General Info

File name

DraftableCompare.exe

Full analysis
https://app.any.run/tasks/81b9bdf6-306f-4a2a-bc47-ff4ca984e758
Verdict
Malicious activity
Analysis date
5/15/2019, 01:28:39
OS:
Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:

MIME:
application/x-dosexec
File info:
PE32 executable (GUI) Intel 80386, for MS Windows
MD5

4dd1bbdc08b9c120af5cc34a592cf917

SHA1

f575f63888977250399f9513e82d8c11288b7223

SHA256

e1283a9491e435d6acfe54871e6be8b036b713a14e2a1c244d908f0b6e4ddb12

SSDEEP

12288:bDPdsil5fCMggBIiMVO26kk+FGzeMb01JQntLOCVkoSrUf:bD1s2ts96kTMemVuc

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distored by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Software environment set and analysis options

Launch configuration

Task duration
60 seconds
Additional time used
none
Fakenet option
off
Heavy Evaision option
off
MITM proxy
off
Route via Tor
off
Network geolocation
off
Privacy
Public submission
Autoconfirmation of UAC
on

Software preset

  • Internet Explorer 8.0.7601.17514
  • Adobe Acrobat Reader DC MUI (15.023.20070)
  • Adobe Flash Player 26 ActiveX (26.0.0.131)
  • Adobe Flash Player 26 NPAPI (26.0.0.131)
  • Adobe Flash Player 26 PPAPI (26.0.0.131)
  • Adobe Refresh Manager (1.8.0)
  • CCleaner (5.35)
  • FileZilla Client 3.36.0 (3.36.0)
  • Google Chrome (73.0.3683.75)
  • Google Update Helper (1.3.33.23)
  • Java 8 Update 92 (8.0.920.14)
  • Java Auto Updater (2.8.92.14)
  • Microsoft .NET Framework 4.6.1 (4.6.01055)
  • Microsoft Office Access MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Access Setup Metadata MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Excel MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office OneNote MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Outlook MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office PowerPoint MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Professional 2010 (14.0.6029.1000)
  • Microsoft Office Proof (English) 2010 (14.0.6029.1000)
  • Microsoft Office Proof (French) 2010 (14.0.6029.1000)
  • Microsoft Office Proof (Spanish) 2010 (14.0.6029.1000)
  • Microsoft Office Proofing (English) 2010 (14.0.6029.1000)
  • Microsoft Office Publisher MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Shared MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Shared Setup Metadata MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Office Single Image 2010 (14.0.6029.1000)
  • Microsoft Office Word MUI (English) 2010 (14.0.6029.1000)
  • Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (9.0.30729.6161)
  • Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (10.0.40219)
  • Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (12.0.30501.0)
  • Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (12.0.21005)
  • Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (12.0.21005)
  • Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (14.15.26706.0)
  • Microsoft Visual C++ 2017 x86 Additional Runtime - 14.15.26706 (14.15.26706)
  • Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.15.26706 (14.15.26706)
  • Mozilla Firefox 65.0.2 (x86 en-US) (65.0.2)
  • Notepad++ (32-bit x86) (7.5.1)
  • Opera 12.15 (12.15.1748)
  • Skype version 8.29 (8.29)
  • VLC media player (2.2.6)
  • WinRAR 5.60 (32-bit) (5.60.0)

Hotfixes

  • Client LanguagePack Package
  • Client Refresh LanguagePack Package
  • CodecPack Basic Package
  • Foundation Package
  • IE Troubleshooters Package
  • InternetExplorer Optional Package
  • KB2534111
  • KB2999226
  • KB976902
  • LocalPack AU Package
  • LocalPack CA Package
  • LocalPack GB Package
  • LocalPack US Package
  • LocalPack ZA Package
  • ProfessionalEdition
  • UltimateEdition

Behavior activities

MALICIOUS SUSPICIOUS INFO
Loads dropped or rewritten executable
  • Draftable.CompareTool.exe (PID: 3420)
  • Draftable.CompareTool.exe (PID: 2380)
  • Draftable.CompareTool.exe (PID: 2776)
  • Draftable.CompareTool.exe (PID: 2576)
  • dfsvc.exe (PID: 3644)
Application was dropped or rewritten from another process
  • Draftable.CompareTool.exe (PID: 3420)
  • Draftable.CompareTool.exe (PID: 2576)
  • Draftable.CompareTool.exe (PID: 2776)
  • Draftable.CompareTool.exe (PID: 2380)
Changes settings of System certificates
  • dfsvc.exe (PID: 3644)
Reads Environment values
  • Draftable.CompareTool.exe (PID: 2576)
  • dfsvc.exe (PID: 3644)
Reads Internet Cache Settings
  • Draftable.CompareTool.exe (PID: 2576)
  • dfsvc.exe (PID: 3644)
Reads internet explorer settings
  • Draftable.CompareTool.exe (PID: 2576)
  • dfsvc.exe (PID: 3644)
Creates a software uninstall entry
  • dfsvc.exe (PID: 3644)
Creates files in the user directory
  • dfsvc.exe (PID: 3644)
Executable content was dropped or overwritten
  • dfsvc.exe (PID: 3644)
Reads settings of System Certificates
  • Draftable.CompareTool.exe (PID: 2576)

Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report

Static information

TRiD
.exe
|   Win32 Executable (generic) (52.9%)
.exe
|   Generic Win/DOS Executable (23.5%)
.exe
|   DOS Executable Generic (23.5%)
EXIF
EXE
MachineType:
Intel 386 or later, and compatibles
TimeStamp:
2015:07:07 08:26:33+02:00
PEType:
PE32
LinkerVersion:
14
CodeSize:
364544
InitializedDataSize:
481792
UninitializedDataSize:
null
EntryPoint:
0x330c2
OSVersion:
5.1
ImageVersion:
10
SubsystemVersion:
5.1
Subsystem:
Windows GUI
FileVersionNumber:
14.0.23107.0
ProductVersionNumber:
14.0.23107.0
FileFlagsMask:
0x003f
FileFlags:
(none)
FileOS:
Win32
ObjectFileType:
Executable application
FileSubtype:
null
LanguageCode:
English (U.S.)
CharacterSet:
Unicode
CompanyName:
null
FileDescription:
Setup
FileVersion:
14.0.23107.0 built by: D14REL
InternalName:
setup.exe
LegalCopyright:
© Microsoft Corporation. All rights reserved.
OriginalFileName:
setup.exe
ProductName:
null
ProductVersion:
14.0.23107.0
Summary
Architecture:
IMAGE_FILE_MACHINE_I386
Subsystem:
IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date:
07-Jul-2015 06:26:33
Detected languages
English - United States
Debug artifacts
setup.pdb
CompanyName:
null
FileDescription:
Setup
FileVersion:
14.0.23107.0 built by: D14REL
InternalName:
setup.exe
LegalCopyright:
© Microsoft Corporation. All rights reserved.
OriginalFilename:
setup.exe
ProductName:
null
ProductVersion:
14.0.23107.0
DOS Header
Magic number:
MZ
Bytes on last page of file:
0x0090
Pages in file:
0x0003
Relocations:
0x0000
Size of header:
0x0004
Min extra paragraphs:
0x0000
Max extra paragraphs:
0xFFFF
Initial SS value:
0x0000
Initial SP value:
0x00B8
Checksum:
0x0000
Initial IP value:
0x0000
Initial CS value:
0x0000
Overlay number:
0x0000
OEM identifier:
0x0000
OEM information:
0x0000
Address of NE header:
0x00000118
PE Headers
Signature:
PE
Machine:
IMAGE_FILE_MACHINE_I386
Number of sections:
5
Time date stamp:
07-Jul-2015 06:26:33
Pointer to Symbol Table:
0x00000000
Number of symbols:
0
Size of Optional Header:
0x00E0
Characteristics
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Name Virtual Address Virtual Size Raw Size Charateristics Entropy
.text 0x00001000 0x00058E58 0x00059000 IMAGE_SCN_CNT_CODE,IMAGE_SCN_MEM_EXECUTE,IMAGE_SCN_MEM_READ 6.39733
.data 0x0005A000 0x00003D2C 0x00001800 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_READ,IMAGE_SCN_MEM_WRITE 3.69795
.idata 0x0005E000 0x0000152A 0x00001600 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_READ 5.45654
.rsrc 0x00060000 0x0006EF64 0x0006F000 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_READ 4.27334
.reloc 0x000CF000 0x00003B4C 0x00003C00 IMAGE_SCN_CNT_INITIALIZED_DATA,IMAGE_SCN_MEM_DISCARDABLE,IMAGE_SCN_MEM_READ 6.60243
Resources
1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

