/slick-init.js?v=7034
37.19.194.80
https://www.internalfb.com/intern/invariant/
unknown
https://www.chiark.greenend.org.uk/~sgtatham/putty/
unknown
https://www.remobjects.com/ps
unknown
https://www.facebook.com/ajax/bz?__a=1&__ccg=GOOD&__dyn=7wKxa13wt8K2Wmh0Sw8W5U4e1Fx-ewpU3WwvE3vx60Vo1upE4W0OE1vE662y0um4o5-0me0sy0ny0oi0zE5W0PU1AE17U2ZwrU1Xo1UU3jwea&__hs=20027.BP%3Aplugin_default_pkg.2.0..0.0&__hsi=7432013032883179535&__req=5&__rev=1017838824&__s=%3A%3Aplzgdo&__sp=1&__user=0&dpr=1&jazoest=21919&locale=en_US&lsd=JmzYf9flXws1Rh6-Wn6T0u
157.240.0.35
https://static.xx.fbcdn.net/rsrc.php/v3/yz/r/c64elx0V1Fa.js
157.240.251.9
https://www.innosetup.com/
unknown
http://apache.org/dav/propset/fs/1
unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js
157.240.251.9
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1682759925159355&output=html&h=280&slotname=6822944091&adk=2358527528&adf=101933203&pi=t.ma~as.6822944091&w=649&abgtt=9&fwrn=4&fwrnh=100&lmt=1730400375&rafmt=1&format=649x280&url=https%3A%2F%2Fwinscp.net%2Feng%2Fdocs%2Fafter_installation%3Fver%3D6.3.5%26lang%3Den%26utm_source%3Dwinscp%26utm_medium%3Dsetup%26utm_campaign%3D6.3.5%26prevver%3D%26automatic%3D0&fwr=0&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1730400373001&bpp=4&bdt=3647&idt=2647&shv=r20241030&mjsv=m202410240101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=649x280&correlator=6162542844500&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=30&ady=1480&biw=1017&bih=870&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C95346096%2C95331832%2C95343682%2C95344190%2C95345789%2C95345963%2C95345967&oid=2&pvsid=3008781997726900&tmod=996236526&uas=0&nvt=1&fc=896&brdim=10%2C10%2C10%2C10%2C1280%2C0%2C1050%2C964%2C1034%2C870&vis=1&rsz=%7C%7CEebr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1.02&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=2652
172.217.16.194
https://www.facebook.com/platform/plugin/tab/renderer/?key=timeline&config_json=%7B%22app_id%22%3A%22215157521840905%22%2C%22href%22%3A%22https%3A%2F%2Fwww.facebook.com%2Fwinscp%2F%22%2C%22width%22%3A340%2C%22height%22%3A400%2C%22has_cta%22%3Atrue%2C%22has_small_header%22%3Afalse%2C%22has_adapt_container_width%22%3Atrue%2C%22has_cover%22%3Atrue%2C%22has_posts%22%3Afalse%2C%22tabs%22%3A%22timeline%22%2C%22can_personalize%22%3Afalse%2C%22is_xfbml%22%3Atrue%2C%22referer_uri%22%3A%22https%3A%2F%2Fwinscp.net%2F%22%7D&fb_dtsg_ag&__user=0&__a=1&__req=1&__hs=20027.BP%3Aplugin_default_pkg.2.0..0.0&dpr=1&__ccg=GOOD&__rev=1017838824&__s=%3A%3Aplzgdo&__hsi=7432013032883179535&__dyn=7wKxa13wt8K2Wmh0Sw8W5U4e1Fx-ewpU3WwvE3vx60Vo1upE4W0OE1vE662y0um4o5-0me0sy0ny0oi0zE5W0PU1AE17U2ZwrU1Xo1UU3jwea&__csr=&locale=en_US&__sp=1
157.240.0.35
https://winscp.net/favicon.ico
88.198.21.111
https://fundingchoicesmessages.google.com/el/AGSKWxXVowT_P7UFkqWweTaxyBwibPZ8_cu1zf1cqGWD3U6li-jqPgcGXrvL6Uq1wL18CbD-6faE1WmeMeuKJ_DY9EBehS9v-cpooOhEdYCL9h_507RJOWCW40eVwldcjha9EJ0lEYQfSQ==
172.217.16.206
http://apache.org/dav/props/T
unknown
https://winscp.net/eng/docs/library_example_zip_and_uploadP
unknown
https://winscp.net/(
unknown
https://winscp.net/&
unknown
https://syndication.twitter.com/settings?session_id=dd9b3d302a9b92ee788c222ff5c4209225028450
104.244.42.8
https://www.facebook.com/v2.10/plugins/page.php?adapt_container_width=true&app_id=215157521840905&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3042ea6f0e0127ef%26domain%3Dwinscp.net%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwinscp.net%252Ff3552e4ccdc3ed298%26relation%3Dparent.parent&container_width=664&height=400&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Fwinscp%2F&locale=en_US&sdk=joey&show_facepile=true&small_header=false&tabs=timeline
157.240.0.35
https://winscp-static-746341.c.cdn77.org/assets/css/bootstrap-modified.css?v=7034
37.19.194.80
https://winscp.net/eng/docs/license
unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yw/r/UXtr_j2Fwe-.png
157.240.251.9
https://winscp.net/eng/docs/library_example_recursive_search_textI
unknown
https://winscp.net/eng/docs/library_example_recursive_search_textIu
unknown
https://winscp.net/eng/docs/library_example_advanced_rename
unknown
https://winscp.net/eng/docs/extension_compare_filesa
unknown
https://googleads.g.doubleclick.net/pagead/html/r20241030/r20190131/zrt_lookup_fy2021.html
172.217.16.194
https://winscp.net/eng/docs/library_example_verify_file_checksum#optionscksuma
unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1682759925159355&output=html&h=200&slotname=4424189075&adk=724910714&adf=1108650154&pi=t.ma~as.4424189075&w=233&abgtt=9&fwrn=4&fwrnh=100&lmt=1730400375&rafmt=3&format=233x200&url=https%3A%2F%2Fwinscp.net%2Feng%2Fdocs%2Fafter_installation%3Fver%3D6.3.5%26lang%3Den%26utm_source%3Dwinscp%26utm_medium%3Dsetup%26utm_campaign%3D6.3.5%26prevver%3D%26automatic%3D0&fwr=0&rpe=1&resp_fmts=1&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1730400373005&bpp=2&bdt=3651&idt=2659&shv=r20241030&mjsv=m202410240101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=649x280%2C649x280&correlator=6162542844500&frm=20&pv=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=739&ady=853&biw=1017&bih=870&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C95346096%2C95331832%2C95343682%2C95344190%2C95345789%2C95345963%2C95345967&oid=2&pvsid=3008781997726900&tmod=996236526&uas=0&nvt=1&fc=896&brdim=10%2C10%2C10%2C10%2C1280%2C0%2C1050%2C964%2C1034%2C870&vis=1&rsz=%7C%7CEe%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1.02&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=2666
172.217.16.194
https://winscp.net/eng/docs/library_example_verify_file_checksum#optionscksumh
unknown
http://www.webdav.org/neon/hooks/http-passport-reqWWW-AuthenticatePassport1.4Passport1.4http://www.w
unknown
https://winscp.net/eng/docs/library_example_zip_and_uploady
unknown
https://winscp.net/=
unknown
https://winscp.net/eng/docs/extension_compare_files0
unknown
https://winscp-static-746341.c.cdn77.org/assets/js/svg-src-polyfill.js?v=7034
37.19.194.80
https://winscp.net/D
unknown
https://winscp.net:443/install.php?mode=report&installed=1&silent=0&ver=6.3.5&lang=en&prevver=&spons
unknown
https://github.com/UweRaabe/PngComponents
unknown
http://acs.amazonaws.com/groups/global/AuthenticatedUsers
unknown
https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA
172.217.16.194
https://winscp.net/eng/donate.php?
