魔盾安全分析报告

分析类型 开始时间 结束时间 持续时间 分析引擎版本
FILE 2018-07-20 17:48:09 2018-07-20 17:50:30 141 秒 1.4-Maldun
虚拟机机器名 标签 虚拟机管理 开机时间 关机时间
win7-sp1-x64-shaapp01-1 win7-sp1-x64-shaapp01-1 KVM 2018-07-20 17:48:10 2018-07-20 17:50:27
魔盾分数

10.0

Pony

文件详细信息

文件名 0716(21).exe
文件大小 568835 字节
文件类型 PE32 executable (GUI) Intel 80386, for MS Windows
CRC32 292B61CA
MD5 f6ac15e4ed8e101dc67b132db5d79c0f
SHA1 5ccbc5e9fa20fc9784daa85a7c19d481d63c64cc
SHA256 35988d9b977160ae55229eb4fd647de0790701624f7c63990ebcf63f9487859f
SHA512 490231e2dd241022aa14fab9c345cd4b082175250d57ae55e82e2b905abfb329366c5924964e2d29d93db805c0574e0c5e30b024a7bd1e977a2eee28cc6bf1df
Ssdeep 12288:xq1rB8lP19eSBnW2NQ73XmfqStsGj30d3No:QJm19eSo4Q732ch3S
PEiD 无匹配
Yara 无Yara规则匹配
VirusTotal VirusTotal链接
VirusTotal扫描时间: 2018-07-17 13:36:00
扫描结果: 41/64

特征

创建RWX内存
可能进行了时间有效期检查，检查本地时间后过早退出
二进制文件可能包含加密或压缩数据
section: name: .rsrc, entropy: 7.04, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ, raw_size: 0x00022600, virtual_size: 0x000225c4
收集系统安装程序信息
从磁盘上删除自身的原始二进制
一个进程创建了一个隐藏窗口
Process: 0716_21_.exe -> C:\Users\test\AppData\Local\Temp\36162445.bat
魔盾wping.org 域名信誉系统
Greylist: glandex.ml
异常的二进制特征
anomaly: Timestamp on binary predates the release date of the OS version it requires by at least a year
执行了一个进程并在其中注入代码（可能是在解包过程中）
从本地网络浏览器中窃取个人信息
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Login Data
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal
file: C:\Users\test\AppData\Roaming\Mozilla\Firefox\profiles.ini
展现Pony恶意软件的行为特征
C2: http://glandex.ml/bing/gist/shit.exe
C2: http://glandex.ml/bing/gist/gate.php
从本地FTP客户端软件中盗取账号密码数据
file: C:\Program Files (x86)\CuteFTP\sm.dat
file: C:\Users\test\AppData\Roaming\CuteFTP\sm.dat
file: C:\Users\test\AppData\Local\GlobalSCAPE\CuteFTP\sm.dat
file: C:\Users\test\AppData\Roaming\GlobalSCAPE\CuteFTP\sm.dat
file: C:\Users\test\AppData\Local\CuteFTP\sm.dat
file: C:\Program Files (x86)\GlobalSCAPE\CuteFTP\sm.dat
file: C:\ProgramData\CuteFTP\sm.dat
file: C:\ProgramData\GlobalSCAPE\CuteFTP\sm.dat
file: C:\ProgramData\FlashFXP\3\Sites.dat
file: C:\Users\test\AppData\Local\FlashFXP\3\Sites.dat
file: C:\Users\test\AppData\Roaming\FlashFXP\4\Sites.dat
file: C:\ProgramData\FlashFXP\4\Sites.dat
file: C:\Users\test\AppData\Roaming\FlashFXP\3\Sites.dat
file: C:\Users\test\AppData\Local\FlashFXP\4\Sites.dat
file: C:\Users\test\AppData\Roaming\FlashFXP\4\Quick.dat
file: C:\Users\test\AppData\Local\FlashFXP\4\Quick.dat
file: C:\Users\test\AppData\Local\FlashFXP\3\Quick.dat
file: C:\ProgramData\FlashFXP\4\Quick.dat
file: C:\Users\test\AppData\Roaming\FlashFXP\3\Quick.dat
file: C:\ProgramData\FlashFXP\3\Quick.dat
file: C:\Users\test\AppData\Local\FileZilla\sitemanager.xml
file: C:\ProgramData\FileZilla\sitemanager.xml
file: C:\Users\test\AppData\Roaming\FileZilla\sitemanager.xml
file: C:\ProgramData\FileZilla\recentservers.xml
file: C:\Users\test\AppData\Roaming\FileZilla\recentservers.xml
file: C:\Users\test\AppData\Local\FileZilla\recentservers.xml
file: C:\Users\test\AppData\Roaming\VanDyke\Config\Sessions\*.*
file: C:\Users\test\AppData\Local\VanDyke\Config\Sessions\*.*
file: C:\ProgramData\VanDyke\Config\Sessions\*.*
file: C:\Users\test\AppData\Roaming\FTP Explorer\*.*
file: C:\Users\test\AppData\Local\FTP Explorer\*.*
file: C:\ProgramData\FTP Explorer\*.*
file: C:\Users\test\AppData\Local\SmartFTP\*.*
file: C:\Users\test\AppData\Roaming\SmartFTP\*.*
file: C:\ProgramData\SmartFTP\*.*
file: C:\Users\test\AppData\Roaming\TurboFTP\*.*
file: C:\ProgramData\TurboFTP\*.*
file: C:\Users\test\AppData\Local\TurboFTP\*.*
file: C:\Users\test\AppData\Local\FTPRush\*.*
file: C:\Users\test\AppData\Roaming\FTPRush\*.*
file: C:\ProgramData\FTPRush\*.*
file: C:\Users\test\AppData\Local\LeapWare\LeapFTP\*.*
file: C:\ProgramData\LeapWare\LeapFTP\*.*
file: C:\Users\test\AppData\Roaming\LeapWare\LeapFTP\*.*
file: C:\Users\test\AppData\Roaming\FTPGetter\*.*
file: C:\Users\test\AppData\Local\FTPGetter\*.*
file: C:\ProgramData\FTPGetter\*.*
file: C:\Users\test\AppData\Roaming\Estsoft\ALFTP\*.*
file: C:\Users\test\AppData\Local\Estsoft\ALFTP\*.*
file: C:\ProgramData\Estsoft\ALFTP\*.*
file: C:\Program Files (x86)\Common Files\Ipswitch\WS_FTP\*.*
key: HKEY_CURRENT_USER\Software\Far Manager\Plugins\FTP\Hosts
key: HKEY_CURRENT_USER\Software\Far\Plugins\FTP\Hosts
key: HKEY_CURRENT_USER\Software\Far2\Plugins\FTP\Hosts
key: HKEY_CURRENT_USER\Software\Far\SavedDialogHistory\FTPHost
key: HKEY_CURRENT_USER\Software\Far2\SavedDialogHistory\FTPHost
key: HKEY_CURRENT_USER\Software\Far Manager\SavedDialogHistory\FTPHost
key: HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 7 Professional\QCToolbar
key: HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 8 Professional\QCToolbar
key: HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 8 Home\QCToolbar
key: HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 6 Professional\QCToolbar
key: HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 6 Home\QCToolbar
key: HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 7 Home\QCToolbar
key: HKEY_LOCAL_MACHINE\Software\Ghisler\Windows Commander
key: HKEY_CURRENT_USER\Software\Ghisler\Windows Commander
key: HKEY_CURRENT_USER\Software\Ghisler\Total Commander
key: HKEY_LOCAL_MACHINE\Software\Ghisler\Total Commander
key: HKEY_CURRENT_USER\Software\BPFTP\Bullet Proof FTP\Options
key: HKEY_CURRENT_USER\Software\BPFTP\Bullet Proof FTP\Main
key: HKEY_CURRENT_USER\Software\FileZilla
key: HKEY_LOCAL_MACHINE\Software\FileZilla
key: HKEY_CURRENT_USER\Software\FileZilla Client
key: HKEY_LOCAL_MACHINE\Software\FileZilla Client
key: HKEY_CURRENT_USER\Software\TurboFTP
key: HKEY_LOCAL_MACHINE\Software\TurboFTP
key: HKEY_CURRENT_USER\Software\Sota\FFFTP\Options
key: HKEY_CURRENT_USER\Software\Sota\FFFTP
key: HKEY_CURRENT_USER\Software\FTPWare\COREFTP\Sites
key: HKEY_CURRENT_USER\Software\FTP Explorer\FTP Explorer\Workspace\MFCToolBar-224
key: HKEY_CURRENT_USER\Software\FTP Explorer\Profiles
key: HKEY_LOCAL_MACHINE\Software\FTPClient\Sites
key: HKEY_CURRENT_USER\Software\FTPClient\Sites
key: HKEY_CURRENT_USER\Software\LinasFTP\Site Manager
key: HKEY_LOCAL_MACHINE\SOFTWARE\Robo-FTP 3.7\Scripts
key: HKEY_LOCAL_MACHINE\SOFTWARE\Robo-FTP 3.7\FTPServers
key: HKEY_CURRENT_USER\SOFTWARE\Robo-FTP 3.7\FTPServers
key: HKEY_CURRENT_USER\SOFTWARE\Robo-FTP 3.7\Scripts
key: HKEY_CURRENT_USER\Software\MAS-Soft\FTPInfo\Setup
key: HKEY_LOCAL_MACHINE\Software\SoftX.org\FTPClient\Sites
key: HKEY_CURRENT_USER\Software\SoftX.org\FTPClient\Sites
key: HKEY_CURRENT_USER\Software\BulletProof Software\BulletProof FTP Client\Main
key: HKEY_CURRENT_USER\Software\BulletProof Software\BulletProof FTP Client\Options
文件已被至少十个VirusTotal上的反病毒引擎检测为病毒
MicroWorld-eScan: Trojan.Agent.DBNG
McAfee: Packed-FIU!F6AC15E4ED8E
Malwarebytes: Trojan.Injector
K7GW: Riskware ( 0040eff71 )
K7AntiVirus: Riskware ( 0040eff71 )
TrendMicro: TSPY_HPLOKI.SMBD
Cyren: W32/Trojan.AFAF-9026
Symantec: ML.Attribute.HighConfidence
TrendMicro-HouseCall: TSPY_HPLOKI.SMBD
GData: Trojan.Agent.DBNG
Kaspersky: HEUR:Trojan.Win32.Agent.gen
BitDefender: Trojan.Agent.DBNG
NANO-Antivirus: Trojan.Win32.Chisburg.ffkadk
ViRobot: Trojan.Win32.Agent.587776.F
Rising: Backdoor.Androm!8.113 (TFE:dGZlOgUEH5dxUOKnoQ)
Endgame: malicious (high confidence)
Emsisoft: Trojan.Agent.DBNG (B)
F-Secure: Trojan.Agent.DBNG
DrWeb: Trojan.PWS.Stealer.19347
Invincea: heuristic
McAfee-GW-Edition: BehavesLike.Win32.Fareit.hh
SentinelOne: static engine - malicious
F-Prot: W32/Trojan3.AMUE
Webroot: W32.Trojan.Gen
Antiy-AVL: Trojan/Win32.Fuerboos
Arcabit: Trojan.Agent.DBNG
ZoneAlarm: HEUR:Trojan.Win32.Agent.gen
AhnLab-V3: Win-Trojan/Delphiless.Exp
ALYac: Trojan.Agent.DBNG
VBA32: BScope.Trojan.Fuerboos
Zoner: Trojan.Smbd
ESET-NOD32: a variant of Win32/Injector.DZGI
Tencent: Win32.Trojan.Inject.Auto
MAX: malware (ai score=82)
Fortinet: W32/Injector.DZGI!tr
Ad-Aware: Trojan.Agent.DBNG
AVG: Win32:Trojan-gen
Cybereason: malicious.9fa20f
Avast: Win32:Trojan-gen
CrowdStrike: malicious_confidence_100% (D)
Qihoo-360: HEUR/QVM05.1.8ADB.Malware.Gen