107

108

119

120

1000

1001

1002

1003

1004

1005

1006

1008

1009

1010

1011

1012

1013

1016

1017

1018

1019

1020

1021

1023

1025

1026

1028

1029

1030

1031

1032

1033

1034

1035

1036

1037

1038

1039

1041

1042

1043

1044

1045

1046

1047

1048

1049

1050

1051

1052

1053

1054

1055

1057

1058

1101

1200

1201

1202

1203

1204

1205

1206

1207

1208

1209

1210

1211

1212

1213

1400

1401

1402

1405

1416

1420

1423

1424

1425

1426

1427

1429

1430

1432

1433

1435

1436

1437

1438

1442

1443

1444

1446

1447

1448

1449

BASEURL

HOMESITE

SUPPORTURL

SETUPCFG

CULTURE

COUNT

EULA0

EULA1

CODEPAGE

SETUPRES

Imports
    KERNEL32.dll

    GDI32.dll

    ole32.dll

    Secur32.dll

    SHELL32.dll

    USER32.dll

    CRYPT32.dll

    WININET.dll

    msi.dll

    ADVAPI32.dll (delay-loaded)

Exports

Screenshots

Processes

Total processes
41
Monitored processes
9
Malicious processes
9
Suspicious processes
0

Behavior graph

+
start drop and start draftablecompare.exe dfsvc.exe draftable.comparetool.exe rundll32.exe no specs draftable.comparetool.exe rundll32.exe no specs draftable.comparetool.exe rundll32.exe no specs draftable.comparetool.exe
Specs description
Program did not start
Integrity level elevation
Task сontains an error or was rebooted
Process has crashed
Task contains several apps running
Executable file was dropped
Debug information is available
Process was injected
Network attacks were detected
Application downloaded the executable file
Actions similar to stealing personal data
Behavior similar to exploiting the vulnerability
Inspected object has sucpicious PE structure
File is detected by antivirus software
CPU overrun
RAM overrun
Process starts the services
Process was added to the startup
Behavior similar to spam
Low-level access to the HDD
Probably Tor was used
System was rebooted
Connects to the network
Known threat

Process information

Click at the process to see the details.

PID
2532
CMD
"C:\Users\admin\AppData\Local\Temp\DraftableCompare.exe"
Path
C:\Users\admin\AppData\Local\Temp\DraftableCompare.exe
Indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
Description
Setup
Version
14.0.23107.0 built by: D14REL
Modules
Image
c:\users\admin\appdata\local\temp\draftablecompare.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\ole32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\wininet.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\msi.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\riched20.dll
c:\windows\system32\cryptbase.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\version.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\profapi.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\rasapi32.dll
c:\windows\system32\rasman.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\sensapi.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\normaliz.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\userenv.dll
c:\windows\system32\wintrust.dll
c:\windows\system32\schannel.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\wship6.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\credssp.dll
c:\windows\system32\ncrypt.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\gpapi.dll
c:\windows\system32\mscoree.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
c:\windows\microsoft.net\framework\v2.0.50727\mscorwks.dll
c:\windows\system32\sxs.dll
c:\windows\system32\dfshim.dll
c:\windows\microsoft.net\framework\v4.0.30319\clr.dll
c:\windows\microsoft.net\framework\v4.0.30319\dfdll.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\apphelp.dll
c:\windows\microsoft.net\framework\v4.0.30319\dfsvc.exe

PID
3644
CMD
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe"
Path
C:\Windows\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe
Indicators
Parent process
DraftableCompare.exe
User
admin
Integrity Level
MEDIUM
Version:
Company
Microsoft Corporation
Description
ClickOnce
Version
4.6.1055.0 built by: NETFXREL2
Modules
Image
c:\windows\microsoft.net\framework\v4.0.30319\dfsvc.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\version.dll
c:\windows\microsoft.net\framework\v4.0.30319\clr.dll
c:\windows\system32\msvcr120_clr0400.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\mscorlib\225759bb87c854c0fff27b1d84858c21\mscorlib.ni.dll
c:\windows\system32\ole32.dll
c:\windows\system32\cryptbase.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\dfsvc\80701deef4188b417e2cd7c6417e7c7e\dfsvc.ni.exe
c:\windows\assembly\nativeimages_v4.0.30319_32\system\52cca48930e580e3189eac47158c20be\system.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.core\55560c2014611e9119f99923c9ebdeef\system.core.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.deployment\b3731330e134999c1943e5876497d295\system.deployment.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.drawing\646b4b01cb29986f8e076aa65c9e9753\system.drawing.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.windows.forms\5aac750b35b27770dccb1a43f83cced7\system.windows.forms.ni.dll
c:\windows\microsoft.net\framework\v4.0.30319\nlssorting.dll
c:\windows\microsoft.net\framework\v4.0.30319\dfdll.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\windows\system32\sxs.dll
c:\windows\system32\shell32.dll
c:\windows\system32\uxtheme.dll
c:\windows\microsoft.net\assembly\gac_msil\system.windows.forms\v4.0_4.0.0.0__b77a5c561934e089\system.windows.forms.dll
c:\windows\system32\dfshim.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.configuration\46957030830964165644b52b0696c5d9\system.configuration.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.xml\d86b080a37c60a872c82b912a2a63dac\system.xml.ni.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\rasapi32.dll
c:\windows\system32\rasman.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\wship6.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\webio.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\credssp.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\dhcpcsvc6.dll
c:\windows\system32\dhcpcsvc.dll
c:\windows\system32\windowscodecs.dll
c:\windows\system32\normaliz.dll
c:\windows\system32\profapi.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\sensapi.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\secur32.dll
c:\windows\system32\schannel.dll
c:\windows\system32\ncrypt.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\userenv.dll
c:\windows\system32\gpapi.dll
c:\windows\microsoft.net\framework\v4.0.30319\clrjit.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.security\11689060f7aa189e220cf9df9a97254e\system.security.ni.dll
c:\windows\system32\cryptnet.dll
c:\windows\system32\certcli.dll
c:\windows\system32\atl.dll
c:\windows\system32\dsrole.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\windowsbase\32512bd09e2231f6eebb15fc17e3ad79\windowsbase.ni.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.pdfium.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\nunit.framework.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\system.windows.interactivity.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\zh-hant\system.windows.interactivity.resources.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.diff.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.pdf.ui.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.updater.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\es\system.windows.interactivity.resources.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.collections.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\postsharp.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.settings.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.licensing.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.sais.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.annotations.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\servicestack.text.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\en\system.windows.interactivity.resources.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\zh-hans\system.windows.interactivity.resources.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\de\system.windows.interactivity.resources.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\ko\system.windows.interactivity.resources.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.pdfconversion.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\ru\system.windows.interactivity.resources.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.cdiff.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.comparetool.exe
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\fr\system.windows.interactivity.resources.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.com.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\bouncycastle.crypto.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.utils.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.prelude.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.comparerunner.exe
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\ja\system.windows.interactivity.resources.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.office.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\it\system.windows.interactivity.resources.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.pdf.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\hardcodet.wpf.taskbarnotification.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\fsharp.core.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.aspects.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\log4net.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\icsharpcode.sharpziplib.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.exceptions.dll
c:\users\admin\appdata\local\temp\deployment\hxvyh9j2.rng\404qqpq4.7gl\draftable.types.dll
c:\windows\system32\apphelp.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.comparetool.exe
c:\windows\microsoft.net\assembly\gac_msil\system.deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\system.deployment.dll