unknown
https://winscp.net/install.php?mode=sponsorrequest&ver=6.3.5&lang=en&prevver=&scale=100&images=4
unknown
https://static.xx.fbcdn.net/rsrc.php/v4/yL/l/0,cross/hx1QQk3LL6t.css
157.240.251.9
https://fundingchoicesmessages.google.com/f/AGSKWxUxfHS3nsFGh3jPt-WE_M9eMNErpqa-Fo0yj5eajv4BOnnxydjVCmrFfNh-0lvehE938eAA2MekF7EUAFysihyv8kAv4UuNuoO1LzyhHbi79W11Elf7aAFK_zNCeq8O1bKGRNFTng==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzMwNDAwMzg2LDYxODAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiwxMF0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHBzOi8vd2luc2NwLm5ldC9lbmcvZG9jcy9hZnRlcl9pbnN0YWxsYXRpb24iLG51bGwsW1s4LCJZc2dPT2N0dWtySSJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdXV0
172.217.16.206
https://winscp-static-746341.c.cdn77.org/assets/images/arrow-horiz-soft.svg?v=7034
37.19.194.80
https://static.xx.fbcdn.net/rsrc.php/v3/yA/r/0q927cN1GZe.js
157.240.251.9
https://ep2.adtrafficquality.google/sodar/sodar2.js
142.250.185.97
https://winscp.net/eng/docs/?ver=%s&lang=%s-https://winscp.net/eng/docs/%s?ver=%s&lang=%s
unknown
http://webdav.org/neon/hooks/webdav-lockingHas
unknown
https://github.com/bji/libs30https://github.com/bji/libs3/blob/master/LICENSE6Hi
unknown
https://winscp.net/
unknown
http://www.webdav.org/neon/hooks/http-redirecthttp://www.webdav.org/neon/hooks/http-redirectAborted
unknown
https://www.facebook.com/x/oauth/status?client_id=215157521840905&input_token&origin=1&redirect_uri=https%3A%2F%2Fwinscp.net%2Feng%2Fdocs%2Fafter_installation%3Fver%3D6.3.5%26lang%3Den%26utm_source%3Dwinscp%26utm_medium%3Dsetup%26utm_campaign%3D6.3.5%26prevver%3D%26automatic%3D0&sdk=joey&wants_cookie_data=false
157.240.0.35
https://static.xx.fbcdn.net/rsrc.php/v3/yH/r/xgVgalBG80z.png
157.240.251.9
https://static.xx.fbcdn.net/rsrc.php/v4/yX/l/0,cross/Yd70QRXJCf6.css
157.240.251.9
https://googleads.g.doubleclick.net/pagead/adview?ai=CdQwcedAjZ5H_IeCa78EP863DmQOx9o-Ze4yn6PXOEgoQASCexYwkYMkGoAHjjOL8A8gBCagDAcgDSKoE_AFP0EtLn0pGydfWXKH5GLbyFNQbHkavtBzS9CBxW9RG_iPZGxqcK25ycPNC11bKozj0j5FBWNyONmQSmzaF302m8KTK30OzHihaWKPCbRSZxFCaHxMGtnP6FTlUYassmNMTHpM2UCphb4Z3Z9tPBUglRu6TMImCLUJJh3myq-fiKSRg2qqbOah6KsLwehMkIoFDzuXZqwxYb3uxZywLXhEAWuC0xNyVOADHVFrLeoH-4_OaHyWyjWGCLkdMbP10Pc5-I_QrnQ_rvQRVS1ak3lfwlA0HGKEyDWp57lpr_57aubjFyrojuEhszjYAFBbJ1iehMeupDVoUO_he8hjABNCM5bOHBYgFpMjT2FCgBi6AB7TSpyuoB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAf3wrEC2AcA8gcEEMD9BNIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_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&sigh=dM2PrCvZY78&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7drzW6gIA7HHmQY4Iyw7YfvzO6tXDvfkiTY9MwVZ2AB-WAItnU4XF2t1oW2NyE-ByFDavOoQ2HukJHkncCjyc6vSckEe1aoqjCCxgB&template_id=5042&vis=1&ebtr=1&nis=6
172.217.16.194
https://fundingchoicesmessages.google.com/el/AGSKWxUw68y--w1CMz7Er8SakXH4R0S7Uiv-yVFOeaesYjdxtmzUncYmiR7ncZSD6ZrJl_ariS47RdOW9ny3cqFeamaFk-_8GSVmA-Ha7lCxKVQB3-CEgacz5yNc6i-14nhMEyy31hQ5Aw==
172.217.16.206
https://winscp.net/eng/docs/extension_archive_and_download
unknown
http://www.borland.com/namespaces/Types
unknown
https://googleads.g.doubleclick.net/btr/view?ai=CdQwcedAjZ5H_IeCa78EP863DmQOx9o-Ze4yn6PXOEgoQASCexYwkYMkGoAHjjOL8A8gBCagDAcgDSKoE_AFP0EtLn0pGydfWXKH5GLbyFNQbHkavtBzS9CBxW9RG_iPZGxqcK25ycPNC11bKozj0j5FBWNyONmQSmzaF302m8KTK30OzHihaWKPCbRSZxFCaHxMGtnP6FTlUYassmNMTHpM2UCphb4Z3Z9tPBUglRu6TMImCLUJJh3myq-fiKSRg2qqbOah6KsLwehMkIoFDzuXZqwxYb3uxZywLXhEAWuC0xNyVOADHVFrLeoH-4_OaHyWyjWGCLkdMbP10Pc5-I_QrnQ_rvQRVS1ak3lfwlA0HGKEyDWp57lpr_57aubjFyrojuEhszjYAFBbJ1iehMeupDVoUO_he8hjABNCM5bOHBYgFpMjT2FCgBi6AB7TSpyuoB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAf3wrEC2AcA8gcEEMD9BNIIJgiAYRABGB8yAooCOguAQIDAgICAoKiAAki9_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&sigh=dM2PrCvZY78&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7drzW6gIA7HHmQY4Iyw7YfvzO6tXDvfkiTY9MwVZ2AB-WAItnU4XF2t1oW2NyE-ByFDavOoQ2HukJHkncCjyc6vSckEe1aoqjCCxgB&template_id=5042&vis=1&ibtr=1&nis=6
172.217.16.194
https://platform.twitter.com/widgets.js
199.232.188.157
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-1682759925159355&output=html&h=280&slotname=1870177922&adk=3109115863&adf=385219199&pi=t.ma~as.1870177922&w=649&abgtt=9&fwrn=4&fwrnh=100&lmt=1730400375&rafmt=1&format=649x280&url=https%3A%2F%2Fwinscp.net%2Feng%2Fdocs%2Fafter_installation%3Fver%3D6.3.5%26lang%3Den%26utm_source%3Dwinscp%26utm_medium%3Dsetup%26utm_campaign%3D6.3.5%26prevver%3D%26automatic%3D0&fwr=0&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1730400372992&bpp=8&bdt=3637&idt=2601&shv=r20241030&mjsv=m202410240101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=6162542844500&frm=20&pv=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=30&ady=415&biw=1017&bih=870&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C95346096%2C95331832%2C95343682%2C95344190%2C95345789%2C95345963%2C95345967&oid=2&pvsid=3008781997726900&tmod=996236526&uas=0&nvt=1&fc=896&brdim=10%2C10%2C10%2C10%2C1280%2C0%2C1050%2C964%2C1034%2C870&vis=1&rsz=%7C%7CEe%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1.02&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2636
172.217.16.194
https://www.facebook.com/v2.10/plugins/like.php?action=like&app_id=215157521840905&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Dfd6823e2c4a4e036e%26domain%3Dwinscp.net%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwinscp.net%252Ff3552e4ccdc3ed298%26relation%3Dparent.parent&container_width=0&href=https%3A%2F%2Fwww.facebook.com%2Fwinscp%2F&layout=button_count&locale=en_US&sdk=joey&share=true&show_faces=false&size=small
157.240.0.35
https://winscp-static-746341.c.cdn77.org/assets/images/card-logo-mastercard.svg?v=7034
37.19.194.80
https://github.com/bji/libs30https://github.com/bji/libs3/blob/master/LICENSE
unknown
https://ep2.adtrafficquality.google/generate_204?RS9A5A
142.250.185.129
http://www.webdav.org/neon/hooks/http-redirect
unknown
https://www.google.com/pagead/drt/ui
142.250.185.196
http://www.webdav.org/neon/hooks/http-passport-req
unknown
https://winscp.net/2https://winscp.net/forum/Fhttps://winscp.net/eng/download.php
unknown
https://winscp.net/eng/docs/library_example_zip_and_upload#options
unknown
https://winscp.net/install.php?mode=report&installed=1&silent=0&ver=6.3.5&lang=en&prevver=&sponsorst
unknown
https://winscp.net/eng/installed.php?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
88.198.21.111
https://openssl-library.org/)WebDAV/HTTP
unknown
https://static.xx.fbcdn.net/rsrc.php/v3iLl54/yo/l/en_US/KroQaZupEyF.js
157.240.251.9
https://winscp.net/eng/docs/library_example_recursive_search_text#options_texth
unknown
https://www.gnu.org/licenses/
unknown
https://winscp-static-746341.c.cdn77.org/assets/images/logos/linkedin.svg?v=7034
37.19.194.80
https://static.xx.fbcdn.net/rsrc.php/v3iEpO4/y_/l/en_US/mEgqcU3S6-1.js
157.240.251.9
https://static.xx.fbcdn.net/rsrc.php/v3iEBX4/yr/l/en_US/jbkX5llFMP5.js
157.240.251.9
https://winscp.net/eng/docs/library_example_recursive_search_text#options_textQ
unknown
https://www.chiark.greenend.org.uk/~sgtatham/putty/1
unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yL/r/a2pSKe6-4N_.js
157.240.251.9
https://scontent-phx1-1.xx.fbcdn.net/v/t39.30808-6/354608791_694424149157111_1515153202108507038_n.png?stp=dst-png_s350x350&_nc_cat=110&ccb=1-7&_nc_sid=4cb600&_nc_ohc=-ogClF-bw9IQ7kNvgEkPep7&_nc_zt=23&_nc_ht=scontent-phx1-1.xx&edm=AFugn8MEAAAA&_nc_gid=A5asr7dU5KxjBSbIZbIPEvJ&oh=00_AYBM1_XO-Gu7D2B4cl2zhQqQEAF28ThdFvPsIF23tTRHKA&oe=67299B7D
57.144.134.128
https://td.doubleclick.net
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
winscp.net
88.198.21.111
star-mini.c10r.facebook.com
157.240.0.35
twitter.com
104.244.42.1
ep1.adtrafficquality.google
142.250.186.66
ep2.adtrafficquality.google
142.250.185.97
1578389079.rsc.cdn77.org
37.19.194.80
platform.twitter.map.fastly.net
199.232.188.157
syndication.twitter.com
104.244.42.8
stats.g.doubleclick.net
64.233.167.157
scontent.xx.fbcdn.net
157.240.0.6
googleads.g.doubleclick.net
142.250.184.226
www3.l.google.com
172.217.16.206
www.google.com
142.250.185.164
td.doubleclick.net
142.250.185.194
analytics.google.com
216.58.206.78
scontent-phx1-1.xx.fbcdn.net
57.144.134.128
www.facebook.com
unknown
connect.facebook.net
unknown
fundingchoicesmessages.google.com
unknown
static.xx.fbcdn.net
unknown
winscp-static-746341.c.cdn77.org
unknown
platform.twitter.com
unknown
There are 12 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
104.244.42.200
unknown
United States
88.198.21.111
winscp.net
Germany
142.250.185.226
unknown
United States
192.168.2.6
unknown
unknown
104.244.42.136
unknown
United States
157.240.0.35
star-mini.c10r.facebook.com
United States
172.217.18.4
unknown
United States
239.255.255.250
unknown
Reserved
142.250.185.196
unknown
United States
142.250.185.194
td.doubleclick.net
United States
199.232.188.157
platform.twitter.map.fastly.net
United States
37.19.194.80
1578389079.rsc.cdn77.org
Ukraine
172.217.16.194
unknown
United States
169.150.255.180
unknown
United States
64.233.167.157
stats.g.doubleclick.net
United States
142.250.185.129
unknown
United States
57.144.134.128
scontent-phx1-1.xx.fbcdn.net
Belgium
216.58.206.78
analytics.google.com
United States
216.58.206.33
unknown
United States
157.240.0.6
scontent.xx.fbcdn.net
United States
142.250.185.164
www.google.com
United States
172.217.16.206
www3.l.google.com
United States
104.244.42.8
syndication.twitter.com
United States
216.58.206.66
unknown
United States
157.240.251.9
unknown
United States
157.240.251.35
unknown
United States
142.250.185.97
ep2.adtrafficquality.google
United States
There are 17 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
Interface
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DDExtEnabled
 malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\WinSCPCopyHook
NULL
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
RandomSeedFile
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
PuttyRegistryStorageKey
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ConfirmOverwriting
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ConfirmResume
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
AutoReadDirectoryAfterOp
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SessionReopenAuto
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SessionReopenBackground
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SessionReopenTimeout
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SessionReopenAutoStall
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TunnelLocalPortNumberLow
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TunnelLocalPortNumberHigh
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
CacheDirectoryChangesMaxSize
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ShowFtpWelcomeMessage
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ExternalIpAddress
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
LocalPortNumberMin
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
LocalPortNumberMax
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TryFtpWhenSshFails
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ParallelDurationThreshold
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
MimeTypes
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DontReloadMoreThanSessions
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ScriptProgressFileNameLimit
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
QueueTransfersLimit
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ParallelTransferThreshold
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
KeyVersion
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SshHostCAsFromPuTTY
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
HttpsCertificateValidation
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SynchronizationChecksumAlgs
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
CollectUsage
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
CertificateStorage
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
AWSMetadataService
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ContinueOnError