运行截图

网络分析

域名解析

域名 响应
glandex.ml NXDOMAIN

UDP连接

IP地址 端口
192.168.122.1 53

静态分析

PE 信息

初始地址 0x00400000
入口地址 0x0045e728
声明校验值 0x00000000
实际校验值 0x0008c59e
最低操作系统版本要求 4.0
编译时间 1992-04-12 05:10:37
载入哈希 505b471e8b26a20922ce343cf680d8de
图标
图标精确哈希值 5ef96c3e63137380016689bf0b066a38
图标相似性哈希值 10bf03e51d8cc0aec686c0b1e709072d

PE数据组成

名称 虚拟地址 虚拟大小 原始数据大小 特征 熵(Entropy)
CODE 0x00001000 0x0005d770 0x0005d800 IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 6.64
DATA 0x0005f000 0x0000196c 0x00001a00 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4.50
BSS 0x00061000 0x00000df5 0x00000000 IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0.00
.idata 0x00062000 0x00002054 0x00002200 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4.89
.tls 0x00065000 0x00000010 0x00000000 IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0.00
.rdata 0x00066000 0x00000018 0x00000200 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 0.21
.reloc 0x00067000 0x00006cfc 0x00006e00 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 6.63
.rsrc 0x0006e000 0x000225c4 0x00022600 IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_SHARED|IMAGE_SCN_MEM_READ 7.04

覆盖

偏移量: 0x0008ae00
大小: 0x00000003

资源

名称 偏移量 大小 语言 子语言 熵(Entropy) 文件类型
RT_CURSOR 0x0006f7b0 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.92 data
RT_CURSOR 0x0006f7b0 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.92 data
RT_CURSOR 0x0006f7b0 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.92 data
RT_CURSOR 0x0006f7b0 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.92 data
RT_CURSOR 0x0006f7b0 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.92 data
RT_CURSOR 0x0006f7b0 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.92 data
RT_CURSOR 0x0006f7b0 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL 2.92 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_BITMAP 0x000897b4 0x00000fd2 LANG_ENGLISH SUBLANG_ENGLISH_US 5.66 data
RT_ICON 0x0008a788 0x000025a8 LANG_ENGLISH SUBLANG_ENGLISH_US 5.05 data
RT_DIALOG 0x0008cd30 0x00000052 LANG_NEUTRAL SUBLANG_NEUTRAL 2.56 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_STRING 0x0008fc54 0x000002c4 LANG_NEUTRAL SUBLANG_NEUTRAL 3.17 data
RT_RCDATA 0x00090264 0x000002bd LANG_NEUTRAL SUBLANG_NEUTRAL 5.53 Delphi compiled form 'TForm1'
RT_RCDATA 0x00090264 0x000002bd LANG_NEUTRAL SUBLANG_NEUTRAL 5.53 Delphi compiled form 'TForm1'
RT_RCDATA 0x00090264 0x000002bd LANG_NEUTRAL SUBLANG_NEUTRAL 5.53 Delphi compiled form 'TForm1'
RT_GROUP_CURSOR 0x0009059c 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1
RT_GROUP_CURSOR 0x0009059c 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1
RT_GROUP_CURSOR 0x0009059c 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1
RT_GROUP_CURSOR 0x0009059c 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1
RT_GROUP_CURSOR 0x0009059c 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1
RT_GROUP_CURSOR 0x0009059c 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1
RT_GROUP_CURSOR 0x0009059c 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL 2.02 MS Windows cursor resource - 1 icon, 32x256, hotspot @1x1
RT_GROUP_ICON 0x000905b0 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US 2.02 MS Windows icon resource - 1 icon, 48x96