PID
2576
CMD
"C:\Users\admin\AppData\Local\Apps\2.0\EV07YR8O.MBJ\BT4PTWXJ.COZ\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\Draftable.CompareTool.exe"
Path
C:\Users\admin\AppData\Local\Apps\2.0\EV07YR8O.MBJ\BT4PTWXJ.COZ\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\Draftable.CompareTool.exe
Indicators
Parent process
dfsvc.exe
User
admin
Integrity Level
MEDIUM
Version:
Company
Draftable
Description
Draftable.CompareTool
Version
1.1.3.2
Modules
Image
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.comparetool.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\version.dll
c:\windows\microsoft.net\framework\v4.0.30319\clr.dll
c:\windows\system32\msvcr120_clr0400.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\mscorlib\225759bb87c854c0fff27b1d84858c21\mscorlib.ni.dll
c:\windows\system32\ole32.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\dfshim.dll
c:\windows\system32\shell32.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\profapi.dll
c:\windows\microsoft.net\framework\v4.0.30319\nlssorting.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system\52cca48930e580e3189eac47158c20be\system.ni.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\log4net.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.core\55560c2014611e9119f99923c9ebdeef\system.core.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\windowsbase\32512bd09e2231f6eebb15fc17e3ad79\windowsbase.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\presentationcore\416ba33cb980d07643e82c4c45bd5786\presentationcore.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\presentatio5ae0f00f#\da36abbea6ef456f432434d4d8d835c1\presentationframework.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.xaml\6d09f865a22e2f903b74476769e1b76a\system.xaml.ni.dll
c:\windows\system32\dwrite.dll
c:\windows\microsoft.net\framework\v4.0.30319\wpf\wpfgfx_v0400.dll
c:\windows\microsoft.net\framework\v4.0.30319\wpf\presentationnative_v0400.dll
c:\windows\microsoft.net\framework\v4.0.30319\clrjit.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.licensing.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.drawing\646b4b01cb29986f8e076aa65c9e9753\system.drawing.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.configuration\46957030830964165644b52b0696c5d9\system.configuration.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.xml\d86b080a37c60a872c82b912a2a63dac\system.xml.ni.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\windowscodecs.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.exceptions.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.utils.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.settings.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.updater.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.comparerunner.exe
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\hardcodet.wpf.taskbarnotification.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\microsoft.v9921e851#\7ca6a7b9413844e82108a9d62f88a2d9\microsoft.visualbasic.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.management\4dfa27fdd6a4cce26f99585e1c744f9b\system.management.ni.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\servicestack.text.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.deployment\b3731330e134999c1943e5876497d295\system.deployment.ni.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\postsharp.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.aspects.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.annotations.dll
c:\windows\system32\powrprof.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\devobj.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\winsta.dll
c:\windows\system32\dwmapi.dll
c:\windows\system32\d3d9.dll
c:\windows\system32\d3d8thk.dll
c:\windows\system32\vga.dll
c:\windows\system32\uxtheme.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\presentatiod51afaa5#\01bed42723486eb478a5b3e2557173db\presentationframework.classic.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\presentatio49d6fefe#\33d15f16d20849f7c46d19b7bc7f4273\presentationframework-systemxml.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\presentatio84a6349c#\f0a755350257889ec7e0559c4dbfc30a\presentationframework-systemcore.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.windows.forms\5aac750b35b27770dccb1a43f83cced7\system.windows.forms.ni.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\rasapi32.dll
c:\windows\system32\rasman.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\nsi.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\wship6.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\webio.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\credssp.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winnsi.dll
c:\windows\system32\dhcpcsvc6.dll
c:\windows\system32\dhcpcsvc.dll
c:\windows\system32\normaliz.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\sensapi.dll
c:\windows\system32\nlaapi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\fwpuclnt.dll
c:\windows\system32\secur32.dll
c:\windows\system32\schannel.dll
c:\windows\system32\ncrypt.dll
c:\windows\system32\bcrypt.dll
c:\windows\system32\bcryptprimitives.dll
c:\windows\system32\userenv.dll
c:\windows\system32\gpapi.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.security\11689060f7aa189e220cf9df9a97254e\system.security.ni.dll
c:\windows\microsoft.net\assembly\gac_msil\system.deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\system.deployment.dll
c:\windows\microsoft.net\framework\v4.0.30319\dfdll.dll

PID
2008
CMD
"rundll32.exe" dfshim.dll,ShOpenVerbShortcut C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Draftable Pty Ltd\Draftable Suite\Draftable Compare.appref-ms|
Path
C:\Windows\system32\rundll32.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
Microsoft Corporation
Description
Windows host process (Rundll32)
Version
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\windows\system32\rundll32.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\apphelp.dll
c:\windows\apppatch\aclayers.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\userenv.dll
c:\windows\system32\profapi.dll
c:\windows\system32\winspool.drv
c:\windows\system32\mpr.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\dfshim.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\version.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
c:\windows\microsoft.net\framework\v4.0.30319\clr.dll
c:\windows\microsoft.net\framework\v4.0.30319\dfdll.dll
c:\windows\system32\msvcr120_clr0400.dll