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ConfirmCommandSession
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SynchronizeParams
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SynchronizeOptions
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SynchronizeModeAuto
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SynchronizeMode
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
MaxWatchDirectories
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
QueueBootstrap
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
QueueKeepDoneItems
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
QueueKeepDoneItemsFor
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
QueueAutoPopup
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
QueueRememberPassword
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
PuttySession
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
PuttyPath
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
UsePuttyPwFile
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
PuttyPassword
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TelnetForFtpInPutty
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
IgnoreCancelBeforeFinish
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
BeepOnFinish
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
BeepOnFinishAfter
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
BeepSound
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
KeepUpToDateChangeDelay
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ChecksumAlg
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SessionReopenAutoIdle
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ConfirmExitOnCompletion
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SynchronizeSummary
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SessionColors
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
FontColors
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
CopyShortCutHintShown
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
HttpForWebDAV
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DefaultFixedWidthFontName
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DefaultFixedWidthFontSize
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
CopyOnDoubleClick
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
CopyOnDoubleClickConfirmation
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
AlwaysRespectDoubleClickAction
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DDDisableMove
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DDTransferConfirmation2
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DDTemporaryDirectory
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DDDrives
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DDWarnLackOfTempSpace
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DDWarnLackOfTempSpaceRatio
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DeleteToRecycleBin
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DimmHiddenFiles
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
RenameWholeName
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SelectDirectories
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SelectMask
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ShowHiddenFiles
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
FormatSizeBytes
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
PanelSearch
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ShowInaccesibleDirectories
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ConfirmTransferring
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ConfirmDeleting
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ConfirmRecycling
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ConfirmClosingSession
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
AutoStartSession
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
UseLocationProfiles
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
UseSharedBookmarks
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
LocaleSafe
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DDFakeFile
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DDExtTimeout
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DefaultDirIsHome
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TemporaryDirectoryAppendSession
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TemporaryDirectoryAppendPath
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TemporaryDirectoryDeterministic
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TemporaryDirectoryCleanup
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ConfirmTemporaryDirectoryCleanup
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
PreservePanelState
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DarkTheme
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
LastStoredSession
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
AutoSaveWorkspace
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
AutoSaveWorkspacePasswords
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
AutoWorkspace
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
PathInCaption
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SessionTabNameFormat
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
MinimizeToTray
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
BalloonNotifications
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
NotificationsTimeout
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
NotificationsStickTime
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
CopyParamAutoSelectNotice
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
LockToolbars
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SelectiveToolbarText
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
AutoOpenInPutty
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
RefreshRemotePanel
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
RefreshRemotePanelInterval
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
PanelFontName
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
PanelFontSize
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
PanelFontStyle
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
PanelFontCharset
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
NaturalOrderNumericalSorting
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
AlwaysSortDirectoriesByName
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
FullRowSelect
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
OfferedEditorAutoConfig
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
LastMonitor
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
VersionHistory
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
EnableQueueByDefault
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
OpenedStoredSessionFolders
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
AutoImportedFromPuttyOrFilezilla
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
GenerateUrlComponents
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
GenerateUrlCodeTarget
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
GenerateUrlScriptFormat
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
GenerateUrlAssemblyLanguage
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ExternalSessionInExistingInstance
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ShowLoginWhenNoSession
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
KeepOpenWhenNoSession
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
DefaultToNewRemoteTab
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
LocalIconsByExt
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
FlashTaskbar
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
MaxSessions
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
BidiModeOverride
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
FlipChildrenOverride
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ShowTips
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TipsSeen
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TipsShown
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
FileColors
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
RunsSinceLastTip
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
HonorDrivePolicy
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
UseABDrives
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
LastMachineInstallations
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ExtensionsDeleted
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ExtensionsOrder
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
ExtensionsShortCuts
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TimeoutShellOperations
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
TimeoutShellIconRetrieval
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
UseIconUpdateThread
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
AllowWindowPrint
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
StoreTransition
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
QueueTransferLimitMax
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
HiContrast
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
EditorCheckNotModified
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
SessionTabCaptionTruncation
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
FirstRun
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
ToolbarsLayout2
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
ToolbarsButtons
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
DirViewParams
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
LastLocalTargetDirectory
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
SessionsTabs
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
StatusBar
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
WindowParams
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
ViewStyle
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
ShowFullAddress
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
DriveView
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
DriveViewWidth
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
DriveViewWidthPixelsPerInch
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
ToolbarsLayout2
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
CurrentPanel
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
LocalPanelWidth
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
SwappedPanels
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
WindowParams
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
ExplorerStyleSelection
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
PreserveLocalDirectory
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
CompareByTime
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
CompareBySize
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
TreeOnLeft
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
ExplorerKeyboardShortcuts
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
SystemContextMenu
 malicious
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface
LastMachineInstallations
 malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCP 2
DefaultInterfaceInterface
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
Period
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCP 2
DefaultUpdatesPeriod
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCP 2
DefaultCollectUsage
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup: Setup Version
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup: App Path
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
InstallLocation
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup: Icon Group
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup: User
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup: Setup Type
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup: Selected Components
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup: Deselected Components