导入

库 kernel32.dll:
• 0x46212c - DeleteCriticalSection
• 0x462130 - LeaveCriticalSection
• 0x462134 - EnterCriticalSection
• 0x462138 - InitializeCriticalSection
• 0x46213c - VirtualFree
• 0x462140 - VirtualAlloc
• 0x462144 - LocalFree
• 0x462148 - LocalAlloc
• 0x46214c - GetVersion
• 0x462150 - GetCurrentThreadId
• 0x462154 - InterlockedDecrement
• 0x462158 - InterlockedIncrement
• 0x46215c - VirtualQuery
• 0x462160 - WideCharToMultiByte
• 0x462164 - MultiByteToWideChar
• 0x462168 - lstrlenA
• 0x46216c - lstrcpynA
• 0x462170 - LoadLibraryExA
• 0x462174 - GetThreadLocale
• 0x462178 - GetStartupInfoA
• 0x46217c - GetProcAddress
• 0x462180 - GetModuleHandleA
• 0x462184 - GetModuleFileNameA
• 0x462188 - GetLocaleInfoA
• 0x46218c - GetCommandLineA
• 0x462190 - FreeLibrary
• 0x462194 - FindFirstFileA
• 0x462198 - FindClose
• 0x46219c - ExitProcess
• 0x4621a0 - WriteFile
• 0x4621a4 - UnhandledExceptionFilter
• 0x4621a8 - RtlUnwind
• 0x4621ac - RaiseException
• 0x4621b0 - GetStdHandle
库 user32.dll:
• 0x4621b8 - GetKeyboardType
• 0x4621bc - LoadStringA
• 0x4621c0 - MessageBoxA
• 0x4621c4 - CharNextA
库 advapi32.dll:
• 0x4621cc - RegQueryValueExA
• 0x4621d0 - RegOpenKeyExA
• 0x4621d4 - RegCloseKey
库 oleaut32.dll:
• 0x4621dc - SysFreeString
• 0x4621e0 - SysReAllocStringLen
• 0x4621e4 - SysAllocStringLen
库 kernel32.dll:
• 0x4621ec - TlsSetValue
• 0x4621f0 - TlsGetValue
• 0x4621f4 - LocalAlloc
• 0x4621f8 - GetModuleHandleA
库 advapi32.dll:
• 0x462200 - RegQueryValueExA
• 0x462204 - RegOpenKeyExA
• 0x462208 - RegCloseKey
库 kernel32.dll:
• 0x462210 - lstrcpyA
• 0x462214 - WriteFile
• 0x462218 - WaitForSingleObject
• 0x46221c - VirtualQuery
• 0x462220 - VirtualAlloc
• 0x462224 - Sleep
• 0x462228 - SizeofResource
• 0x46222c - SetThreadLocale
• 0x462230 - SetFilePointer
• 0x462234 - SetEvent
• 0x462238 - SetErrorMode
• 0x46223c - SetEndOfFile
• 0x462240 - ResetEvent
• 0x462244 - ReadFile
• 0x462248 - MulDiv
• 0x46224c - LockResource
• 0x462250 - LoadResource
• 0x462254 - LoadLibraryA
• 0x462258 - LeaveCriticalSection
• 0x46225c - InitializeCriticalSection
• 0x462260 - GlobalUnlock
• 0x462264 - GlobalReAlloc
• 0x462268 - GlobalHandle
• 0x46226c - GlobalLock
• 0x462270 - GlobalFree
• 0x462274 - GlobalFindAtomA
• 0x462278 - GlobalDeleteAtom
• 0x46227c - GlobalAlloc
• 0x462280 - GlobalAddAtomA
• 0x462284 - GetVersionExA
• 0x462288 - GetVersion
• 0x46228c - GetTickCount
• 0x462290 - GetThreadLocale
• 0x462294 - GetTempPathA
• 0x462298 - GetSystemInfo
• 0x46229c - GetStringTypeExA
• 0x4622a0 - GetStdHandle
• 0x4622a4 - GetProcAddress
• 0x4622a8 - GetModuleHandleA
• 0x4622ac - GetModuleFileNameA
• 0x4622b0 - GetLocaleInfoA
• 0x4622b4 - GetLocalTime
• 0x4622b8 - GetLastError
• 0x4622bc - GetFullPathNameA
• 0x4622c0 - GetFileSize
• 0x4622c4 - GetDiskFreeSpaceA
• 0x4622c8 - GetDateFormatA
• 0x4622cc - GetCurrentThreadId
• 0x4622d0 - GetCurrentProcessId
• 0x4622d4 - GetCPInfo
• 0x4622d8 - GetACP
• 0x4622dc - FreeResource
• 0x4622e0 - InterlockedExchange
• 0x4622e4 - FreeLibrary
• 0x4622e8 - FormatMessageA
• 0x4622ec - FindResourceA
• 0x4622f0 - FindFirstFileA
• 0x4622f4 - FindClose
• 0x4622f8 - FileTimeToLocalFileTime
• 0x4622fc - FileTimeToDosDateTime
• 0x462300 - EnumCalendarInfoA
• 0x462304 - EnterCriticalSection
• 0x462308 - DeleteCriticalSection
• 0x46230c - CreateThread
• 0x462310 - CreateFileA
• 0x462314 - CreateEventA
• 0x462318 - CompareStringA
• 0x46231c - CloseHandle
库 version.dll:
• 0x462324 - VerQueryValueA
• 0x462328 - GetFileVersionInfoSizeA
• 0x46232c - GetFileVersionInfoA
库 gdi32.dll:
• 0x462334 - UnrealizeObject
• 0x462338 - StretchBlt
• 0x46233c - SetWindowOrgEx
• 0x462340 - SetViewportOrgEx
• 0x462344 - SetTextColor
• 0x462348 - SetStretchBltMode
• 0x46234c - SetROP2
• 0x462350 - SetPixel
• 0x462354 - SetDIBColorTable
• 0x462358 - SetBrushOrgEx
• 0x46235c - SetBkMode
• 0x462360 - SetBkColor
• 0x462364 - SelectPalette
• 0x462368 - SelectObject
• 0x46236c - ScaleWindowExtEx
• 0x462370 - SaveDC
• 0x462374 - RestoreDC
• 0x462378 - RectVisible
• 0x46237c - RealizePalette
• 0x462380 - PatBlt
• 0x462384 - MoveToEx
• 0x462388 - MaskBlt
• 0x46238c - LineTo
• 0x462390 - IntersectClipRect
• 0x462394 - GetWindowOrgEx
• 0x462398 - GetTextMetricsA
• 0x46239c - GetTextExtentPoint32A
• 0x4623a0 - GetSystemPaletteEntries
• 0x4623a4 - GetStockObject
• 0x4623a8 - GetPixel
• 0x4623ac - GetPaletteEntries
• 0x4623b0 - GetObjectA
• 0x4623b4 - GetDeviceCaps
• 0x4623b8 - GetDIBits
• 0x4623bc - GetDIBColorTable
• 0x4623c0 - GetDCOrgEx
• 0x4623c4 - GetCurrentPositionEx
• 0x4623c8 - GetClipBox
• 0x4623cc - GetBrushOrgEx
• 0x4623d0 - GetBitmapBits
• 0x4623d4 - ExcludeClipRect
• 0x4623d8 - DeleteObject
• 0x4623dc - DeleteDC
• 0x4623e0 - CreateSolidBrush
• 0x4623e4 - CreatePenIndirect
• 0x4623e8 - CreatePalette
• 0x4623ec - CreateHalftonePalette
• 0x4623f0 - CreateFontIndirectA
• 0x4623f4 - CreateDIBitmap
• 0x4623f8 - CreateDIBSection
• 0x4623fc - CreateCompatibleDC
• 0x462400 - CreateCompatibleBitmap
• 0x462404 - CreateBrushIndirect
• 0x462408 - CreateBitmap
• 0x46240c - BitBlt
库 user32.dll:
• 0x462414 - CreateWindowExA
• 0x462418 - WindowFromPoint
• 0x46241c - WinHelpA
• 0x462420 - WaitMessage
• 0x462424 - UpdateWindow
• 0x462428 - UnregisterClassA
• 0x46242c - UnhookWindowsHookEx
• 0x462430 - TranslateMessage
• 0x462434 - TranslateMDISysAccel
• 0x462438 - TrackPopupMenu
• 0x46243c - SystemParametersInfoA
• 0x462440 - ShowWindow
• 0x462444 - ShowScrollBar
• 0x462448 - ShowOwnedPopups
• 0x46244c - ShowCursor
• 0x462450 - SetWindowsHookExA
• 0x462454 - SetWindowPos
• 0x462458 - SetWindowPlacement
• 0x46245c - SetWindowLongA
• 0x462460 - SetTimer
• 0x462464 - SetScrollRange
• 0x462468 - SetScrollPos
• 0x46246c - SetScrollInfo
• 0x462470 - SetRect
• 0x462474 - SetPropA
• 0x462478 - SetParent
• 0x46247c - SetMenuItemInfoA
• 0x462480 - SetMenu
• 0x462484 - SetForegroundWindow
• 0x462488 - SetFocus
• 0x46248c - SetCursor
• 0x462490 - SetClassLongA
• 0x462494 - SetCapture
• 0x462498 - SetActiveWindow
• 0x46249c - SendMessageA
• 0x4624a0 - ScrollWindow
• 0x4624a4 - ScreenToClient
• 0x4624a8 - RemovePropA
• 0x4624ac - RemoveMenu
• 0x4624b0 - ReleaseDC
• 0x4624b4 - ReleaseCapture
• 0x4624b8 - RegisterWindowMessageA
• 0x4624bc - RegisterClipboardFormatA
• 0x4624c0 - RegisterClassA
• 0x4624c4 - RedrawWindow
• 0x4624c8 - PtInRect
• 0x4624cc - PostQuitMessage
• 0x4624d0 - PostMessageA
• 0x4624d4 - PeekMessageA
• 0x4624d8 - OffsetRect
• 0x4624dc - OemToCharA
• 0x4624e0 - MessageBoxA
• 0x4624e4 - MapWindowPoints
• 0x4624e8 - MapVirtualKeyA
• 0x4624ec - LoadStringA
• 0x4624f0 - LoadKeyboardLayoutA
• 0x4624f4 - LoadIconA
• 0x4624f8 - LoadCursorA
• 0x4624fc - LoadBitmapA
• 0x462500 - KillTimer
• 0x462504 - IsZoomed
• 0x462508 - IsWindowVisible
• 0x46250c - IsWindowEnabled
• 0x462510 - IsWindow
• 0x462514 - IsRectEmpty
• 0x462518 - IsIconic
• 0x46251c - IsDialogMessageA
• 0x462520 - IsChild
• 0x462524 - InvalidateRect
• 0x462528 - IntersectRect
• 0x46252c - InsertMenuItemA
• 0x462530 - InsertMenuA
• 0x462534 - InflateRect
• 0x462538 - GetWindowThreadProcessId
• 0x46253c - GetWindowTextA
• 0x462540 - GetWindowRect
• 0x462544 - GetWindowPlacement
• 0x462548 - GetWindowLongA
• 0x46254c - GetWindowDC
• 0x462550 - GetTopWindow
• 0x462554 - GetSystemMetrics
• 0x462558 - GetSystemMenu
• 0x46255c - GetSysColorBrush
• 0x462560 - GetSysColor
• 0x462564 - GetSubMenu
• 0x462568 - GetScrollRange
• 0x46256c - GetScrollPos
• 0x462570 - GetScrollInfo
• 0x462574 - GetPropA
• 0x462578 - GetParent
• 0x46257c - GetWindow
• 0x462580 - GetMenuStringA
• 0x462584 - GetMenuState
• 0x462588 - GetMenuItemInfoA
• 0x46258c - GetMenuItemID
• 0x462590 - GetMenuItemCount
• 0x462594 - GetMenu
• 0x462598 - GetLastActivePopup
• 0x46259c - GetKeyboardState
• 0x4625a0 - GetKeyboardLayoutList
• 0x4625a4 - GetKeyboardLayout
• 0x4625a8 - GetKeyState
• 0x4625ac - GetKeyNameTextA
• 0x4625b0 - GetIconInfo
• 0x4625b4 - GetForegroundWindow
• 0x4625b8 - GetFocus
• 0x4625bc - GetDesktopWindow
• 0x4625c0 - GetDCEx
• 0x4625c4 - GetDC
• 0x4625c8 - GetCursorPos
• 0x4625cc - GetCursor
• 0x4625d0 - GetClientRect
• 0x4625d4 - GetClassNameA
• 0x4625d8 - GetClassInfoA
• 0x4625dc - GetCapture
• 0x4625e0 - GetActiveWindow
• 0x4625e4 - FrameRect
• 0x4625e8 - FindWindowA
• 0x4625ec - FillRect
• 0x4625f0 - EqualRect
• 0x4625f4 - EnumWindows
• 0x4625f8 - EnumThreadWindows
• 0x4625fc - EndPaint
• 0x462600 - EnableWindow
• 0x462604 - EnableScrollBar
• 0x462608 - EnableMenuItem
• 0x46260c - DrawTextA
• 0x462610 - DrawMenuBar
• 0x462614 - DrawIconEx
• 0x462618 - DrawIcon
• 0x46261c - DrawFrameControl
• 0x462620 - DrawFocusRect
• 0x462624 - DrawEdge
• 0x462628 - DispatchMessageA
• 0x46262c - DestroyWindow
• 0x462630 - DestroyMenu
• 0x462634 - DestroyIcon
• 0x462638 - DestroyCursor
• 0x46263c - DeleteMenu
• 0x462640 - DefWindowProcA
• 0x462644 - DefMDIChildProcA
• 0x462648 - DefFrameProcA
• 0x46264c - CreatePopupMenu
• 0x462650 - CreateMenu
• 0x462654 - CreateIcon
• 0x462658 - ClientToScreen
• 0x46265c - CheckMenuItem
• 0x462660 - CallWindowProcA
• 0x462664 - CallNextHookEx
• 0x462668 - BringWindowToTop
• 0x46266c - BeginPaint
• 0x462670 - CharNextA
• 0x462674 - CharLowerA
• 0x462678 - CharUpperBuffA
• 0x46267c - CharToOemA
• 0x462680 - AdjustWindowRectEx
• 0x462684 - ActivateKeyboardLayout
库 kernel32.dll:
• 0x46268c - Sleep
库 oleaut32.dll:
• 0x462694 - SafeArrayPtrOfIndex
• 0x462698 - SafeArrayGetUBound
• 0x46269c - SafeArrayGetLBound
• 0x4626a0 - SafeArrayCreate
• 0x4626a4 - VariantChangeType
• 0x4626a8 - VariantCopy
• 0x4626ac - VariantClear
• 0x4626b0 - VariantInit
库 comctl32.dll:
• 0x4626b8 - ImageList_SetIconSize
• 0x4626bc - ImageList_GetIconSize
• 0x4626c0 - ImageList_Write
• 0x4626c4 - ImageList_Read
• 0x4626c8 - ImageList_GetDragImage
• 0x4626cc - ImageList_DragShowNolock
• 0x4626d0 - ImageList_SetDragCursorImage
• 0x4626d4 - ImageList_DragMove
• 0x4626d8 - ImageList_DragLeave
• 0x4626dc - ImageList_DragEnter
• 0x4626e0 - ImageList_EndDrag
• 0x4626e4 - ImageList_BeginDrag
• 0x4626e8 - ImageList_Remove
• 0x4626ec - ImageList_DrawEx
• 0x4626f0 - ImageList_Draw
• 0x4626f4 - ImageList_GetBkColor
• 0x4626f8 - ImageList_SetBkColor
• 0x4626fc - ImageList_ReplaceIcon
• 0x462700 - ImageList_Add
• 0x462704 - ImageList_GetImageCount
• 0x462708 - ImageList_Destroy
• 0x46270c - ImageList_Create
库 comdlg32.dll:
• 0x462714 - ReplaceTextA
• 0x462718 - FindTextA