PID
3420
CMD
"C:\Users\admin\AppData\Local\Apps\2.0\EV07YR8O.MBJ\BT4PTWXJ.COZ\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\Draftable.CompareTool.exe"
Path
C:\Users\admin\AppData\Local\Apps\2.0\EV07YR8O.MBJ\BT4PTWXJ.COZ\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\Draftable.CompareTool.exe
Indicators
Parent process
rundll32.exe
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
Draftable
Description
Draftable.CompareTool
Version
1.1.3.2
Modules
Image
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.comparetool.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\version.dll
c:\windows\microsoft.net\framework\v4.0.30319\clr.dll
c:\windows\system32\msvcr120_clr0400.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\mscorlib\225759bb87c854c0fff27b1d84858c21\mscorlib.ni.dll
c:\windows\system32\ole32.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\dfshim.dll
c:\windows\system32\shell32.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\profapi.dll
c:\windows\microsoft.net\framework\v4.0.30319\nlssorting.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system\52cca48930e580e3189eac47158c20be\system.ni.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\log4net.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.core\55560c2014611e9119f99923c9ebdeef\system.core.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\windowsbase\32512bd09e2231f6eebb15fc17e3ad79\windowsbase.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\presentationcore\416ba33cb980d07643e82c4c45bd5786\presentationcore.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\presentatio5ae0f00f#\da36abbea6ef456f432434d4d8d835c1\presentationframework.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.xaml\6d09f865a22e2f903b74476769e1b76a\system.xaml.ni.dll
c:\windows\system32\dwrite.dll
c:\windows\microsoft.net\framework\v4.0.30319\wpf\wpfgfx_v0400.dll
c:\windows\microsoft.net\framework\v4.0.30319\wpf\presentationnative_v0400.dll
c:\windows\microsoft.net\framework\v4.0.30319\clrjit.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.licensing.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.drawing\646b4b01cb29986f8e076aa65c9e9753\system.drawing.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.configuration\46957030830964165644b52b0696c5d9\system.configuration.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.xml\d86b080a37c60a872c82b912a2a63dac\system.xml.ni.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\windowscodecs.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.exceptions.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.utils.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.settings.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.updater.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.comparerunner.exe
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\hardcodet.wpf.taskbarnotification.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\microsoft.v9921e851#\7ca6a7b9413844e82108a9d62f88a2d9\microsoft.visualbasic.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.management\4dfa27fdd6a4cce26f99585e1c744f9b\system.management.ni.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\servicestack.text.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.windows.forms\5aac750b35b27770dccb1a43f83cced7\system.windows.forms.ni.dll

PID
2884
CMD
"rundll32.exe" dfshim.dll,ShOpenVerbShortcut C:\Users\admin\Desktop\Draftable Compare.appref-ms|
Path
C:\Windows\system32\rundll32.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
Microsoft Corporation
Description
Windows host process (Rundll32)
Version
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\windows\system32\rundll32.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\apphelp.dll
c:\windows\apppatch\aclayers.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\userenv.dll
c:\windows\system32\profapi.dll
c:\windows\system32\winspool.drv
c:\windows\system32\mpr.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\dfshim.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\version.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
c:\windows\microsoft.net\framework\v4.0.30319\clr.dll
c:\windows\microsoft.net\framework\v4.0.30319\dfdll.dll
c:\windows\system32\msvcr120_clr0400.dll

PID
2380
CMD
"C:\Users\admin\AppData\Local\Apps\2.0\EV07YR8O.MBJ\BT4PTWXJ.COZ\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\Draftable.CompareTool.exe"
Path
C:\Users\admin\AppData\Local\Apps\2.0\EV07YR8O.MBJ\BT4PTWXJ.COZ\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\Draftable.CompareTool.exe
Indicators
Parent process
rundll32.exe
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
Draftable
Description
Draftable.CompareTool
Version
1.1.3.2
Modules
Image
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.comparetool.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\version.dll
c:\windows\microsoft.net\framework\v4.0.30319\clr.dll
c:\windows\system32\msvcr120_clr0400.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\mscorlib\225759bb87c854c0fff27b1d84858c21\mscorlib.ni.dll
c:\windows\system32\ole32.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\dfshim.dll
c:\windows\system32\shell32.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\profapi.dll
c:\windows\microsoft.net\framework\v4.0.30319\nlssorting.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system\52cca48930e580e3189eac47158c20be\system.ni.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\log4net.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.core\55560c2014611e9119f99923c9ebdeef\system.core.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\windowsbase\32512bd09e2231f6eebb15fc17e3ad79\windowsbase.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\presentationcore\416ba33cb980d07643e82c4c45bd5786\presentationcore.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\presentatio5ae0f00f#\da36abbea6ef456f432434d4d8d835c1\presentationframework.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.xaml\6d09f865a22e2f903b74476769e1b76a\system.xaml.ni.dll
c:\windows\system32\dwrite.dll
c:\windows\microsoft.net\framework\v4.0.30319\wpf\wpfgfx_v0400.dll
c:\windows\microsoft.net\framework\v4.0.30319\wpf\presentationnative_v0400.dll
c:\windows\microsoft.net\framework\v4.0.30319\clrjit.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.licensing.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.drawing\646b4b01cb29986f8e076aa65c9e9753\system.drawing.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.configuration\46957030830964165644b52b0696c5d9\system.configuration.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.xml\d86b080a37c60a872c82b912a2a63dac\system.xml.ni.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\windowscodecs.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.exceptions.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.utils.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.settings.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.updater.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.comparerunner.exe
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\hardcodet.wpf.taskbarnotification.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\microsoft.v9921e851#\7ca6a7b9413844e82108a9d62f88a2d9\microsoft.visualbasic.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.management\4dfa27fdd6a4cce26f99585e1c744f9b\system.management.ni.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\servicestack.text.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.windows.forms\5aac750b35b27770dccb1a43f83cced7\system.windows.forms.ni.dll

PID
2664
CMD
"rundll32.exe" dfshim.dll,ShOpenVerbShortcut C:\Users\admin\Desktop\Draftable Compare.appref-ms|
Path
C:\Windows\system32\rundll32.exe
Indicators
No indicators
Parent process
––
User
admin
Integrity Level
MEDIUM
Exit code
0
Version:
Company
Microsoft Corporation
Description
Windows host process (Rundll32)
Version
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Image
c:\windows\system32\rundll32.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\apphelp.dll
c:\windows\apppatch\aclayers.dll
c:\windows\system32\sspicli.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\userenv.dll
c:\windows\system32\profapi.dll
c:\windows\system32\winspool.drv
c:\windows\system32\mpr.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\dfshim.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\sechost.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\version.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
c:\windows\microsoft.net\framework\v4.0.30319\clr.dll
c:\windows\microsoft.net\framework\v4.0.30319\dfdll.dll
c:\windows\system32\msvcr120_clr0400.dll