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup: Selected Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup: Deselected Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup: Language
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
DisplayIcon
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
UninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
QuietUninstallString
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
DisplayVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Publisher
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
URLInfoAbout
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
HelpLink
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
URLUpdateInfo
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
NoModify
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
NoRepair
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
InstallDate
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
MajorVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
MinorVersion
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
VersionMajor
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
VersionMinor
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
EstimatedSize
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
Inno Setup CodeFile: SetupType
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCP 2
Installations
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E15E1D68-0D1C-49F7-BEB8-812B1E00FA60}
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E15E1D68-0D1C-49F7-BEB8-812B1E00FA60}\InProcServer32
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E15E1D68-0D1C-49F7-BEB8-812B1E00FA60}\InProcServer32
ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\DragExt
Enable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinSCP.Url
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinSCP.Url
URL Protocol
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinSCP.Url
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinSCP.Url
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinSCP.Url\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WinSCP.Url\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftp
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCPCapabilities
ApplicationDescription
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations
ftp
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications
WinSCP
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftps
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftps
URL Protocol
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftps
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftps
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftps\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftps\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations
ftps
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftpes
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftpes
URL Protocol
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftpes
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftpes
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftpes\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations
ftpes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\sftp
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\sftp
URL Protocol
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\sftp
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\sftp
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\sftp\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\sftp\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations
sftp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\scp
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\scp
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\scp
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\scp\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations
scp
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ssh
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ssh
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ssh
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ssh\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations
ssh
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\dav
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\dav
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\dav
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations
dav
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\davs
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\davs
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\davs
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\davs\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations
davs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\s3
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\s3
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\s3
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations
s3
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SFTP
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SFTP
URL Protocol
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SFTP
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SFTP
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SFTP\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SFTP\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SCP
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SCP
URL Protocol
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SCP
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SCP
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-DAV
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-DAV
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-DAV
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-DAV\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-DAVS
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-DAVS
URL Protocol
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-DAVS
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-DAVS
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-DAVS\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-S3
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-S3
URL Protocol
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-S3
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-S3
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-S3\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-S3\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTP
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTP
URL Protocol
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTP
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTP
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTP\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTP\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTPS
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTPS
URL Protocol
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTPS
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTPS
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTPS\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTPS\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTPES
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTPES
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTPES
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTPES\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-FTPES\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-HTTP
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-HTTP
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-HTTP
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-HTTPS
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-HTTPS
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-HTTPS
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-HTTPS\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SSH
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SSH
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SSH
BrowserFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\winscp-SSH\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftp
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftp
EditFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftp\DefaultIcon
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ftp\shell\open\command
NULL
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Logging
Logging
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Logging
LogFileName
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Logging
LogFileAppend
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Logging
LogSensitive
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Logging
LogMaxSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Logging
LogMaxCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Logging
LogProtocol
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Logging
LogActions
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Logging
ActionsLogFileName
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
FirstUse
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
FirstVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
LastReport
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
AnyBetaUsed
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Installed
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
CurrentVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
WindowsVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
WindowsProductName
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
WindowsProductType
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Windows64
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UWP
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
DefaultLocale
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Locale
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
EncodingMultiByteAnsi
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
PixelsPerInch
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
PixelsPerInchMonitorsDiffer
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
PixelsPerInchAxesDiffer
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
WorkAreaWidth
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
WorkAreaHeight
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ColorDepth
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
MonitorCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
NotUseThemes
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ThemeDefaultFontSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ThemeIconFontSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
SysColorWindow
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
SysColorBtnFace
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
SysColorWindowText
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
InProgramFiles
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
IsInstalled
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
IsInstalledMsi
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Wine
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
NetFrameworkVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
NetCoreVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
PowerShellVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
PwshVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ConfigurationIniFile
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ConfigurationIniFileCustom
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Unofficial
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountSCP
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountSFTP
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountFTP
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountFTPS
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountWebDAV
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountWebDAVS
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountS3