投放文件

36162445.bat

文件名 36162445.bat
相关文件
  • C:\Users\test\AppData\Local\Temp\36162445.bat
文件大小 94 bytes
文件类型 ASCII text, with CRLF, CR line terminators
MD5 3880eeb1c736d853eb13b44898b718ab
SHA1 4eec9d50360cd815211e3c4e6bdd08271b6ec8e6
SHA256 936d9411d5226b7c5a150ecaf422987590a8870c8e095e1caa072273041a86e7
SHA512 3eaa3dddd7a11942e75acd44208fbe3d3ff8f4006951cd970fb9ab748c160739409803450d28037e577443504707fc310c634e9dc54d0c25e8cfe6094f017c6b
Ssdeep 3:k4Zoa5/kFWJFFN6dAFZkMFlGl/AVFn:k/0/kFY/NDFZotwFn
VirusTotal 搜索相关分析

行为分析

互斥量(Mutexes)
  • Local\_!MSFTHISTORY!_
  • Local\c:!users!test!appdata!local!microsoft!windows!temporary internet files!content.ie5!
  • Local\c:!users!test!appdata!roaming!microsoft!windows!cookies!
  • Local\c:!users!test!appdata!local!microsoft!windows!history!history.ie5!
执行的命令
  • "C:\Users\test\AppData\Local\Temp\0716_21_.exe"
  • C:\Users\test\AppData\Local\Temp\36162445.bat "C:\Users\test\AppData\Local\Temp\0716_21_.exe"
创建的服务 无信息
启动的服务 无信息