PID
2776
CMD
"C:\Users\admin\AppData\Local\Apps\2.0\EV07YR8O.MBJ\BT4PTWXJ.COZ\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\Draftable.CompareTool.exe"
Path
C:\Users\admin\AppData\Local\Apps\2.0\EV07YR8O.MBJ\BT4PTWXJ.COZ\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\Draftable.CompareTool.exe
Indicators
Parent process
rundll32.exe
User
admin
Integrity Level
MEDIUM
Version:
Company
Draftable
Description
Draftable.CompareTool
Version
1.1.3.2
Modules
Image
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.comparetool.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\microsoft.net\framework\v4.0.30319\mscoreei.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\user32.dll
c:\windows\system32\usp10.dll
c:\windows\system32\imm32.dll
c:\windows\system32\msctf.dll
c:\windows\system32\version.dll
c:\windows\microsoft.net\framework\v4.0.30319\clr.dll
c:\windows\system32\msvcr120_clr0400.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\mscorlib\225759bb87c854c0fff27b1d84858c21\mscorlib.ni.dll
c:\windows\system32\ole32.dll
c:\windows\system32\cryptbase.dll
c:\windows\system32\dfshim.dll
c:\windows\system32\shell32.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\wininet.dll
c:\windows\system32\iertutil.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\profapi.dll
c:\windows\microsoft.net\framework\v4.0.30319\nlssorting.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system\52cca48930e580e3189eac47158c20be\system.ni.dll
c:\windows\system32\cryptsp.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\rpcrtremote.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\log4net.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.core\55560c2014611e9119f99923c9ebdeef\system.core.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\windowsbase\32512bd09e2231f6eebb15fc17e3ad79\windowsbase.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\presentationcore\416ba33cb980d07643e82c4c45bd5786\presentationcore.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\presentatio5ae0f00f#\da36abbea6ef456f432434d4d8d835c1\presentationframework.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.xaml\6d09f865a22e2f903b74476769e1b76a\system.xaml.ni.dll
c:\windows\system32\dwrite.dll
c:\windows\microsoft.net\framework\v4.0.30319\wpf\wpfgfx_v0400.dll
c:\windows\microsoft.net\framework\v4.0.30319\wpf\presentationnative_v0400.dll
c:\windows\microsoft.net\framework\v4.0.30319\clrjit.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.licensing.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.drawing\646b4b01cb29986f8e076aa65c9e9753\system.drawing.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.configuration\46957030830964165644b52b0696c5d9\system.configuration.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.xml\d86b080a37c60a872c82b912a2a63dac\system.xml.ni.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\gdiplus.dll
c:\windows\system32\windowscodecs.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.exceptions.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.utils.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.settings.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.updater.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draftable.comparerunner.exe
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\hardcodet.wpf.taskbarnotification.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\microsoft.v9921e851#\7ca6a7b9413844e82108a9d62f88a2d9\microsoft.visualbasic.ni.dll
c:\windows\assembly\nativeimages_v4.0.30319_32\system.management\4dfa27fdd6a4cce26f99585e1c744f9b\system.management.ni.dll
c:\users\admin\appdata\local\apps\2.0\ev07yr8o.mbj\bt4ptwxj.coz\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\servicestack.text.dll