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountPassword
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountColor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountNote
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountAdvanced
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountTunnel
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingDefaultStoredSession
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingStoredSessionsFolders
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingWorkspaces
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
CopyParamsCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Putty
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Beta
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Interface
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ThemeDark
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
CustomCommandsCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingLocationProfiles
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingMasterPassword
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingAutoSaveWorkspace
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
TreeVisible
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
MinimizeToTray
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
AnyHiddenToolbarButtons
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
FileColors
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
DragDropDrives
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ShowingTips
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
KeepingOpenWhenNoSession
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ShowingLoginWhenNoSession
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
DefaultingToNewRemoteTab
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
TipsCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
TipsSeen
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
CommanderNortonLikeMode
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
CommanderExplorerKeyboardShortcuts
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExplorerViewStyle
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
LastMonitor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExternalEditors
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExtensionsPortableCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExtensionsInstalledCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExtensionsUserCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExtensionsDeleted
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters
Runs
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters
RunsWithoutSession
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters
Runs
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters
RunsWithoutSession
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
AddXToDirectories
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
Masks
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
FileNameCase
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
PreserveReadOnly
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
PreserveTime
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
PreserveTimeDirs
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
PreserveRights
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
IgnorePermErrors
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
Text
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
TransferMode
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
ResumeSupport
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
ResumeThreshold
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
ReplaceInvalidChars
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
LocalInvalidChars
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
CalculateSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
IncludeFileMask
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
ClearArchive
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
RemoveCtrlZ
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
RemoveBOM
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
CPSLimit
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
NewerOnly
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
EncryptNewFiles
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
ExcludeHiddenFiles
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
ExcludeEmptyDirectories
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
Queue
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
QueueNoConfirmation
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
QueueParallel
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
CopyParamList
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2
Valid
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist
WindowParams
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist
ListParams
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile
WindowParams
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile
ListParams
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin
WindowSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog
WindowSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog
SiteSearch
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
FontName2
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
FontSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
FontStyle
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
FontCharset
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
FontColor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
BackgroundColor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
WordWrap
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
FindText
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
ReplaceText
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
FindMatchCase
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
FindWholeWord
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
FindDown
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
TabSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
MaxEditors
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
EarlyClose
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
SDIShellEditor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
WindowParams
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
Encoding
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
WarnOnEncodingFallback
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
WarnOrLargeFileSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
AutoFont
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
Height
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
HeightPixelsPerInch
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
Layout
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
Show
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
LastHideShow
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
ToolBar
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
Label
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
FileList
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
FileListHeight
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
FileListHeightPixelsPerInch
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
LastCheck
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
HaveResults
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
ShownResults
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
BetaVersions
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
ShowOnStartup
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
AuthenticationEmail
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
Mode
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
ConnectionType
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
ProxyHost
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
ProxyPort
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
ForVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
Version
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
Message
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
Critical
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
Release
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
Disabled
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
Url
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
UrlButton
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
NewsUrl
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
NewsWidth
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
NewsHeight
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
DownloadUrl
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
DownloadSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
DownloadSha256
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
AuthenticationError
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
OpenGettingStarted
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
DownloadingUrl
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
TipsWidth
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
TipsHeight
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
TipsUrl
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
Tips
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
TipsIntervalDays
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
TipsIntervalRuns
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
DotNetVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
ConsoleVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
DirViewParams
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
StatusBar
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
DriveView
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
DriveViewHeight
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
DriveViewHeightPixelsPerInch
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
DriveViewWidth
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
DriveViewWidthPixelsPerInch
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
LastPath
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
DriveView
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
DriveViewHeight
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
DriveViewHeightPixelsPerInch
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
DriveViewWidth
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
LastPath
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Security
UseMasterPassword
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Security
MasterPasswordVerifier
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
FileMask
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
Editor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
ExternalEditor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
ExternalEditorText
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
SDIExternalEditor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
DetectMDIExternalEditor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
Editor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
ExternalEditor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
FirstUse
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
FirstVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
LastReport
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
AnyBetaUsed
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Installed
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
CurrentVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
WindowsVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
WindowsProductName
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
WindowsProductType
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Windows64
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UWP
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
DefaultLocale
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Locale
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
EncodingMultiByteAnsi