进程

0716_21_.exe PID: 1808, 上一级进程 PID: 1872

0716_21_.exe PID: 1812, 上一级进程 PID: 1808

cmd.exe PID: 1596, 上一级进程 PID: 1812

访问的文件
  • C:\Users\test\AppData\Local\Temp\0716_21_.exe
  • C:\Users
  • C:\Users\test
  • C:\Users\test\AppData
  • C:\Users\test\AppData\Local
  • C:\Users\test\AppData\Local\Temp
  • C:\Users\test\AppData\Local\Temp\0716_21_.CHS
  • C:\Users\test\AppData\Local\Temp\0716_21_.CHS.DLL
  • C:\Users\test\AppData\Local\Temp\0716_21_.CH
  • C:\Users\test\AppData\Local\Temp\0716_21_.CH.DLL
  • C:\Windows\Globalization\Sorting\sortdefault.nls
  • \Device\KsecDD
  • C:\Users\test\AppData\Local\Temp\HWID
  • C:\Windows\wcx_ftp.ini
  • C:\Users\test\wcx_ftp.ini
  • C:\Users\test\AppData\Roaming\GHISLER\wcx_ftp.ini
  • C:\ProgramData\GHISLER\wcx_ftp.ini
  • C:\Users\test\AppData\Local\GHISLER\wcx_ftp.ini
  • C:\Windows\win.ini
  • C:\Program Files (x86)\Common Files\Ipswitch\WS_FTP\*.*
  • C:\Users\test\AppData\Roaming\Ipswitch\*.*
  • C:\ProgramData\Ipswitch\*.*
  • C:\Users\test\AppData\Local\Ipswitch\*.*
  • C:\Users\test\AppData\Roaming\GlobalSCAPE\CuteFTP\sm.dat
  • C:\Users\test\AppData\Roaming\GlobalSCAPE\CuteFTP\*.*
  • C:\Users\test\AppData\Roaming\GlobalSCAPE\CuteFTP Pro\sm.dat
  • C:\Users\test\AppData\Roaming\GlobalSCAPE\CuteFTP Pro\*.*
  • C:\Users\test\AppData\Roaming\GlobalSCAPE\CuteFTP Lite\sm.dat
  • C:\Users\test\AppData\Roaming\GlobalSCAPE\CuteFTP Lite\*.*
  • C:\Users\test\AppData\Roaming\CuteFTP\sm.dat
  • C:\Users\test\AppData\Roaming\CuteFTP\*.*
  • C:\ProgramData\GlobalSCAPE\CuteFTP\sm.dat
  • C:\ProgramData\GlobalSCAPE\CuteFTP\*.*
  • C:\ProgramData\GlobalSCAPE\CuteFTP Pro\sm.dat
  • C:\ProgramData\GlobalSCAPE\CuteFTP Pro\*.*
  • C:\ProgramData\GlobalSCAPE\CuteFTP Lite\sm.dat
  • C:\ProgramData\GlobalSCAPE\CuteFTP Lite\*.*
  • C:\ProgramData\CuteFTP\sm.dat
  • C:\ProgramData\CuteFTP\*.*
  • C:\Users\test\AppData\Local\GlobalSCAPE\CuteFTP\sm.dat
  • C:\Users\test\AppData\Local\GlobalSCAPE\CuteFTP\*.*
  • C:\Users\test\AppData\Local\GlobalSCAPE\CuteFTP Pro\sm.dat
  • C:\Users\test\AppData\Local\GlobalSCAPE\CuteFTP Pro\*.*
  • C:\Users\test\AppData\Local\GlobalSCAPE\CuteFTP Lite\sm.dat
  • C:\Users\test\AppData\Local\GlobalSCAPE\CuteFTP Lite\*.*
  • C:\Users\test\AppData\Local\CuteFTP\sm.dat
  • C:\Users\test\AppData\Local\CuteFTP\*.*
  • C:\Program Files (x86)\GlobalSCAPE\CuteFTP\sm.dat
  • C:\Program Files (x86)\GlobalSCAPE\CuteFTP\*.*
  • C:\Program Files (x86)\GlobalSCAPE\CuteFTP Pro\sm.dat
  • C:\Program Files (x86)\GlobalSCAPE\CuteFTP Pro\*.*
  • C:\Program Files (x86)\GlobalSCAPE\CuteFTP Lite\sm.dat
  • C:\Program Files (x86)\GlobalSCAPE\CuteFTP Lite\*.*
  • C:\Program Files (x86)\CuteFTP\sm.dat
  • C:\Program Files (x86)\CuteFTP\*.*
  • C:\Users\test\AppData\Roaming\FlashFXP\3\Sites.dat
  • C:\Users\test\AppData\Roaming\FlashFXP\4\Sites.dat
  • C:\Users\test\AppData\Roaming\FlashFXP\3\Quick.dat
  • C:\Users\test\AppData\Roaming\FlashFXP\4\Quick.dat
  • C:\Users\test\AppData\Roaming\FlashFXP\3\History.dat
  • C:\Users\test\AppData\Roaming\FlashFXP\4\History.dat
  • C:\ProgramData\FlashFXP\3\Sites.dat
  • C:\ProgramData\FlashFXP\4\Sites.dat
  • C:\ProgramData\FlashFXP\3\Quick.dat
  • C:\ProgramData\FlashFXP\4\Quick.dat
  • C:\ProgramData\FlashFXP\3\History.dat
  • C:\ProgramData\FlashFXP\4\History.dat
  • C:\Users\test\AppData\Local\FlashFXP\3\Sites.dat
  • C:\Users\test\AppData\Local\FlashFXP\4\Sites.dat
  • C:\Users\test\AppData\Local\FlashFXP\3\Quick.dat
  • C:\Users\test\AppData\Local\FlashFXP\4\Quick.dat
  • C:\Users\test\AppData\Local\FlashFXP\3\History.dat
  • C:\Users\test\AppData\Local\FlashFXP\4\History.dat
  • C:\Users\test\AppData\Roaming\FileZilla\sitemanager.xml
  • C:\Users\test\AppData\Roaming\FileZilla\recentservers.xml
  • C:\Users\test\AppData\Roaming\FileZilla\filezilla.xml
  • C:\ProgramData\FileZilla\sitemanager.xml
  • C:\ProgramData\FileZilla\recentservers.xml
  • C:\ProgramData\FileZilla\filezilla.xml
  • C:\Users\test\AppData\Local\FileZilla\sitemanager.xml
  • C:\Users\test\AppData\Local\FileZilla\recentservers.xml
  • C:\Users\test\AppData\Local\FileZilla\filezilla.xml
  • C:\Users\test\AppData\Local\BulletProof Software\*.*
  • C:\Users\test\AppData\Roaming\BulletProof Software\*.*
  • C:\ProgramData\BulletProof Software\*.*
  • C:\Users\test\AppData\Roaming\SmartFTP\*.*
  • C:\ProgramData\SmartFTP\*.*
  • C:\Users\test\AppData\Local\SmartFTP\*.*
  • C:\Users\test\AppData\Roaming\TurboFTP\*.*
  • C:\ProgramData\TurboFTP\*.*
  • C:\Users\test\AppData\Local\TurboFTP\*.*
  • C:\Users\test\AppData\Roaming\FTP Explorer\*.*
  • C:\ProgramData\FTP Explorer\*.*
  • C:\Users\test\AppData\Local\FTP Explorer\*.*
  • C:\Users\test\AppData\Roaming\Frigate3\*.*
  • C:\ProgramData\Frigate3\*.*
  • C:\Users\test\AppData\Local\Frigate3\*.*
  • C:\Users\test\AppData\Roaming\VanDyke\Config\Sessions\*.*
  • C:\ProgramData\VanDyke\Config\Sessions\*.*
  • C:\Users\test\AppData\Local\VanDyke\Config\Sessions\*.*
  • C:\Users\test\AppData\Roaming\FTPRush\*.*
  • C:\ProgramData\FTPRush\*.*
  • C:\Users\test\AppData\Local\FTPRush\*.*
  • C:\Users\test\AppData\Roaming\BitKinex\*.*
  • C:\ProgramData\BitKinex\*.*
  • C:\Users\test\AppData\Local\BitKinex\*.*
  • C:\Users\test\AppData\Roaming\ExpanDrive\drives.js
  • C:\Users\test\AppData\Local\ExpanDrive\drives.js
  • C:\ProgramData\ExpanDrive\drives.js
  • C:\Users\test\AppData\Roaming\GPSoftware\Directory Opus\*.*
  • C:\ProgramData\GPSoftware\Directory Opus\*.*
  • C:\Users\test\AppData\Local\GPSoftware\Directory Opus\*.*
  • C:\Users\test\AppData\Roaming\SharedSettings.ccs
  • C:\Users\test\AppData\Roaming\SharedSettings.sqlite
  • C:\Users\test\AppData\Roaming\SharedSettings_1_0_5.ccs
  • C:\Users\test\AppData\Roaming\SharedSettings_1_0_5.sqlite
  • C:\ProgramData\SharedSettings.ccs
  • C:\ProgramData\SharedSettings.sqlite
  • C:\ProgramData\SharedSettings_1_0_5.ccs
  • C:\ProgramData\SharedSettings_1_0_5.sqlite
  • C:\Users\test\AppData\Local\SharedSettings.ccs
  • C:\Users\test\AppData\Local\SharedSettings.sqlite
  • C:\Users\test\AppData\Local\SharedSettings_1_0_5.ccs
  • C:\Users\test\AppData\Local\SharedSettings_1_0_5.sqlite
  • C:\Users\test\AppData\Roaming\CoffeeCup Software\SharedSettings.ccs
  • C:\Users\test\AppData\Roaming\CoffeeCup Software\SharedSettings.sqlite
  • C:\Users\test\AppData\Roaming\CoffeeCup Software\SharedSettings_1_0_5.ccs
  • C:\Users\test\AppData\Roaming\CoffeeCup Software\SharedSettings_1_0_5.sqlite
  • C:\ProgramData\CoffeeCup Software\SharedSettings.ccs
  • C:\ProgramData\CoffeeCup Software\SharedSettings.sqlite
  • C:\ProgramData\CoffeeCup Software\SharedSettings_1_0_5.ccs
  • C:\ProgramData\CoffeeCup Software\SharedSettings_1_0_5.sqlite
  • C:\Users\test\AppData\Local\CoffeeCup Software\SharedSettings.ccs
  • C:\Users\test\AppData\Local\CoffeeCup Software\SharedSettings.sqlite
  • C:\Users\test\AppData\Local\CoffeeCup Software\SharedSettings_1_0_5.ccs
  • C:\Users\test\AppData\Local\CoffeeCup Software\SharedSettings_1_0_5.sqlite
  • C:\Users\test\AppData\Roaming\LeapWare\LeapFTP\*.*
  • C:\ProgramData\LeapWare\LeapFTP\*.*
  • C:\Users\test\AppData\Local\LeapWare\LeapFTP\*.*
  • C:\Windows\32BitFtp.ini
  • C:\Users\test\AppData\Roaming\NetDrive\*.*
  • C:\ProgramData\NetDrive\*.*
  • C:\Users\test\AppData\Local\NetDrive\*.*
  • C:\Users\test\AppData\Roaming\*.*
  • C:\ProgramData\*.*
  • C:\Users\test\AppData\Local\*.*
  • C:\Users\test\AppData\Roaming\AceBIT\*.*
  • C:\ProgramData\AceBIT\*.*
  • C:\Users\test\AppData\Local\AceBIT\*.*
  • C:\Users\test\AppData\Roaming\RhinoSoft.com\*.*
  • C:\ProgramData\RhinoSoft.com\*.*
  • C:\Users\test\AppData\Local\RhinoSoft.com\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\
  • C:\Program Files (x86)\Mozilla Firefox
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\profiles.ini
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\addon-notification\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\AddonInstaller\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\bookmarkbackups\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\crashes\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\crashes\events\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\datareporting\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\datareporting\archived\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\datareporting\archived\2017-05\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\extensions\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\gmp\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\gmp\WINNT_x86-msvc\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\gmp-eme-adobe\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\gmp-eme-adobe\17\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\gmp-gmpopenh264\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\gmp-gmpopenh264\1.6\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\healthreport\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\minidumps\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\ntab\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\ntab\quickdialdata\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\saved-telemetry-pings\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\sessionstore-backups\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\storage\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\storage\default\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\storage\default\http+++offlintab.firefoxchina.cn\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\storage\default\http+++offlintab.firefoxchina.cn\idb\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\storage\default\http+++offlintab.firefoxchina.cn\idb\123733528obfaftlni.files\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\storage\default\http+++offlintab.firefoxchina.cn\idb\123733528obfaftlni.files\journals\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\storage\permanent\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\storage\permanent\chrome\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\storage\permanent\chrome\idb\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\storage\permanent\chrome\idb\2918063365piupsah.files\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\storage\temporary\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\weave\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\weave\changes\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\weave\failed\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\weave\toFetch\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\i072kp8z.default-1494515848972\webapps\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Crash Reports\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Crash Reports\events\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\*.*
  • C:\Users\test\AppData\Roaming\Mozilla\Profiles\
  • C:\Users\test\Desktop\*.*
  • C:\Users\test\AppData\Roaming\FTPGetter\*.*
  • C:\ProgramData\FTPGetter\*.*
  • C:\Users\test\AppData\Local\FTPGetter\*.*
  • C:\Users\test\AppData\Roaming\Estsoft\ALFTP\*.*
  • C:\ProgramData\Estsoft\ALFTP\*.*
  • C:\Users\test\AppData\Local\Estsoft\ALFTP\*.*
  • C:\Users\test\AppData\Local\Microsoft\Windows\Temporary Internet Files
  • C:\Users\test\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini
  • C:\Users\test\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
  • C:\Users\test\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Cookies
  • C:\Users\test\AppData\Local\Microsoft\Windows\History
  • C:\Users\test\AppData\Local\Microsoft\Windows\History\desktop.ini
  • C:\Users\test\AppData\Local\Microsoft\Windows\History\History.IE5
  • C:\Users\test\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini
  • C:\Users\test\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
  • C:\Users\test\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Cookies\
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  • C:\Users\test\AppData\Local\Microsoft\Windows\History\History.IE5\
  • C:\Users\test\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  • C:\Users\test\AppData\Roaming\Google\Chrome\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\Application\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\Application\24.0.1312.57\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\Application\24.0.1312.57\default_apps\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\Application\24.0.1312.57\Extensions\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\Application\24.0.1312.57\Installer\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\Application\24.0.1312.57\Locales\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\Application\24.0.1312.57\PepperFlash\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\Application\24.0.1312.57\VisualElements\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\Application\Dictionaries\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\databases\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\2B339CGS\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\33KFXF5B\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\33KFXF5B\macromedia.com\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\33KFXF5B\macromedia.com\support\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\33KFXF5B\macromedia.com\support\flashplayer\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\33KFXF5B\macromedia.com\support\flashplayer\sys\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\User StyleSheets\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\PepperFlash\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\SwiftShader\*.*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Login Data
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal
  • C:\ProgramData\Google\Chrome\*.*
  • C:\Users\test\AppData\Roaming\Chromium\*.*
  • C:\Users\test\AppData\Local\Chromium\*.*
  • C:\ProgramData\Chromium\*.*
  • C:\Users\test\AppData\Roaming\ChromePlus\*.*
  • C:\Users\test\AppData\Local\ChromePlus\*.*
  • C:\ProgramData\ChromePlus\*.*
  • C:\Users\test\AppData\Roaming\Bromium\*.*
  • C:\Users\test\AppData\Local\Bromium\*.*