Registry activity

Total events
1354
Read events
677
Write events
676
Delete events
1

Modification events

PID
Process
Operation
Key
Name
Value
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASAPI32
EnableFileTracing
0
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASAPI32
EnableConsoleTracing
0
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASAPI32
FileTracingMask
4294901760
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASAPI32
ConsoleTracingMask
4294901760
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASAPI32
MaxFileSize
1048576
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASAPI32
FileDirectory
%windir%\tracing
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASMANCS
EnableFileTracing
0
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASMANCS
EnableConsoleTracing
0
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASMANCS
FileTracingMask
4294901760
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASMANCS
ConsoleTracingMask
4294901760
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASMANCS
MaxFileSize
1048576
2532
DraftableCompare.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\DraftableCompare_RASMANCS
FileDirectory
%windir%\tracing
2532
DraftableCompare.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
2532
DraftableCompare.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
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
2532
DraftableCompare.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
2532
DraftableCompare.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
2532
DraftableCompare.exe
write
HKEY_CLASSES_ROOT\Local Settings\MuiCache\62\52C64B7E
LanguageList
en-US
3644
dfsvc.exe
delete key
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0
ComponentStore_RandomString
OWJRVTZDD9K3PPQ39MHW1198
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0
ComponentStore_RandomString
EV07YR8OMBJBT4PTWXJCOZ0J
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager
StateStore_RandomString
20GGPNK2CAJENJT71YWL09NN
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASAPI32
EnableFileTracing
0
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASAPI32
EnableConsoleTracing
0
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASAPI32
FileTracingMask
4294901760
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASAPI32
ConsoleTracingMask
4294901760
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASAPI32
MaxFileSize
1048576
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASAPI32
FileDirectory
%windir%\tracing
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASMANCS
EnableFileTracing
0
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASMANCS
EnableConsoleTracing
0
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASMANCS
FileTracingMask
4294901760
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASMANCS
ConsoleTracingMask
4294901760
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASMANCS
MaxFileSize
1048576
3644
dfsvc.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\dfsvc_RASMANCS
FileDirectory
%windir%\tracing
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
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
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Local Settings\MuiCache\62\52C64B7E
LanguageList
en-US
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates\92C1588E85AF2201CE7915E8538B492F605B80C6
Blob
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
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{60051b8f-4f12-400a-8e50-dd05ebd438d1}
NonCanonicalData
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{60051b8f-4f12-400a-8e50-dd05ebd438d1}\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
appid
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
identity
447261667461626C652E436F6D70617265546F6F6C2E6578652C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C2C20747970653D77696E3332
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
lock!0100000039ca13003c0e0000e00f00000000000000000000248537e1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}
NonCanonicalData
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
appid
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
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!DeploymentSourceUri
680074007400700073003A002F002F0064007200610066007400610062006C0065002D0063006F006D0070006100720065002E00730033002E0061006D0061007A006F006E006100770073002E0063006F006D002F006C006900760065002F0044007200610066007400610062006C0065002E0043006F006D00700061007200650054006F006F006C002E006100700070006C00690063006100740069006F006E000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!ApplicationSourceUri
680074007400700073003A002F002F0064007200610066007400610062006C0065002D0063006F006D0070006100720065002E00730033002E0061006D0061007A006F006E006100770073002E0063006F006D002F006C006900760065002F004100700070006C00690063006100740069006F006E00250032003000460069006C00650073002F0044007200610066007400610062006C0065002E0043006F006D00700061007200650054006F006F006C005F0031005F0031005F0033005F0032002F0044007200610066007400610062006C0065002E0043006F006D00700061007200650054006F006F006C002E006500780065002E006D0061006E00690066006500730074000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!IsFullTrust
54007200750065000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Visibility\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
identity
447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Visibility\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874\Applications
draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Visibility\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
identity
447261667461626C652E436F6D70617265546F6F6C2E6578652C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C2C20747970653D77696E3332
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Visibility\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Applications
draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
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
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
appid
447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!IsShellVisible
54007200750065000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!PreviousBind
0000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!PendingBind
0000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!ExcludedDeployment
0000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!PendingDeployment
0000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!DeploymentProviderUri
680074007400700073003A002F002F0064007200610066007400610062006C0065002D0063006F006D0070006100720065002E00730033002E0061006D0061007A006F006E006100770073002E0063006F006D002F006C006900760065002F0044007200610066007400610062006C0065002E0043006F006D00700061007200650054006F006F006C002E006100700070006C00690063006100740069006F006E000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!MinimumRequiredVersion
0000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!LastCheckTime
32003000310039002F00300035002F00310034002000320033003A00320039003A00330030000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!UpdateSkippedDeployment
0000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!UpdateSkipTime
30003000300031002F00300031002F00300031002000300030003A00300030003A00300030000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!AppType
30000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\PackageMetadata\{2ec93463-b0c3-45e1-8364-327e96aea856}_{3f471841-eef2-47d6-89c0-d028f03a4ad5}\draf..tion_ed18b5d23647a6f3_72e8a2846488357f
{2ad613da-6fdb-4671-af9e-18ab2e4df4d8}!CurrentBind
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
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
appid
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
reference!S_{3f471841-eef2-47d6-89c0-d028f03a4ad5}
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
appid
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
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
identity
49435368617270436F64652E53686172705A69704C69622C2056657273696F6E3D302E38362E302E3531382C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D314230334536414346313136344637332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
identity
6C6F67346E65742C2056657273696F6E3D322E302E362E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D363639453044444630424231414132412C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
identity
4653686172702E436F72652C2056657273696F6E3D342E342E302E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D423033463546374631314435304133412C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D69742C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D6A612C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
identity
426F756E6379436173746C652E43727970746F2C2056657273696F6E3D312E382E312E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D30453939333735453534373639393432
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D66722C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D72752C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D6B6F2C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D64652C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D7A682D48616E732C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D656E2C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
identity
506F737453686172702C2056657273696F6E3D342E332E32352E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D423133464433384238463943393944372C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D65732C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D7A682D48616E742C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
identity
53797374656D2E57696E646F77732E496E74657261637469766974792C2056657273696F6E3D342E352E302E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
identity
6E756E69742E6672616D65776F726B2C2056657273696F6E3D322E362E322E31323239362C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D393644303941314542374634344137372C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
identity
447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
implication!draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
identity
447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
SizeOfStronglyNamedComponent
FF77000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
identity
447261667461626C652E436F6D70617265546F6F6C2E6578652C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C2C20747970653D77696E3332
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
SizeOfStronglyNamedComponent
F636C10100000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
DigestValue
775AFC4E689D524803900FAE20D3D4AB2D0F87833882B93E52343673E186610D
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\xcpro40.dll_35b4ab52174ab6e8
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\xcpro40.dll_35b4ab52174ab6e8
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\pxcview.dll_cd1890ed184ed81e
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\pxcview.dll_cd1890ed184ed81e
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
Resources\draftable.ico_e82571411ae1b3a5
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
Resources\draftable.ico_e82571411ae1b3a5
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\xccdx40.dll_3a014d1737327acc
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\xccdx40.dll_3a014d1737327acc
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\netlib40.dll_ab860e993ab61c52
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\netlib40.dll_ab860e993ab61c52
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\xcpro40.dll_da75a30043202258
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\xcpro40.dll_da75a30043202258
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\xccdx40.dll_dec244c56307e63c
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\xccdx40.dll_dec244c56307e63c
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\netlib40.dll_50470647668b87c2
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\netlib40.dll_50470647668b87c2
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\ixclib40.dll_9d5f7d307ec754ab
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\ixclib40.dll_9d5f7d307ec754ab
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
Draftable.CompareTool.exe.config_4a3a54377f6e9e62
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
Draftable.CompareTool.exe.config_4a3a54377f6e9e62
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\pdfium.dll_8d3564f08e60d061
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\pdfium.dll_8d3564f08e60d061
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\ixclib40.dll_422074deaa9cc01b
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\ixclib40.dll_422074deaa9cc01b
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\pxclib40.dll_28997181adf0483c
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\pxclib40.dll_28997181adf0483c
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\dscrt40.dll_64682099cc60c7de
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\dscrt40.dll_64682099cc60c7de
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\pxclib40.dll_cd5a692fd9c5b3ac