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
PixelsPerInch
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
PixelsPerInchMonitorsDiffer
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
PixelsPerInchAxesDiffer
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
WorkAreaWidth
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
WorkAreaHeight
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ColorDepth
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
MonitorCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
NotUseThemes
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ThemeDefaultFontSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ThemeIconFontSize
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
SysColorWindow
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
SysColorBtnFace
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
SysColorWindowText
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
InProgramFiles
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
IsInstalled
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
IsInstalledMsi
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Wine
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
NetFrameworkVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
NetCoreVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
PowerShellVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
PwshVersion
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ConfigurationIniFile
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ConfigurationIniFileCustom
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Unofficial
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountSCP
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountSFTP
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountFTP
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountFTPS
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountWebDAV
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountWebDAVS
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountS3
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountPassword
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountColor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountNote
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountAdvanced
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
StoredSessionsCountTunnel
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingDefaultStoredSession
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingStoredSessionsFolders
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingWorkspaces
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
CopyParamsCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Putty
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Beta
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
Interface
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ThemeDark
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
CustomCommandsCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingLocationProfiles
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingMasterPassword
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
UsingAutoSaveWorkspace
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
TreeVisible
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
MinimizeToTray
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
AnyHiddenToolbarButtons
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
FileColors
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
DragDropDrives
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ShowingTips
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
KeepingOpenWhenNoSession
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ShowingLoginWhenNoSession
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
DefaultingToNewRemoteTab
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
TipsCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
TipsSeen
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
CommanderNortonLikeMode
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
CommanderExplorerKeyboardShortcuts
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExplorerViewStyle
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
LastMonitor
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExternalEditors
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExtensionsPortableCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExtensionsInstalledCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExtensionsUserCount
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
ExtensionsDeleted
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
TypicalInstallation
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
InstallationParentProcess
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
LastInstallationAutomaticUpgrade
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters
InstallationsFirstTypical
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters
InstallationsGettingStarted
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters
InstallationsLaunch
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters
InstallationsMachine
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters
InstallationsUser
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters
Runs
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters
RunsWithoutSession
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters
InstallationsFirstTypical
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters
InstallationsGettingStarted
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters
InstallationsLaunch
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters
InstallationsMachine
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters
InstallationsUser
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters
Runs
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters
RunsWithoutSession
There are 648 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
8D1000
heap
page read and write
5990000
trusted library allocation
page read and write
2A35000
heap
page read and write
5190000
heap
page read and write
25F1000
direct allocation
page read and write
47FE000
direct allocation
page read and write
1BB5000
unkown
page read and write
4E09000
direct allocation
page read and write
AEB000
stack
page read and write
4DA9000
direct allocation
page read and write
2549000
direct allocation
page read and write
B40000
heap
page read and write
1ABA000
unkown
page read and write
1B07000
unkown
page read and write
C40000
heap
page read and write
4B71000
heap
page read and write
8AC000
heap
page read and write
4468000
direct allocation
page read and write
6571000
heap
page read and write
479F000
direct allocation
page read and write
8CD000
heap
page read and write
8C8000
heap
page read and write
655A000
heap
page read and write
47C7000
direct allocation
page read and write
C47000
heap
page read and write
285F000
direct allocation
page read and write
25EE000
stack
page read and write
273E000
stack
page read and write
1AAC000
unkown
page read and write
8B1000
heap
page read and write
2566000
direct allocation
page read and write
4960000
heap
page read and write
4DEE000
stack
page read and write
654D000
heap
page read and write
289B000
stack
page read and write
1CEC000
unkown
page read and write
3F58000
direct allocation
page read and write
1BEA000
unkown
page read and write
4DD0000
direct allocation
page read and write
93E000
heap
page read and write
47AF000
direct allocation
page read and write
23EF000
direct allocation
page read and write
1AB2000
unkown
page read and write
2D00000
heap
page read and write
8F7000
heap
page read and write
1B3E000
unkown
page read and write
2BEB000
direct allocation
page read and write
1D94000
unkown
page read and write
C40000
heap
page read and write
EF6000
unkown
page execute read
485B000
direct allocation
page read and write
4EB1000
direct allocation
page read and write
4E00000
direct allocation
page read and write
287D000
stack
page read and write
4F70000
trusted library allocation
page read and write
3FCD000
direct allocation
page read and write
1D83000
unkown
page read and write
23FD000
direct allocation
page read and write
2550000
direct allocation
page read and write
44D6000
direct allocation
page read and write
251E000
direct allocation
page read and write
7FDF0000
direct allocation
page read and write
4213000
direct allocation
page read and write
1AE4000
unkown
page read and write
35CC000
direct allocation
page read and write
4E57000
direct allocation
page read and write
652D000
heap
page read and write
916000
heap
page read and write
23D8000
direct allocation
page read and write
23F6000
direct allocation
page read and write
6E0000
unkown
page readonly
4447000
direct allocation
page read and write
1CF4000
unkown
page read and write
605B000
stack
page read and write
1F45000
unkown
page readonly
88E000
heap
page read and write
4456000
direct allocation
page read and write
6579000
heap
page read and write
7FB20000
direct allocation
page read and write
8D4000
heap
page read and write
1AE7000
unkown
page read and write
1D0D000
unkown
page read and write
D15000
heap
page read and write
256D000
direct allocation
page read and write
924000
heap
page read and write
4149000
direct allocation
page read and write
92D000
heap
page read and write
1AD1000
unkown
page read and write
5B24000
direct allocation
page read and write
4DA1000
direct allocation
page read and write
8D1000
heap
page read and write
8C1000
heap
page read and write
2C90000
trusted library allocation
page read and write
4223000
direct allocation
page read and write
4C08000
direct allocation
page read and write
1D8E000
unkown
page read and write
3490000
direct allocation
page read and write
916000
heap
page read and write
2883000
direct allocation
page read and write
540000
heap
page read and write
3558000
direct allocation
page read and write
6580000
heap
page read and write
4DEA000
direct allocation
page read and write
2BC2000
direct allocation
page read and write
8C1000
heap
page read and write
8B0000
heap
page read and write
2767000
heap
page read and write
267D000
heap
page read and write
238B000
stack
page read and write
2620000
heap
page read and write
2BF6000
heap
page read and write
400000
unkown
page readonly
28A0000
heap
page read and write
2AAD000
stack
page read and write
3F22000
direct allocation
page read and write
48DD000
stack
page read and write
1D4E000
unkown
page read and write
36AE000
direct allocation
page read and write
1D97000
unkown
page readonly
2875000
direct allocation
page read and write
3F93000
direct allocation
page read and write
4C88000
direct allocation
page read and write
4950000
heap
page read and write
5B34000
direct allocation
page read and write
22F4000
direct allocation
page read and write
4A1D000
stack
page read and write
35C4000
direct allocation
page read and write
2851000
direct allocation
page read and write
22E0000
heap
page read and write
920000
heap
page read and write
1AC9000
unkown
page read and write
6A10000
direct allocation
page read and write
870F000
stack
page read and write
3739000
direct allocation
page read and write
3F03000
direct allocation
page read and write
3EFA000
direct allocation
page read and write
2690000
heap
page read and write
1EC4000
unkown
page readonly
26EE000
stack
page read and write
1BAE000
unkown
page read and write
28B6000
heap
page read and write
7FD70000
direct allocation
page read and write
1AE7000
unkown
page read and write
507D000
stack
page read and write
830000
heap
page read and write
1CF4000
unkown
page read and write
7CE000
stack
page read and write
589E000
stack
page read and write
BD8000
stack
page read and write
908000
heap
page read and write
12B5000
heap
page read and write
2A20000
heap
page read and write
4B90000
direct allocation
page read and write
34A0000
direct allocation
page read and write
1AE4000
unkown
page read and write
2429000
heap
page read and write
4A6E000
stack