  • C:\ProgramData\Bromium\*.*
  • C:\Users\test\AppData\Roaming\Nichrome\*.*
  • C:\Users\test\AppData\Local\Nichrome\*.*
  • C:\ProgramData\Nichrome\*.*
  • C:\Users\test\AppData\Roaming\Comodo\*.*
  • C:\Users\test\AppData\Local\Comodo\*.*
  • C:\ProgramData\Comodo\*.*
  • C:\Users\test\AppData\Roaming\RockMelt\*.*
  • C:\Users\test\AppData\Local\RockMelt\*.*
  • C:\ProgramData\RockMelt\*.*
  • C:\Users\test\AppData\Roaming\Sites\*.*
  • C:\Users\test\AppData\Roaming\Visicom Media\*.*
  • C:\ProgramData\Sites\*.*
  • C:\ProgramData\Visicom Media\*.*
  • C:\Users\test\AppData\Local\Sites\*.*
  • C:\Users\test\AppData\Local\Visicom Media\*.*
  • C:\Users\test\AppData\Roaming\Global Downloader\*.*
  • C:\ProgramData\Global Downloader\*.*
  • C:\Users\test\AppData\Local\Global Downloader\*.*
  • C:\Users\test\AppData\Roaming\BlazeFtp\*.*
  • C:\ProgramData\BlazeFtp\*.*
  • C:\Users\test\AppData\Local\BlazeFtp\*.*
  • C:\ProgramData\3D-FTP\*.*
  • C:\ProgramData\SiteDesigner\*.*
  • C:\Users\test\AppData\Roaming\NetSarang\*.*
  • C:\ProgramData\NetSarang\*.*
  • C:\Users\test\AppData\Local\NetSarang\*.*
  • C:\Users\test\Documents\*.*
  • C:\Users\test\Documents\My Music\*.*
  • C:\Users\test\Documents\My Pictures\*.*
  • C:\Users\test\Documents\My Videos\*.*
  • C:\Users\test\Documents\Outlook \xe6\x96\x87\xe4\xbb\xb6\*.*
  • C:\Users\test\Documents\Youku Files\*.*
  • C:\Users\test\Documents\Youku Files\youkudisk\*.*
  • C:\Users\test\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\*
  • C:\Users\test\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\*
  • C:\Users\test\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\*
  • C:\Users\test\AppData\Roaming\Cyberduck\*.*
  • C:\ProgramData\Cyberduck\*.*
  • C:\Users\test\AppData\Local\Cyberduck\*.*
  • C:\Users\test\AppData\Roaming\Notepad++\*.*
  • C:\ProgramData\Notepad++\*.*
  • C:\Users\test\AppData\Local\Notepad++\*.*
  • C:\Users\test\AppData\Roaming\FTPInfo\*.*
  • C:\ProgramData\FTPInfo\*.*
  • C:\Users\test\AppData\Local\FTPInfo\*.*
  • C:\Users\test\AppData\Roaming\MapleStudio\ChromePlus\*.*
  • C:\Users\test\AppData\Local\MapleStudio\ChromePlus\*.*
  • C:\ProgramData\MapleStudio\ChromePlus\*.*
  • C:\Users\test\AppData\Roaming\Yandex\*.*
  • C:\Users\test\AppData\Local\Yandex\*.*
  • C:\ProgramData\Yandex\*.*
  • C:\Users\test\AppData\Roaming\INSoftware\NovaFTP\*.*
  • C:\ProgramData\INSoftware\NovaFTP\*.*
  • C:\Users\test\AppData\Local\INSoftware\NovaFTP\*.*
  • C:\Users\test\AppData\Roaming\Pocomail\*.*
  • C:\ProgramData\Pocomail\*.*
  • C:\Users\test\AppData\Local\Pocomail\*.*
  • C:\Users\test\AppData\Roaming\BatMail\*.*
  • C:\ProgramData\BatMail\*.*
  • C:\Users\test\AppData\Local\BatMail\*.*
  • C:\Users\test\AppData\Roaming\The Bat!\*.*
  • C:\ProgramData\The Bat!\*.*
  • C:\Users\test\AppData\Local\The Bat!\*.*
  • C:\Users\test\AppData\Local\Temp\Client Hash
  • \??\PIPE\samr
  • C:\Users\test\AppData\Local\Temp\36162445.bat
  • \??\MountPointManager
  • C:\Users\test\AppData\Local\Temp\"C:\Users\test\AppData\Local\Temp\36162445.bat"
  • C:\
读取的文件
  • C:\Windows\Globalization\Sorting\sortdefault.nls
  • \Device\KsecDD
  • C:\Users\test\AppData\Local\Temp\HWID
  • C:\Windows\win.ini
  • C:\Users\test\AppData\Roaming\Mozilla\Firefox\profiles.ini
  • C:\Users\test\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  • C:\Users\test\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Login Data
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal
  • C:\Users\test\AppData\Local\Temp\Client Hash
  • \??\PIPE\samr
  • C:\Users\test\AppData\Local\Temp\36162445.bat
修改的文件
  • C:\Users\test\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  • C:\Users\test\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  • \??\PIPE\samr
  • C:\Users\test\AppData\Local\Temp\36162445.bat
删除的文件
  • C:\Users\test\AppData\Local\Temp\0716_21_.exe
  • C:\Users\test\AppData\Local\Temp\36162445.bat
注册表键
  • HKEY_CURRENT_USER\Software\Borland\Locales
  • HKEY_CURRENT_USER\Software\Borland\Locales\C:\Users\test\AppData\Local\Temp\0716_21_.exe
  • HKEY_CURRENT_USER\Software\Borland\Locales\(Default)
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08040804
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\E0200804
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Keyboard Layouts\E0200804\layout text
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\E0210804
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Keyboard Layouts\E0210804\layout text
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04090409
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player NPAPI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player NPAPI\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player NPAPI\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Alipay security control_is1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Alipay security control_is1\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Alipay security plugin_is1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Alipay security plugin_is1\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 10.0.9 (x86 zh-CN)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 10.0.9 (x86 zh-CN)\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 10.0.9 (x86 zh-CN)\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.PROPLUS
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Office14.PROPLUS\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Office14.PROPLUS\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinAce Archiver
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinAce Archiver\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinAce Archiver\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinRAR archiver
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinRAR archiver\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinRAR archiver\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1b103cea-f037-4504-81de-956057b442c3}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1b103cea-f037-4504-81de-956057b442c3}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1b103cea-f037-4504-81de-956057b442c3}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F32180121F0}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F32180121F0}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F32180121F0}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6c6356fe-cbfa-4944-9bed-a9e99f45cb7a}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6c6356fe-cbfa-4944-9bed-a9e99f45cb7a}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6c6356fe-cbfa-4944-9bed-a9e99f45cb7a}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0011-0000-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0011-0000-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0011-0000-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0015-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0015-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0015-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0016-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0016-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0016-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0018-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0018-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0018-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0019-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0019-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0019-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001A-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001A-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001A-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001B-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001B-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001B-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0409-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0409-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0409-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0028-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0028-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0028-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-002C-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-002C-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-002C-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0044-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0044-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0044-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-006E-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-006E-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-006E-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00A1-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00A1-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00A1-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00BA-0804-0000-0000000FF1CE}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00BA-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00BA-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9bd48a22-fe5a-457c-8f10-da6c2be89eee}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9bd48a22-fe5a-457c-8f10-da6c2be89eee}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9bd48a22-fe5a-457c-8f10-da6c2be89eee}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-2052-7B44-AB0000000001}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-2052-7B44-AB0000000001}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-2052-7B44-AB0000000001}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D93BD08F-2C69-4FD6-8538-09B6597ADA8C}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D93BD08F-2C69-4FD6-8538-09B6597ADA8C}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D93BD08F-2C69-4FD6-8538-09B6597ADA8C}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E2B51919-207A-43EB-AE78-733F9C6797C2}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E2B51919-207A-43EB-AE78-733F9C6797C2}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E2B51919-207A-43EB-AE78-733F9C6797C2}\DisplayName
  • HKEY_CURRENT_USER\Software\WinRAR
  • HKEY_CURRENT_USER\Software\WinRAR\HWID
  • HKEY_CURRENT_USER\Software\Far\Plugins\FTP\Hosts
  • HKEY_CURRENT_USER\Software\Far2\Plugins\FTP\Hosts
  • HKEY_CURRENT_USER\Software\Far Manager\Plugins\FTP\Hosts
  • HKEY_CURRENT_USER\Software\Far\SavedDialogHistory\FTPHost
  • HKEY_CURRENT_USER\Software\Far2\SavedDialogHistory\FTPHost
  • HKEY_CURRENT_USER\Software\Far Manager\SavedDialogHistory\FTPHost
  • HKEY_CURRENT_USER\Software\Ghisler\Windows Commander
  • HKEY_LOCAL_MACHINE\Software\Ghisler\Windows Commander
  • HKEY_CURRENT_USER\Software\Ghisler\Total Commander
  • HKEY_LOCAL_MACHINE\Software\Ghisler\Total Commander
  • HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 6 Home\QCToolbar
  • HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 6 Professional\QCToolbar
  • HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 7 Home\QCToolbar
  • HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 7 Professional\QCToolbar
  • HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 8 Home\QCToolbar
  • HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 8 Professional\QCToolbar
  • HKEY_CURRENT_USER\Software\FlashFXP\3
  • HKEY_CURRENT_USER\Software\FlashFXP
  • HKEY_CURRENT_USER\Software\FlashFXP\4
  • HKEY_LOCAL_MACHINE\Software\FlashFXP\3
  • HKEY_LOCAL_MACHINE\Software\FlashFXP
  • HKEY_LOCAL_MACHINE\Software\FlashFXP\4
  • HKEY_CURRENT_USER\Software\FileZilla
  • HKEY_CURRENT_USER\Software\FileZilla Client
  • HKEY_LOCAL_MACHINE\Software\FileZilla
  • HKEY_LOCAL_MACHINE\Software\FileZilla Client
  • HKEY_CURRENT_USER\Software\BPFTP\Bullet Proof FTP\Main
  • HKEY_CURRENT_USER\Software\BulletProof Software\BulletProof FTP Client\Main
  • HKEY_CURRENT_USER\Software\BPFTP\Bullet Proof FTP\Options
  • HKEY_CURRENT_USER\Software\BulletProof Software\BulletProof FTP Client\Options
  • HKEY_CURRENT_USER\Software\BPFTP
  • HKEY_CURRENT_USER\Software\TurboFTP
  • HKEY_LOCAL_MACHINE\Software\TurboFTP
  • HKEY_CURRENT_USER\Software\Sota\FFFTP
  • HKEY_CURRENT_USER\Software\Sota\FFFTP\Options
  • HKEY_CURRENT_USER\Software\CoffeeCup Software\Internet\Profiles
  • HKEY_CURRENT_USER\Software\FTPWare\COREFTP\Sites
  • HKEY_CURRENT_USER\Software\FTP Explorer\FTP Explorer\Workspace\MFCToolBar-224
  • HKEY_CURRENT_USER\Software\FTP Explorer\Profiles
  • HKEY_CURRENT_USER\Software\VanDyke\SecureFX
  • HKEY_CURRENT_USER\Software\Cryer\WebSitePublisher
  • HKEY_CURRENT_USER\Software\ExpanDrive\Sessions
  • HKEY_CURRENT_USER\Software\ExpanDrive
  • HKEY_LOCAL_MACHINE\Software\NCH Software\ClassicFTP\FTPAccounts
  • HKEY_CURRENT_USER\Software\NCH Software\ClassicFTP\FTPAccounts
  • HKEY_CURRENT_USER\SOFTWARE\NCH Software\Fling\Accounts
  • HKEY_LOCAL_MACHINE\SOFTWARE\NCH Software\Fling\Accounts
  • HKEY_CURRENT_USER\Software\FTPClient\Sites
  • HKEY_LOCAL_MACHINE\Software\FTPClient\Sites
  • HKEY_CURRENT_USER\Software\SoftX.org\FTPClient\Sites
  • HKEY_LOCAL_MACHINE\Software\SoftX.org\FTPClient\Sites
  • HKEY_CURRENT_USER\SOFTWARE\LeapWare
  • HKEY_LOCAL_MACHINE\SOFTWARE\LeapWare
  • HKEY_CURRENT_USER\Software\Martin Prikryl
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\FSProtocol
  • HKEY_LOCAL_MACHINE\Software\Martin Prikryl
  • HKEY_LOCAL_MACHINE\Software\Martin Prikryl\WinSCP 2
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCP 2\Password
  • HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\Password
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCP 2\HostName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\HostName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCP 2\UserName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\UserName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCP 2\RemoteDirectory
  • HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\RemoteDirectory
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCP 2\FSProtocol
  • HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\FSProtocol
  • HKEY_LOCAL_MACHINE\Software\Martin Prikryl\WinSCPCapabilities