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\pxclib40.dll_cd5a692fd9c5b3ac
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\pxcview.dll_2857993eec796cae
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\pxcview.dll_2857993eec796cae
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\pdfium.dll_79e564e1f6d3d22d
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\pdfium.dll_79e564e1f6d3d22d
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_aec4c29c5c7dbd22\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\dscrt40.dll_09291847f836334e
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\dscrt40.dll_09291847f836334e
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..fium_none_0001.0000_none_ce8e8867d529e7c2
identity
447261667461626C652E50444669756D2C2056657273696F6E3D312E302E302E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
SizeOfPrivateComponentsInDeployment
9D46230000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..fium_none_0001.0000_none_ce8e8867d529e7c2\Files
Draftable.PDFium.dll_733836a53d41a50c
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
identity
6E756E69742E6672616D65776F726B2C2056657273696F6E3D322E362E322E31323239362C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D393644303941314542374634344137372C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
SizeOfStronglyNamedComponent
794F020000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
DigestValue
694006DBC50D5BFC124DCA5A06A2757B1D8D8FCEF540C0D7EF8EE33276DE8B3D
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b\Files
nunit.framework.dll_2faaf96110574720
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b\Files
nunit.framework.dll_2faaf96110574720
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
identity
53797374656D2E57696E646F77732E496E74657261637469766974792C2056657273696F6E3D342E352E302E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
SizeOfStronglyNamedComponent
98F1000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
DigestValue
93FBC59E4880AFC9F136C3AC0976ADA7F3FAA7CACEDCE5C824B337CBCA9D2EBF
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705\Files
System.Windows.Interactivity.dll_49567d1f0585415b
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705\Files
System.Windows.Interactivity.dll_49567d1f0585415b
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D7A682D48616E742C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
SizeOfStronglyNamedComponent
865F000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
DigestValue
3C2C9193DB37C3368CD9CBAEFEB4797D6FA4C05BA30AA107D64AB004F5BF12BC
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..diff_none_0001.0002_none_b240bf5e994e55dc
identity
447261667461626C652E446966662C2056657273696F6E3D312E322E332E312C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..diff_none_0001.0002_none_b240bf5e994e55dc\Files
Draftable.Diff.dll_879ac4609b5591d0
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..f.ui_none_0001.0000_none_ce93c90fd523fe63
identity
447261667461626C652E5044462E55492C2056657273696F6E3D312E302E302E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..f.ui_none_0001.0000_none_ce93c90fd523fe63\Files
Draftable.PDF.UI.dll_7b8641592a8e0bfb
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ater_none_0001.0000_none_b7264af58e6065da
identity
447261667461626C652E557064617465722C2056657273696F6E3D312E302E302E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ater_none_0001.0000_none_b7264af58e6065da\Files
Draftable.Updater.dll_5955e487d8589b18
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D65732C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
SizeOfStronglyNamedComponent
7961000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
DigestValue
C9970100ED48564F4779BC03B65B69ADF55B679F3132ADB7A7CAA3D7AA401137
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ions_none_0001.0002_none_8b71836b1c5bd944
identity
447261667461626C652E436F6C6C656374696F6E732C2056657273696F6E3D312E322E332E312C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ions_none_0001.0002_none_8b71836b1c5bd944\Files
Draftable.Collections.dll_f0f3c79c550f1b6c
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
identity
506F737453686172702C2056657273696F6E3D342E332E32352E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D423133464433384238463943393944372C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
SizeOfStronglyNamedComponent
218A030000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
DigestValue
2DCB6B68540E192FB723D3802BF240EC3FE7A35CC2F9468F05231822D2B7471B
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c\Files
PostSharp.dll_835438650d8165a6
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c\Files
PostSharp.dll_835438650d8165a6
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ings_none_0001.0002_none_e16b8a1c8623cf96
identity
447261667461626C652E53657474696E67732C2056657273696F6E3D312E322E362E342C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ings_none_0001.0002_none_e16b8a1c8623cf96\Files
Draftable.Settings.dll_467c6e0122948570
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..sing_none_0001.0002_none_7b65f4e9f01a9141
identity
447261667461626C652E4C6963656E73696E672C2056657273696F6E3D312E322E362E342C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..sing_none_0001.0002_none_7b65f4e9f01a9141\Files
Draftable.Licensing.dll_2310034457c86959
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..sais_none_0001.0002_none_b242b5ae994cc1cf
identity
447261667461626C652E536169732C2056657273696F6E3D312E322E332E312C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..sais_none_0001.0002_none_b242b5ae994cc1cf\Files
Draftable.Sais.dll_8b97bf649657578d
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ions_none_0001.0000_none_fec63cebb9c547cb
identity
447261667461626C652E416E6E6F746174696F6E732C2056657273696F6E3D312E302E302E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ions_none_0001.0000_none_fec63cebb9c547cb\Files
Draftable.Annotations.dll_b2ab380da46483b7
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\serv..text_none_0004.0005_none_cb81c91ab2d3aa46
identity
53657276696365537461636B2E546578742C2056657273696F6E3D342E352E342E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\serv..text_none_0004.0005_none_cb81c91ab2d3aa46\Files
ServiceStack.Text.dll_abe8f1f906694b80
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D656E2C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
SizeOfStronglyNamedComponent
7564000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
DigestValue
19B1C6309BAFD678CABC21FA24F907E0C8049287ED9B12F86A3B3AD045D73B35
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D7A682D48616E732C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
SizeOfStronglyNamedComponent
865F000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
DigestValue
321C3C5B944527BA03E1534587EB46F9CF54B36CFF9EFE2B628CFAE768C23994
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D64652C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
SizeOfStronglyNamedComponent
8961000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
DigestValue
4BDD7CE53B51867EFD63D8E240B38BEB6DD903A8D086D48FE59C8EB87CA95B3E
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D6B6F2C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
SizeOfStronglyNamedComponent
7961000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
DigestValue
119DC1592B7F89CED297C1B07797887C5DA922DD50E96309D910D20F8A460507
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..sion_none_0001.0000_none_2d9b07b4a75f4aa9
identity
447261667461626C652E504446436F6E76657273696F6E2C2056657273696F6E3D312E302E302E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..sion_none_0001.0000_none_2d9b07b4a75f4aa9\Files
Draftable.PDFConversion.dll_e03ec5041e052199
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D72752C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
SizeOfStronglyNamedComponent
8963000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
DigestValue
5ABF4C385E916C03D6BFE73B67C0DEB6F86D093CB4E876A13D3A2DC3E18327B3
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..diff_none_0001.0002_none_5c82cc737a655a53
identity
447261667461626C652E43446966662C2056657273696F6E3D312E322E332E312C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..diff_none_0001.0002_none_5c82cc737a655a53\Files
Draftable.CDiff.dll_07d968844a75a9ad
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..tool_none_0001.0001_none_526339148544cb16
identity
447261667461626C652E436F6D70617265546F6F6C2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..tool_none_0001.0001_none_526339148544cb16\Files
Draftable.CompareTool.exe_e290bbbcafe877fa
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D66722C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
SizeOfStronglyNamedComponent
7961000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
DigestValue
E181984D844AA7030623F602B636EF75299B59D750C88D8006DA015DE3502266
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...com_none_0001.0002_none_8c61af08a38789d4
identity
447261667461626C652E434F4D2C2056657273696F6E3D312E322E332E312C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...com_none_0001.0002_none_8c61af08a38789d4\Files
Draftable.COM.dll_36485152a7166bdc
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
identity
426F756E6379436173746C652E43727970746F2C2056657273696F6E3D312E382E312E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D30453939333735453534373639393432
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
SizeOfStronglyNamedComponent
432A220000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
DigestValue
1985B85BB44BE6C6EAF35E02EF11E23A890E809B8EC2E53210A4AD5A85B26C70
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0\Files
BouncyCastle.Crypto.dll_be37d6f529724ebf
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0\Files
BouncyCastle.Crypto.dll_be37d6f529724ebf
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..tils_none_0001.0000_none_7eb2bc55472943e8
identity
447261667461626C652E5574696C732C2056657273696F6E3D312E302E302E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..tils_none_0001.0000_none_7eb2bc55472943e8\Files
Draftable.Utils.dll_18d56743fc3138ca
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..lude_none_0001.0002_none_addcffd0b65c0b78
identity
447261667461626C652E5072656C7564652C2056657273696F6E3D312E322E332E312C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..lude_none_0001.0002_none_addcffd0b65c0b78\Files
Draftable.Prelude.dll_297c41f0b1034278
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..nner_none_0001.0000_none_9fa7991ffc1241dc
identity
447261667461626C652E436F6D7061726552756E6E65722C2056657273696F6E3D312E302E302E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..nner_none_0001.0000_none_9fa7991ffc1241dc\Files
Draftable.CompareRunner.exe_c7a5834abe9a7148
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D6A612C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
SizeOfStronglyNamedComponent
7963000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
DigestValue
83CC1B9613CA357B99D8A20D205C2176E1DE29DDD1218E8165CD7C3B6CB00843
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..fice_none_0001.0000_none_cc5fde09d8a5f3c1
identity
447261667461626C652E4F66666963652C2056657273696F6E3D312E302E302E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..fice_none_0001.0000_none_cc5fde09d8a5f3c1\Files
Draftable.Office.dll_72180ed24346757d
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
identity
53797374656D2E57696E646F77732E496E74657261637469766974792E7265736F75726365732C2056657273696F6E3D342E352E302E302C2043756C747572653D69742C205075626C69634B6579546F6B656E3D333142463338353641443336344533352C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
SizeOfStronglyNamedComponent
7961000000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
DigestValue
6FCD674338990F2964659B9318E0E7C15D69B7412E18FB1AA8AB38E9E94D318F
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147\Files
System.Windows.Interactivity.resources.dll_0b314fbbd6afe360
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...pdf_none_0001.0002_none_8c5ac73ca38daff3
identity
447261667461626C652E5044462C2056657273696F6E3D312E322E332E312C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...pdf_none_0001.0002_none_8c5ac73ca38daff3\Files
Draftable.PDF.dll_29151282ba8a342d
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\hard..tion_none_0001.0000_none_846cf6ffc5f034d5
identity
48617264636F6465742E5770662E5461736B6261724E6F74696669636174696F6E2C2056657273696F6E3D312E302E352E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\hard..tion_none_0001.0000_none_846cf6ffc5f034d5\Files
Hardcodet.Wpf.TaskbarNotification.dll_dfa9c63c9ad5d560
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
identity
4653686172702E436F72652C2056657273696F6E3D342E342E302E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D423033463546374631314435304133412C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
SizeOfStronglyNamedComponent
090D170000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
DigestValue
E62F87D6125241EB346902287B47E24AC64FCE7D922D9059B9B5992AF5F0A19D
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e\Files
FSharp.Core.dll_925e7ade8c473bc5
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e\Files