page read and write
353F000
direct allocation
page read and write
4E10000
direct allocation
page read and write
1D8E000
unkown
page read and write
4DC1000
direct allocation
page read and write
418F000
direct allocation
page read and write
61DC000
stack
page read and write
900000
heap
page read and write
1CF7000
unkown
page read and write
4E2E000
stack
page read and write
1CEE000
unkown
page read and write
4FFE000
stack
page read and write
4E13000
direct allocation
page read and write
4B1E000
stack
page read and write
4E01000
direct allocation
page read and write
C0F000
stack
page read and write
23D0000
heap
page read and write
4DAB000
direct allocation
page read and write
4EA1000
direct allocation
page read and write
BB6000
heap
page read and write
8EC000
heap
page read and write
911000
heap
page read and write
2A3B000
heap
page read and write
2893000
direct allocation
page read and write
93000
stack
page read and write
2D40000
heap
page read and write
62E0000
heap
page read and write
4E9A000
direct allocation
page read and write
2C38000
direct allocation
page read and write
6CB000
stack
page read and write
99F000
stack
page read and write
1D97000
unkown
page readonly
2BF2000
direct allocation
page read and write
5192000
heap
page read and write
898000
heap
page read and write
3526000
direct allocation
page read and write
1B07000
unkown
page read and write
1C02000
unkown
page read and write
4EA8000
direct allocation
page read and write
2CC3000
direct allocation
page read and write
1CF4000
unkown
page read and write
2633000
heap
page read and write
2592000
direct allocation
page read and write
29B0000
heap
page read and write
730000
heap
page read and write
B0F000
stack
page read and write
3732000
direct allocation
page read and write
6583000
heap
page read and write
4EB0000
direct allocation
page read and write
8CC000
heap
page read and write
240C000
direct allocation
page read and write
67E000
stack
page read and write
904000
heap
page read and write
4B71000
heap
page read and write
2890000
heap
page read and write
5B2F000
direct allocation
page read and write
1C92000
unkown
page read and write
8BD000
heap
page read and write
3571000
direct allocation
page read and write
62DF000
stack
page read and write
1B09000
unkown
page read and write
6DE000
unkown
page readonly
23CA000
direct allocation
page read and write
1D97000
unkown
page readonly
480C000
direct allocation
page read and write
4160000
direct allocation
page read and write
C50000
heap
page read and write
1AE4000
unkown
page read and write
26FA000
stack
page read and write
4490000
direct allocation
page read and write
41B5000
direct allocation
page read and write
356F000
direct allocation
page read and write
B8E000
stack
page read and write
619F000
stack
page read and write
8D1000
heap
page read and write
411A000
direct allocation
page read and write
40C3000
heap
page read and write
7CA000
stack
page read and write
4B92000
heap
page read and write
1B41000
unkown
page read and write
1AE4000
unkown
page read and write
2CF0000
heap
page read and write
4090000
direct allocation
page execute and read and write
C50000
direct allocation
page execute and read and write
4BD8000
direct allocation
page read and write
4C1F000
direct allocation
page read and write
2D06000
heap
page read and write
84CE000
stack
page read and write
3748000
direct allocation
page read and write
FCE000
stack
page read and write
C61000
unkown
page execute read
656A000
heap
page read and write
1ACB000
unkown
page read and write
1D9D000
unkown
page write copy
2C4F000
direct allocation
page read and write
7FE06000
direct allocation
page read and write
259A000
direct allocation
page read and write
40F3000
heap
page read and write
1B10000
unkown
page read and write
1CEC000
unkown
page read and write
1B13000
unkown
page read and write
8C8000
heap
page read and write
2C73000
direct allocation
page read and write
2760000
heap
page read and write
8E9000
heap
page read and write
5191000
heap
page read and write
8D7000
heap
page read and write
2428000
direct allocation
page read and write
4788000
direct allocation
page read and write
838B000
stack
page read and write
44AF000
direct allocation
page read and write
3ED0000
direct allocation
page read and write
1D43000
unkown
page read and write
1AB5000
unkown
page read and write
7FDF0000
direct allocation
page read and write
1D0D000
unkown
page read and write
4C1A000
direct allocation
page read and write
939000
heap
page read and write
1D78000
unkown
page read and write
C60000
unkown
page readonly
4C6000
unkown
page readonly
6574000
heap
page read and write
3FE3000
direct allocation
page read and write
47FA000
direct allocation
page read and write
6586000
heap
page read and write
8A4000
heap
page read and write
4E4E000
direct allocation
page read and write
8D4000
heap
page read and write
BB8000
heap
page read and write
28B8000
heap
page read and write
8F0000
heap
page read and write
3630000
direct allocation
page read and write
4862000
direct allocation
page read and write
6D6000
unkown
page read and write
4E98000
direct allocation
page read and write
1B13000
unkown
page read and write
3C4D000
stack
page read and write
6545000
heap
page read and write
2C10000
direct allocation
page read and write
4E7D000
direct allocation
page read and write
2675000
heap
page read and write
238B000
stack
page read and write
23E8000
direct allocation
page read and write
8D7000
heap
page read and write
8FC000
heap
page read and write
401000
unkown
page execute read
2858000
direct allocation
page read and write
1CC1000
unkown
page read and write
1B21000
unkown
page read and write
848000
heap
page read and write
45E0000
direct allocation
page execute and read and write
3F40000
direct allocation
page read and write
892000
heap
page read and write
2834000
direct allocation
page read and write
4DB3000
direct allocation
page read and write
4E37000
direct allocation
page read and write
4B6F000
stack
page read and write
1CF7000
unkown
page read and write
3573000
direct allocation
page read and write
1ACF000
unkown
page read and write
1AB9000
unkown
page read and write
1B41000
unkown
page read and write
8D7000
heap
page read and write
1B10000
unkown
page read and write
4DF8000
direct allocation
page read and write
47DA000
direct allocation
page read and write
4196000
direct allocation
page read and write
40C0000
heap
page read and write
6C7000
unkown
page read and write
B90000
heap
page read and write
4563000
direct allocation
page read and write
2AA0000
heap
page read and write
2BB7000
direct allocation
page read and write
49B0000
trusted library allocation
page read and write
1AFB000
unkown
page read and write
B30000
heap
page read and write
8EE000
heap
page read and write
25E3000
direct allocation
page read and write
4E30000
direct allocation
page read and write
4DD9000
direct allocation
page read and write
44E6000
direct allocation
page read and write
4553000
direct allocation
page read and write
1AE7000
unkown
page read and write
656D000
heap
page read and write
1AB2000
unkown
page read and write
417F000
direct allocation
page read and write
1CF4000
unkown
page read and write
740F000
stack
page read and write
8A0000
heap
page read and write
4128000
direct allocation
page read and write
287C000
direct allocation
page read and write
1D9D000
unkown
page read and write
419F000
direct allocation
page read and write
2940000
heap
page read and write
2CF3000
heap
page read and write
1B09000
unkown
page read and write
8D4000
heap
page read and write
283E000
stack
page read and write
265A000
direct allocation
page read and write
8BD000
heap
page read and write
1C08000
unkown
page read and write
1ACF000
unkown
page read and write
1AD1000
unkown
page read and write
1AD1000
unkown
page read and write
D19000
heap
page read and write
883000
heap
page read and write
657C000
heap
page read and write
28DC000
stack
page read and write
2849000
direct allocation
page read and write
45D0000
heap
page read and write
2765000
heap
page read and write
1AB2000
unkown
page read and write
1CF7000
unkown
page read and write
8C1000
heap
page read and write
4430000
heap
page read and write
3FF3000
direct allocation
page read and write
43B0000
heap
page read and write
2584000
direct allocation
page read and write
4FFE000
stack
page read and write
1D0D000
unkown
page read and write
1B00000
unkown
page read and write
680F000
stack
page read and write
3EE7000
direct allocation
page read and write
1B00000
unkown
page read and write
1B21000
unkown
page read and write
5B3B000
direct allocation
page read and write
1D9E000
unkown
page readonly
B4E000
stack
page read and write
AD0000
stack
page read and write
1C05000
unkown
page read and write
884F000
stack
page read and write
1C09000
unkown
page read and write
1C58000
unkown
page read and write
BB0000
heap
page read and write
3D8D000
stack
page read and write
5290000
trusted library allocation
page read and write
2C7A000
direct allocation
page read and write
2C31000
direct allocation
page read and write
8CD000
heap
page read and write
4C98000
direct allocation
page read and write
2BF0000
heap
page read and write
1D52000
unkown
page read and write
8B4000
heap
page read and write
359C000
direct allocation
page read and write
7FDCE000
direct allocation
page read and write
4E6F000
direct allocation
page read and write
4D9A000
direct allocation
page read and write
2574000
direct allocation
page read and write
27F5000
heap
page read and write
4DC3000
direct allocation
page read and write
8D4000
heap
page read and write
2EA0000
heap
page read and write
2404000
direct allocation
page read and write
26FB000
stack
page read and write
1CEC000
unkown
page read and write
883000
heap
page read and write
3551000
direct allocation
page read and write
848C000
stack
page read and write
4C70000
trusted library allocation
page read and write
653A000
heap
page read and write
5B1D000
direct allocation
page read and write
4B70000
direct allocation
page read and write
2696000
heap
page read and write
8EA000
heap
page read and write
23F0000
heap
page read and write
2C09000
direct allocation
page read and write
44FC000
direct allocation
page read and write
3910000
remote allocation
page read and write
26AF000
heap
page read and write
2A30000
heap
page read and write
91A000
heap
page read and write
4121000
direct allocation
page read and write
6D1000
unkown
page read and write
3F4A000
direct allocation
page read and write
19D000
stack
page read and write
28B0000
heap
page read and write
2842000
direct allocation
page read and write
8B4000
heap
page read and write
255C000
direct allocation
page read and write
2C5D000
direct allocation
page read and write
4888000
direct allocation
page read and write
4BA5000
heap
page read and write
C45000
heap
page read and write
400000
unkown
page readonly
44C6000
direct allocation
page read and write
3C8E000
stack
page read and write
1AAC000
unkown
page read and write
47F2000
direct allocation
page read and write
4898000
direct allocation
page read and write
1AAC000
unkown
page read and write
8F6000
heap
page read and write
6810000
heap
page read and write
25D4000
direct allocation
page read and write
36FF000
direct allocation
page read and write
358A000
direct allocation
page read and write
2BD8000
direct allocation
page read and write
2C88000
direct allocation
page read and write
286D000
direct allocation
page read and write
90A000
heap
page read and write
1AEB000
unkown
page read and write
4E89000
direct allocation
page read and write
376B000
direct allocation
page read and write
5B16000
direct allocation
page read and write
890000
heap
page read and write
1B02000
unkown
page read and write
3490000
direct allocation
page read and write
6F4000
unkown
page readonly
6542000
heap
page read and write
1AB5000
unkown
page read and write
3AEC000
stack
page read and write
2C27000
direct allocation
page read and write
BB0000
direct allocation
page read and write
8C8000
heap
page read and write
2CD3000
direct allocation
page read and write
BB7000
heap
page read and write
1CB3000
unkown
page read and write
1C92000
unkown