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\Password
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\HostName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UserName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCPCapabilities
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\FSProtocol
  • HKEY_LOCAL_MACHINE\Software\Martin Prikryl\WinSCPCapabilities\UrlAssociations
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations\Password
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations\HostName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations\UserName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCPCapabilities\UrlAssociations
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations\FSProtocol
  • HKEY_CURRENT_USER\Software\South River Technologies\WebDrive\Connections
  • HKEY_LOCAL_MACHINE\Software\South River Technologies\WebDrive\Connections
  • HKEY_CURRENT_USER\Software\Opera Software
  • HKEY_CLASSES_ROOT\Opera.HTML\shell\open\command
  • HKEY_CURRENT_USER\Software\AceBIT
  • HKEY_LOCAL_MACHINE\Software\AceBIT
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CB1F2C0F-8094-4AAC-BCF5-41A64E27F777}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9EA55529-E122-4757-BC79-E4825F80732C}
  • HKEY_CURRENT_USER\Software\Mozilla
  • HKEY_CURRENT_USER\Software\Mozilla\Firefox
  • HKEY_CURRENT_USER\Software\Mozilla\Firefox\PathToExe
  • HKEY_CURRENT_USER\Software\Mozilla\Firefox\Crash Reporter
  • HKEY_CURRENT_USER\Software\Mozilla\Firefox\Crash Reporter\PathToExe
  • HKEY_LOCAL_MACHINE\Software\Mozilla
  • HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Firefox\PathToExe
  • HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\TaskBarIDs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Firefox\TaskBarIDs\PathToExe
  • HKEY_LOCAL_MACHINE\Software\Mozilla\Mozilla Firefox
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox\PathToExe
  • HKEY_LOCAL_MACHINE\Software\Mozilla\Mozilla Firefox\10.0.9 (zh-CN)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox\10.0.9 (zh-CN)\PathToExe
  • HKEY_LOCAL_MACHINE\Software\Mozilla\Mozilla Firefox\10.0.9 (zh-CN)\Main
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox\10.0.9 (zh-CN)\Main\PathToExe
  • HKEY_LOCAL_MACHINE\Software\Mozilla\Mozilla Firefox\10.0.9 (zh-CN)\Uninstall
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox\10.0.9 (zh-CN)\Uninstall\PathToExe
  • HKEY_LOCAL_MACHINE\Software\Mozilla\Mozilla Firefox 10.0.9
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox 10.0.9\PathToExe
  • HKEY_LOCAL_MACHINE\Software\Mozilla\Mozilla Firefox 10.0.9\bin
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox 10.0.9\bin\PathToExe
  • HKEY_LOCAL_MACHINE\Software\Mozilla\Mozilla Firefox 10.0.9\extensions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox 10.0.9\extensions\PathToExe
  • HKEY_CURRENT_USER\Software\Mozilla\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\PathToExe
  • HKEY_CURRENT_USER\Software\LeechFTP
  • HKEY_CLASSES_ROOT\CLSID\{11C1D741-A95B-11d2-8A80-0080ADB32FF4}\InProcServer32
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2
  • HKEY_CURRENT_USER\Software\Adobe\Common
  • HKEY_CURRENT_USER\Software\ChromePlus
  • HKEY_CURRENT_USER\Software\FlashPeak\BlazeFtp\Settings
  • HKEY_CLASSES_ROOT\FTP++.Link\shell\open\command
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2\0\win32
  • HKEY_CURRENT_USER\SOFTWARE\Robo-FTP 3.7\FTPServers
  • HKEY_LOCAL_MACHINE\SOFTWARE\Robo-FTP 3.7\FTPServers
  • HKEY_CURRENT_USER\SOFTWARE\Robo-FTP 3.7\Scripts
  • HKEY_LOCAL_MACHINE\SOFTWARE\Robo-FTP 3.7\Scripts
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\#16
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\Ldap
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllOpenStoreProv
  • HKEY_USERS\S-1-5-21-2280033686-3172497658-3481507381-1000
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\MY\PhysicalStores
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\MY
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\ProfileImagePath
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\MY\
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\MY\Certificates
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\MY\CRLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\MY\CTLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\MY\Keys
  • HKEY_CURRENT_USER\Software\LinasFTP\Site Manager
  • HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions
  • HKEY_LOCAL_MACHINE\Software\SimonTatham\PuTTY\Sessions
  • HKEY_CURRENT_USER\Software\CoffeeCup Software
  • HKEY_LOCAL_MACHINE\Software\CoffeeCup Software
  • HKEY_CURRENT_USER\Software\MAS-Soft\FTPInfo\Setup
  • HKEY_CURRENT_USER\Software\Nico Mak Computing\WinZip\FTP
  • HKEY_LOCAL_MACHINE\Software\Nico Mak Computing\WinZip\FTP
  • HKEY_CURRENT_USER\Software\Nico Mak Computing\WinZip\mru\jobs
  • HKEY_LOCAL_MACHINE\Software\Nico Mak Computing\WinZip\mru\jobs
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-2280033686-3172497658-3481507381-1000\Installer\Products\0371FF472F1B88D429B65186AF6ED17B
  • HKEY_USERS\S-1-5-21-2280033686-3172497658-3481507381-1000\Software\Microsoft\Installer\Products\0371FF472F1B88D429B65186AF6ED17B
  • HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\0371FF472F1B88D429B65186AF6ED17B
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0371FF472F1B88D429B65186AF6ED17B\InstallProperties
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-2280033686-3172497658-3481507381-1000\Components\0371FF472F1B88D429B65186AF6ED17B
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0371FF472F1B88D429B65186AF6ED17B
  • HKEY_CURRENT_USER\Software\Microsoft\Windows Live Mail
  • HKEY_CURRENT_USER\Software\Microsoft\Windows Mail
  • HKEY_CURRENT_USER\Software\Microsoft\Windows Mail\Salt
  • HKEY_CURRENT_USER\Software\RimArts\B2\Settings
  • HKEY_LOCAL_MACHINE\Software\RimArts\B2\Settings
  • HKEY_CURRENT_USER\Software\Poco Systems Inc
  • HKEY_LOCAL_MACHINE\Software\Poco Systems Inc
  • HKEY_CURRENT_USER\Software\IncrediMail
  • HKEY_LOCAL_MACHINE\Software\IncrediMail
  • HKEY_CURRENT_USER\Software\RIT\The Bat!
  • HKEY_CURRENT_USER\Software\RIT\The Bat!\Users depot
  • HKEY_LOCAL_MACHINE\Software\RIT\The Bat!
  • HKEY_LOCAL_MACHINE\Software\RIT\The Bat!\Users depot
  • HKEY_CURRENT_USER\Software\Microsoft\Internet Account Manager\Accounts
  • HKEY_CURRENT_USER\Identities
  • HKEY_CURRENT_USER\Identities\{72D293AE-ED17-432E-B9E3-FFECDC742887}\Software\Microsoft\Internet Account Manager\Accounts
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Account Manager
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Account Manager\Outlook
  • HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Microsoft Outlook Internet Settings
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\01e2d2a1a92d174aa8b5412ce419ba86
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\0a0d020000000000c000000000000046
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\138361a86e20e74fbf7a8e2bb2bdb310
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\13dbb0c8aa05101a9bb000aa002fc45a
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\1a0cff0bdb906845904b16f8ee00ed9b
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\32ce67b97f2cb947836a4ab0935f189b
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\3517490d76624c419a828607e2a54604
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\4439bb378588b7448e02e789cb362fdd
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\84463fccd955ae42b0d6d14a012818bc
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\8503020000000000c000000000000046
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9207f3e0a3b11019908b08002b2a56c2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\NNTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\NNTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\NNTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Server URL
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTPMail User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTPMail Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\NNTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTPMail Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\NNTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\NNTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\NNTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\NNTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Server URL
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTPMail User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTPMail Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\NNTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTPMail Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\NNTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\NNTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\NNTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\NNTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Server URL
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTPMail User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTPMail Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\NNTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTPMail Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\NNTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\NNTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\NNTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\NNTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\Email
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTP Server URL
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTPMail User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTPMail Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\NNTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTPMail Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\NNTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\c02ebc5353d9cd11975200aa004ae40e
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\d3127a6f7d2f0d40b24bb214db7e6d9a
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\d6991d54b3b0c44e9e7af3a45601a388
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\ddb0922fc50b8d42be5a821ede840761
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\e2cb7f58ec1e2c408068247a3d1a5332
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\f86ed2903a4a11cfb57e524153480001
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\fe5e838f0bd6a8479fe8e7d4dbb2858b
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\NNTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\NNTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\NNTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\Email
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTP Server URL
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTPMail User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTPMail Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\NNTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTPMail Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\NNTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP Port
  • HKEY_CURRENT_USER\Software\WinRAR\Client Hash
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\0716_21_.exe
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a3-1bd9-11e5-9838-806e6f6e6963}\
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a3-1bd9-11e5-9838-806e6f6e6963}\Data
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a3-1bd9-11e5-9838-806e6f6e6963}\Generation
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a4-1bd9-11e5-9838-806e6f6e6963}\
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a4-1bd9-11e5-9838-806e6f6e6963}\Data
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a4-1bd9-11e5-9838-806e6f6e6963}\Generation
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000804
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\a
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot\Option
读取的注册表键
  • HKEY_CURRENT_USER\Software\Borland\Locales\C:\Users\test\AppData\Local\Temp\0716_21_.exe
  • HKEY_CURRENT_USER\Software\Borland\Locales\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Keyboard Layouts\E0200804\layout text
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Keyboard Layouts\E0210804\layout text
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player NPAPI\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player NPAPI\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Alipay security control_is1\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Alipay security plugin_is1\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 10.0.9 (x86 zh-CN)\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 10.0.9 (x86 zh-CN)\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Office14.PROPLUS\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Office14.PROPLUS\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinAce Archiver\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinAce Archiver\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinRAR archiver\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WinRAR archiver\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1b103cea-f037-4504-81de-956057b442c3}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1b103cea-f037-4504-81de-956057b442c3}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F32180121F0}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F32180121F0}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6c6356fe-cbfa-4944-9bed-a9e99f45cb7a}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6c6356fe-cbfa-4944-9bed-a9e99f45cb7a}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0011-0000-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0011-0000-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0015-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0015-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0016-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0016-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0018-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0018-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0019-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0019-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001A-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001A-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001B-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001B-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0409-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0409-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-001F-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0028-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0028-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-002C-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-002C-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0044-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-0044-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-006E-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-006E-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00A1-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00A1-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00BA-0804-0000-0000000FF1CE}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-00BA-0804-0000-0000000FF1CE}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9bd48a22-fe5a-457c-8f10-da6c2be89eee}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9bd48a22-fe5a-457c-8f10-da6c2be89eee}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-2052-7B44-AB0000000001}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-2052-7B44-AB0000000001}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D93BD08F-2C69-4FD6-8538-09B6597ADA8C}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D93BD08F-2C69-4FD6-8538-09B6597ADA8C}\DisplayName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E2B51919-207A-43EB-AE78-733F9C6797C2}\UninstallString
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E2B51919-207A-43EB-AE78-733F9C6797C2}\DisplayName
  • HKEY_CURRENT_USER\Software\WinRAR\HWID
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Local\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Options\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\Remote\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks\ShortCuts\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\CDCache\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\History\LocalTarget\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\HistoryParams\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\LoginDialog\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory2\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\LifetimeCounters\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\PeriodCounters\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Usage\Values\FSProtocol
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\Password
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\HostName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\UserName
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\RemoteDirectory
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\PortNumber
  • HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\SshHostKeys\FSProtocol
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCP 2\Password
  • HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\Password
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCP 2\HostName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\HostName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCP 2\UserName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\UserName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCP 2\RemoteDirectory
  • HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\RemoteDirectory
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCP 2\FSProtocol
  • HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\FSProtocol
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\Password
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\HostName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UserName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\RemoteDirectory
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\FSProtocol
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations\Password
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations\HostName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations\UserName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations\RemoteDirectory
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Martin Prikryl\WinSCPCapabilities\UrlAssociations\FSProtocol
  • HKEY_CURRENT_USER\Software\Mozilla\Firefox\PathToExe
  • HKEY_CURRENT_USER\Software\Mozilla\Firefox\Crash Reporter\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Firefox\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Firefox\TaskBarIDs\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox\10.0.9 (zh-CN)\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox\10.0.9 (zh-CN)\Main\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox\10.0.9 (zh-CN)\Uninstall\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox 10.0.9\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox 10.0.9\bin\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox 10.0.9\extensions\PathToExe
  • HKEY_CURRENT_USER\Software\Mozilla\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mozilla\PathToExe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\PathToExe
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\ProfileImagePath
  • HKEY_CURRENT_USER\Software\Microsoft\Windows Mail\Salt
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Account Manager\Outlook
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\NNTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\NNTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\NNTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Server URL
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTPMail User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTPMail Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\NNTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTPMail Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\NNTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\NNTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\NNTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\NNTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Server URL
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTPMail User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTPMail Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\NNTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTPMail Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\NNTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\NNTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\NNTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\NNTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Server URL
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTPMail User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTPMail Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\NNTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTPMail Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\NNTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\NNTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\NNTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\NNTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\Email
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTP Server URL
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTPMail User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTPMail Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\NNTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTPMail Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\NNTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\HTTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\POP3 Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\SMTP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004\IMAP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\NNTP Email Address
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\NNTP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\NNTP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\Email
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTP Server URL
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTPMail User Name
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTPMail Server
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP User
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\NNTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTPMail Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP Password2
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\NNTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\HTTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP Password
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\POP3 Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\SMTP Port
  • HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\{D9734F19-8CFB-411D-BC59-833E334FCB5E}\Calendar Summary\IMAP Port
  • HKEY_CURRENT_USER\Software\WinRAR\Client Hash
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a3-1bd9-11e5-9838-806e6f6e6963}\Data
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a3-1bd9-11e5-9838-806e6f6e6963}\Generation
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a4-1bd9-11e5-9838-806e6f6e6963}\Data
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a4-1bd9-11e5-9838-806e6f6e6963}\Generation
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000804
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\a
修改的注册表键
  • HKEY_CURRENT_USER\Software\WinRAR\HWID
删除的注册表键 无信息
API解析
  • kernel32.dll.GetLongPathNameA
  • kernel32.dll.GetDiskFreeSpaceExA
  • oleaut32.dll.VariantChangeTypeEx
  • oleaut32.dll.VarNeg
  • oleaut32.dll.VarNot
  • oleaut32.dll.VarAdd
  • oleaut32.dll.VarSub
  • oleaut32.dll.VarMul
  • oleaut32.dll.VarDiv
  • oleaut32.dll.VarIdiv
  • oleaut32.dll.VarMod
  • oleaut32.dll.VarAnd
  • oleaut32.dll.VarOr
  • oleaut32.dll.VarXor
  • oleaut32.dll.VarCmp
  • oleaut32.dll.VarI4FromStr
  • oleaut32.dll.VarR4FromStr
  • oleaut32.dll.VarR8FromStr
  • oleaut32.dll.VarDateFromStr
  • oleaut32.dll.VarCyFromStr
  • oleaut32.dll.VarBoolFromStr
  • oleaut32.dll.VarBstrFromCy
  • oleaut32.dll.VarBstrFromDate
  • oleaut32.dll.VarBstrFromBool
  • user32.dll.WINNLSEnableIME
  • imm32.dll.ImmGetContext
  • imm32.dll.ImmReleaseContext
  • imm32.dll.ImmGetConversionStatus
  • imm32.dll.ImmSetConversionStatus
  • imm32.dll.ImmSetOpenStatus
  • imm32.dll.ImmSetCompositionWindow
  • imm32.dll.ImmSetCompositionFontA
  • imm32.dll.ImmGetCompositionStringA
  • imm32.dll.ImmIsIME
  • imm32.dll.ImmNotifyIME
  • user32.dll.GetMonitorInfoA
  • user32.dll.GetSystemMetrics
  • user32.dll.EnumDisplayMonitors
  • kernel32.dll.SortGetHandle
  • kernel32.dll.SortCloseHandle
  • user32.dll.AnimateWindow
  • comctl32.dll.InitializeFlatSB
  • comctl32.dll.UninitializeFlatSB
  • comctl32.dll.FlatSB_GetScrollProp
  • comctl32.dll.FlatSB_SetScrollProp
  • comctl32.dll.FlatSB_EnableScrollBar
  • comctl32.dll.FlatSB_ShowScrollBar
  • comctl32.dll.FlatSB_GetScrollRange
  • comctl32.dll.FlatSB_GetScrollInfo
  • comctl32.dll.FlatSB_GetScrollPos
  • comctl32.dll.FlatSB_SetScrollPos
  • comctl32.dll.FlatSB_SetScrollInfo
  • comctl32.dll.FlatSB_SetScrollRange
  • user32.dll.SetLayeredWindowAttributes
  • kernel32.dll.VirtualProtect
  • cryptbase.dll.SystemFunction036
  • ole32.dll.StgOpenStorage
  • crypt32.dll.CryptUnprotectData
  • crypt32.dll.CertOpenSystemStoreA
  • crypt32.dll.CertEnumCertificatesInStore
  • crypt32.dll.CertCloseStore
  • crypt32.dll.CryptAcquireCertificatePrivateKey
  • advapi32.dll.AllocateAndInitializeSid
  • advapi32.dll.CheckTokenMembership
  • advapi32.dll.FreeSid
  • advapi32.dll.CredEnumerateA
  • advapi32.dll.CredFree
  • advapi32.dll.CryptGetUserKey
  • advapi32.dll.CryptExportKey
  • advapi32.dll.CryptDestroyKey
  • advapi32.dll.CryptReleaseContext
  • advapi32.dll.RevertToSelf
  • advapi32.dll.OpenProcessToken
  • advapi32.dll.ImpersonateLoggedOnUser
  • advapi32.dll.GetTokenInformation
  • advapi32.dll.ConvertSidToStringSidA
  • advapi32.dll.LogonUserA
  • advapi32.dll.LookupPrivilegeValueA
  • advapi32.dll.AdjustTokenPrivileges
  • shell32.dll.SHGetFolderPathA
  • netapi32.dll.NetApiBufferFree
  • netapi32.dll.NetUserEnum
  • kernel32.dll.WTSGetActiveConsoleSessionId
  • kernel32.dll.ProcessIdToSessionId
  • msi.dll.MsiGetComponentPathA
  • pstorec.dll.PStoreCreateInstance
  • kernel32.dll.GetNativeSystemInfo
  • kernel32.dll.IsWow64Process
  • mlang.dll.#112
  • wininet.dll.FindFirstUrlCacheEntryA
  • kernel32.dll.SetFileInformationByHandle
  • shell32.dll.SHGetFolderPathW
  • userenv.dll.GetUserProfileDirectoryW
  • kernel32.dll.FlsGetValue
  • sechost.dll.ConvertSidToStringSidW
  • samlib.dll.SamConnect
  • rpcrt4.dll.NdrClientCall2
  • rpcrt4.dll.RpcStringBindingComposeW
  • rpcrt4.dll.RpcBindingFromStringBindingW
  • rpcrt4.dll.RpcStringFreeW
  • rpcrt4.dll.RpcBindingFree
  • samlib.dll.SamGetCompatibilityMode
  • samlib.dll.SamOpenDomain
  • samlib.dll.SamEnumerateDomainsInSamServer
  • samlib.dll.SamLookupDomainInSamServer
  • samlib.dll.SamFreeMemory
  • samlib.dll.SamEnumerateUsersInDomain
  • samlib.dll.SamOpenUser
  • samlib.dll.SamQueryInformationUser
  • samlib.dll.SamQuerySecurityObject
  • samlib.dll.SamGetGroupsForUser
  • samlib.dll.SamRidToSid
  • samlib.dll.SamGetAliasMembership
  • samlib.dll.SamCloseHandle
  • sspicli.dll.LogonUserExExW
  • shell32.dll.ShellExecuteA
  • setupapi.dll.CM_Get_Device_Interface_List_Size_ExW
  • setupapi.dll.CM_Get_Device_Interface_List_ExW
  • advapi32.dll.UnregisterTraceGuids
  • kernel32.dll.FlsFree
  • advapi32.dll.EventUnregister
  • comctl32.dll.#321
  • kernel32.dll.SetThreadUILanguage
  • kernel32.dll.CopyFileExW
  • kernel32.dll.IsDebuggerPresent
  • kernel32.dll.SetConsoleInputExeNameW
  • advapi32.dll.SaferIdentifyLevel
  • advapi32.dll.SaferComputeTokenFromLevel
  • advapi32.dll.SaferCloseLevel