page read and write
4477000
direct allocation
page read and write
258B000
direct allocation
page read and write
3ED4000
direct allocation
page read and write
1B0E000
unkown
page read and write
4DE8000
direct allocation
page read and write
4461000
direct allocation
page read and write
1B3E000
unkown
page read and write
44A8000
direct allocation
page read and write
4E08000
direct allocation
page read and write
4BB8000
direct allocation
page read and write
893000
heap
page read and write
4DBC000
direct allocation
page read and write
87F000
heap
page read and write
24C0000
direct allocation
page read and write
85CF000
stack
page read and write
3E2E000
stack
page read and write
1C04000
unkown
page read and write
4C0000
unkown
page read and write
289A000
direct allocation
page read and write
4F0000
heap
page read and write
47A1000
heap
page read and write
43C0000
direct allocation
page execute and read and write
43F0000
heap
page read and write
1B02000
unkown
page read and write
410E000
direct allocation
page read and write
3EEE000
direct allocation
page read and write
7B50000
trusted library allocation
page read and write
2BE2000
direct allocation
page read and write
450A000
direct allocation
page read and write
1C1E000
unkown
page read and write
23F0000
heap
page read and write
40C0000
heap
page read and write
599F000
stack
page read and write
7E0000
heap
page read and write
283B000
direct allocation
page read and write
1B10000
unkown
page read and write
23D1000
direct allocation
page read and write
1AE7000
unkown
page read and write
8B4000
heap
page read and write
2BC0000
heap
page read and write
3740000
direct allocation
page read and write
4EFD000
stack
page read and write
4440000
direct allocation
page read and write
2BAE000
stack
page read and write
26CB000
heap
page read and write
2421000
direct allocation
page read and write
2BD1000
direct allocation
page read and write
288C000
direct allocation
page read and write
281E000
direct allocation
page read and write
4DB2000
direct allocation
page read and write
1D63000
unkown
page read and write
8A6000
heap
page read and write
883000
heap
page read and write
1B13000
unkown
page read and write
8A0000
heap
page read and write
8C1000
heap
page read and write
517E000
stack
page read and write
3583000
direct allocation
page read and write
8BD000
heap
page read and write
370D000
direct allocation
page read and write
4481000
direct allocation
page read and write
44CF000
direct allocation
page read and write
4DD2000
direct allocation
page read and write
1CF7000
unkown
page read and write
2825000
direct allocation
page read and write
351D000
direct allocation
page read and write
4168000
direct allocation
page read and write
18C000
stack
page read and write
4B9000
unkown
page read and write
2740000
heap
page read and write
446F000
direct allocation
page read and write
698E000
stack
page read and write
8F6000
heap
page read and write
5B58000
direct allocation
page read and write
29FE000
stack
page read and write
885000
heap
page read and write
898000
heap
page read and write
B70000
heap
page read and write
8EA000
heap
page read and write
4BCE000
direct allocation
page read and write
1AB2000
unkown
page read and write
4B8D000
heap
page read and write
8B1000
heap
page read and write
657A000
heap
page read and write
1B7F000
unkown
page read and write
6510000
heap
page read and write
860C000
stack
page read and write
8BD000
heap
page read and write
1D89000
unkown
page read and write
C00000
heap
page read and write
93B000
heap
page read and write
5191000
heap
page read and write
2413000
direct allocation
page read and write
8B1000
heap
page read and write
1ABA000
unkown
page read and write
3F8C000
direct allocation
page read and write
1C2D000
unkown
page read and write
40D0000
heap
page read and write
653D000
heap
page read and write
5B4A000
direct allocation
page read and write
517F000
stack
page read and write
1ABA000
unkown
page read and write
1AD1000
unkown
page read and write
4CEE000
stack
page read and write
1AB5000
unkown
page read and write
4780000
direct allocation
page read and write
2A8F000
stack
page read and write
6CE000
unkown
page read and write
2B8F000
stack
page read and write
8D7000
heap
page read and write
2CB4000
direct allocation
page read and write
1D32000
unkown
page read and write
4B7000
unkown
page read and write
2570000
direct allocation
page read and write
2600000
direct allocation
page execute and read and write
2630000
heap
page read and write
750F000
stack
page read and write
241C000
heap
page read and write
4107000
direct allocation
page read and write
FB7000
unkown
page execute read
27D0000
heap
page read and write
8C8000
heap
page read and write
7A0D000
stack
page read and write
6550000
heap
page read and write
1A8D000
unkown
page write copy
3A7E000
stack
page read and write
1C21000
unkown
page read and write
1CEE000
unkown
page read and write
3561000
direct allocation
page read and write
2EAA000
heap
page read and write
8B9000
heap
page read and write
680000
heap
page read and write
374F000
direct allocation
page read and write
6C7000
unkown
page write copy
47D7000
direct allocation
page read and write
3FA8000
direct allocation
page read and write
3764000
direct allocation
page read and write
4C2000
unkown
page write copy
1CAD000
unkown
page read and write
2397000
direct allocation
page read and write
2950000
heap
page read and write
4E5A000
direct allocation
page read and write
241A000
direct allocation
page read and write
1D97000
unkown
page readonly
1D8D000
unkown
page read and write
4DF0000
direct allocation
page read and write
D10000
heap
page read and write
41FC000
direct allocation
page read and write
670F000
stack
page read and write
3756000
direct allocation
page read and write
6542000
heap
page read and write
6D9000
unkown
page write copy
40F0000
heap
page read and write
8F2000
heap
page read and write
656F000
heap
page read and write
23F0000
heap
page read and write
1D94000
unkown
page read and write
1AFB000
unkown
page write copy
18F6000
unkown
page execute read
2570000
direct allocation
page read and write
1C32000
unkown
page read and write
3FFA000
direct allocation
page read and write
2866000
direct allocation
page read and write
47C0000
direct allocation
page read and write
3B4E000
stack
page read and write
255F000
direct allocation
page read and write
9B000
stack
page read and write
5C3B000
stack
page read and write
282D000
direct allocation
page read and write
4EB8000
direct allocation
page read and write
3910000
remote allocation
page read and write
A30000
heap
page read and write
609E000
stack
page read and write
3F51000
direct allocation
page read and write
22F0000
direct allocation
page read and write
4EFE000
stack
page read and write
4188000
direct allocation
page read and write
1CEC000
unkown
page read and write
1AB5000
unkown
page read and write
412F000
direct allocation
page read and write
269B000
heap
page read and write
3F0B000
direct allocation
page read and write
4B70000
heap
page read and write
23F8000
heap
page read and write
8D2000
heap
page read and write
6C0000
heap
page read and write
2806000
direct allocation
page read and write
1B13000
unkown
page read and write
47E7000
direct allocation
page read and write
4DBA000
direct allocation
page read and write
287E000
stack
page read and write
4DD9000
direct allocation
page read and write
1AC1000
unkown
page read and write
8C3000
heap
page read and write
1D8E000
unkown
page read and write
3F68000
direct allocation
page read and write
3EDF000
direct allocation
page read and write
4BF8000
direct allocation
page read and write
8BD000
heap
page read and write
35B6000
direct allocation
page read and write
2760000
heap
page read and write
3546000
direct allocation
page read and write
1D0D000
unkown
page read and write
3FD4000
direct allocation
page read and write
6587000
heap
page read and write
8D8000
heap
page read and write
3F76000
direct allocation
page read and write
1C05000
unkown
page read and write
6531000
heap
page read and write
FEB000
heap
page read and write
886000
heap
page read and write
780000
heap
page read and write
5B43000
direct allocation
page read and write
377A000
direct allocation
page read and write
12B0000
heap
page read and write
1AAC000
unkown
page read and write
2628000
heap
page read and write
4DF9000
direct allocation
page read and write
1D94000
unkown
page read and write
4798000
direct allocation
page read and write
4DCA000
direct allocation
page read and write
4791000
direct allocation
page read and write
1ABF000
unkown
page read and write
4DA3000
direct allocation
page read and write
4C81000
direct allocation
page read and write
8A9000
heap
page read and write
2990000
heap
page read and write
375D000
direct allocation
page read and write
444E000
direct allocation
page read and write
1BEA000
unkown
page read and write
1FC7000
unkown
page readonly
1D94000
unkown
page read and write
34D2000
direct allocation
page read and write
25B8000
direct allocation
page read and write
47B8000
direct allocation
page read and write
3773000
direct allocation
page read and write
4CA8000
direct allocation
page read and write
4544000
direct allocation
page read and write
1C2D000
unkown
page read and write
2CAC000
direct allocation
page read and write
47A0000
heap
page read and write
FF7000
heap
page read and write
7FDF0000
direct allocation
page read and write
1A8D000
unkown
page read and write
8A0000
heap
page read and write
4C4000
unkown
page readonly
453C000
direct allocation
page read and write
900000
heap
page read and write
8D1000
heap
page read and write
27F0000
heap
page read and write
372A000
direct allocation
page read and write
3F61000
direct allocation
page read and write
3910000
remote allocation
page read and write
2C00000
heap
page read and write
1D6E000
unkown
page read and write
6C9000
unkown
page read and write
8CC000
heap
page read and write
840000
heap
page read and write
4433000
heap
page read and write
401000
unkown
page execute read
F4F000
stack
page read and write
3DEE000
stack
page read and write
917000
heap
page read and write
4B7000
unkown
page write copy
28BB000
heap
page read and write
655D000
heap
page read and write
2D0F000
stack
page read and write
4E4B000
direct allocation
page read and write
27F7000
heap
page read and write
28B0000
heap
page read and write
41A6000
direct allocation
page read and write
36A0000
direct allocation
page read and write
5190000
heap
page read and write
4E29000
direct allocation
page read and write
1B7F000
unkown
page read and write
1B10000
unkown
page read and write
77E000
stack
page read and write
8EF000
heap
page read and write
1C05000
unkown
page read and write
A30000
heap
page read and write
548000
heap
page read and write
34A0000
direct allocation
page read and write
1B02000
unkown
page read and write
4138000
direct allocation
page read and write
4100000
direct allocation
page read and write
47CF000
direct allocation
page read and write
3F29000
direct allocation
page read and write
88D000
heap
page read and write
FE0000
heap
page read and write
2C3F000
direct allocation
page read and write
2BCA000
direct allocation
page read and write
4204000
direct allocation
page read and write
2898000
heap
page read and write
4BED000
direct allocation
page read and write
4E11000
direct allocation
page read and write
2C48000
direct allocation
page read and write
49DE000
stack
page read and write
44DE000
direct allocation
page read and write
874E000
stack
page read and write
4F2F000
stack
page read and write
487A000
direct allocation
page read and write
2BB0000
direct allocation
page read and write
507E000
stack
page read and write
652B000
heap
page read and write
4BA0000
direct allocation
page read and write
44ED000
direct allocation
page read and write
There are 769 hidden memdumps, click here to show them.

DOM / HTML

URL
Malicious
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
https://winscp.net/eng/docs/after_installation?ver=6.3.5&lang=en&utm_source=winscp&utm_medium=setup&utm_campaign=6.3.5&prevver=&automatic=0
There are 15 hidden doms, click here to show them.