FSharp.Core.dll_925e7ade8c473bc5
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ects_none_0001.0000_none_9726359ef5c02fa2
identity
447261667461626C652E417370656374732C2056657273696F6E3D312E302E302E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ects_none_0001.0000_none_9726359ef5c02fa2\Files
Draftable.Aspects.dll_7ea8d56e5dcea9d0
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
identity
6C6F67346E65742C2056657273696F6E3D322E302E362E302C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D363639453044444630424231414132412C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
SizeOfStronglyNamedComponent
FD4E040000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
DigestValue
F7B220D6614E6CDB14A72C28EA4C21D210402317A9B255E4AF555116CB978D8A
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249\Files
log4net.dll_6fc8fa9cf3f006a7
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249\Files
log4net.dll_6fc8fa9cf3f006a7
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
identity
49435368617270436F64652E53686172705A69704C69622C2056657273696F6E3D302E38362E302E3531382C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D314230334536414346313136344637332C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
SizeOfStronglyNamedComponent
4E1D030000000000
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
DigestValue
40B3D590F95191F3E33E5D00E534FA40F823D9B1BB2A9AFE05F139C4E0A3AF8D
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
Transform
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
DigestMethod
02
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8\Files
ICSharpCode.SharpZipLib.dll_fc9e86c5469afc31
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8\Files
ICSharpCode.SharpZipLib.dll_fc9e86c5469afc31
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ions_none_0001.0000_none_6806fe850fe1702d
identity
447261667461626C652E457863657074696F6E732C2056657273696F6E3D312E302E302E302C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ions_none_0001.0000_none_6806fe850fe1702d\Files
Draftable.Exceptions.dll_74f969e66320b9d1
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ypes_none_0001.0002_none_7cd7ec3549e9e9dc
identity
447261667461626C652E54797065732C2056657273696F6E3D312E322E332E312C2043756C747572653D6E65757472616C2C2070726F636573736F724172636869746563747572653D6D73696C
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf..ypes_none_0001.0002_none_7cd7ec3549e9e9dc\Files
Draftable.Types.dll_2622cb84ea795234
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment
OnlineAppQuotaUsageEstimate
0000000000000000
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
ShortcutAppId
https://draftable-compare.s3.amazonaws.com/live/Draftable.CompareTool.application#Draftable.CompareTool.application, Culture=neutral, PublicKeyToken=ed18b5d23647a6f3, processorArchitecture=msil
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
SupportShortcutFileName
Draftable Compare online support
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
ShortcutSuiteName
Draftable Suite
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
ShortcutFileName
Draftable Compare
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
ShortcutFolderName
Draftable Pty Ltd
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
UrlUpdateInfo
https://draftable-compare.s3.amazonaws.com/live/Draftable.CompareTool.application
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
HelpLink
https://www.draftable.com/
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
UninstallString
rundll32.exe dfshim.dll,ShArpMaintain Draftable.CompareTool.application, Culture=neutral, PublicKeyToken=ed18b5d23647a6f3, processorArchitecture=msil
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
Publisher
Draftable Pty Ltd
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
DisplayVersion
1.1.3.2
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
DisplayIcon
dfshim.dll,2
3644
dfsvc.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\7191801a1c177ac1
DisplayName
Draftable Compare
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
lock!28000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
lock!26000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
lock!24000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
lock!22000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
lock!20000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
lock!1e000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
lock!1c000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
lock!1a000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
lock!18000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
lock!16000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
lock!14000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
lock!12000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
lock!10000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
lock!0e000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
lock!0c000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
lock!0a000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
lock!08000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
lock!06000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
lock!04000000dcce13003c0e0000e00f00000000000000000000dcb7ece1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Applications\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
identity
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
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Applications\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
PreparedForExecution
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
lock!29000000fbce13003c0e0000e00f00000000000000000000907cf1e1ac0ad501
30303030306533632C30316435306161636363613939663365
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\xcpro40.dll_35b4ab52174ab6e8
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\pxcview.dll_cd1890ed184ed81e
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
Resources\draftable.ico_65c982e5a6ff4085
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\xccdx40.dll_3a014d1737327acc
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\netlib40.dll_ab860e993ab61c52
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\xcpro40.dll_da75a30043202258
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\xccdx40.dll_dec244c56307e63c
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\netlib40.dll_50470647668b87c2
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\ixclib40.dll_9d5f7d307ec754ab
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
Draftable.CompareTool.exe.config_d1a79d2508bf9442
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\pdfium.dll_8d3564f08e60d061
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\ixclib40.dll_422074deaa9cc01b
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\pxclib40.dll_28997181adf0483c
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\dscrt40.dll_64682099cc60c7de
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\pxclib40.dll_cd5a692fd9c5b3ac
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x64\pxcview.dll_2857993eec796cae
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\pdfium.dll_79e564e1f6d3d22d
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d\Files
x86\dscrt40.dll_09291847f836334e
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0\Files
BouncyCastle.Crypto.dll_93f29aa1231dc29f
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7\Files
System.Windows.Interactivity.resources.dll_f68d1ccbd240de40
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb\Files
System.Windows.Interactivity.resources.dll_f68d1ccbd240de40
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0\Files
System.Windows.Interactivity.resources.dll_f68d1ccbd240de40
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147\Files
System.Windows.Interactivity.resources.dll_f68d1ccbd240de40
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0\Files
System.Windows.Interactivity.resources.dll_f68d1ccbd240de40
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785\Files
System.Windows.Interactivity.resources.dll_f68d1ccbd240de40
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785\Files
System.Windows.Interactivity.resources.dll_f68d1ccbd240de40
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a\Files
System.Windows.Interactivity.resources.dll_f68d1ccbd240de40
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4\Files
System.Windows.Interactivity.resources.dll_f68d1ccbd240de40
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d\Files
System.Windows.Interactivity.resources.dll_f68d1ccbd240de40
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705\Files
System.Windows.Interactivity.dll_b13c64c76f00adfb
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8\Files
ICSharpCode.SharpZipLib.dll_cdc9de7c6ab9add1
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e\Files
FSharp.Core.dll_c43c5ed73433a2e5
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c\Files
PostSharp.dll_7680bae1a9d42da6
01
3644
dfsvc.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Components\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
SubstructureCreated
01
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
lock!260000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
lock!240000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
lock!220000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
lock!200000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
lock!1e0000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
lock!1c0000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
lock!1a0000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
lock!180000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
lock!160000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
lock!140000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
lock!120000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
lock!100000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
lock!0e0000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
lock!0c0000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
lock!0a0000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
lock!080000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
lock!060000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
lock!040000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
lock!020000000ae41300100a0000140d00000000000000000000da0728e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
lock!4c000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
lock!4a000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
lock!48000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
lock!46000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
lock!44000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
lock!42000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
lock!40000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
lock!3e000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
lock!3c000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
lock!3a000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
lock!38000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
lock!36000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
lock!34000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
lock!32000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
lock!30000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
lock!2e000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
lock!2c000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
lock!2a000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
lock!28000000f4e41300100a0000140d0000000000000000000020cb4be5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
lock!4d00000033e51300100a0000140d00000000000000000000885455e5ac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Families\F_draf..tion_ed18b5d23647a6f3_02b9b99b765b8e15
LastRunVersion
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
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Families\Gc_draf..tion_b13d7ee81bce0eec
LastRunVersion
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
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Families\Gi_draf..tion_ed18b5d23647a6f3_72e8a2846488357f
LastRunVersion
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C2F447261667461626C652E436F6D70617265546F6F6C2E6578652C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C2C20747970653D77696E3332
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Applications\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
HasRunBefore
01
2576
Draftable.CompareTool.exe
write
HKEY_CURRENT_USER\Software\Draftable\Compare
hardwareAcceleratedRenderingEnabled
01
2576
Draftable.CompareTool.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Direct3D\MostRecentApplication
Name
Draftable.CompareTool.exe
2576
Draftable.CompareTool.exe
write
HKEY_CURRENT_USER\Software\Draftable\Compare
wasJustUpdated
00
2576
Draftable.CompareTool.exe
write
HKEY_CURRENT_USER\Software\Draftable\Compare
hotKeyKey
F12
2576
Draftable.CompareTool.exe
write
HKEY_CURRENT_USER\Software\Draftable\Compare
hotKeyModifier
Ctrl, Shift
2576
Draftable.CompareTool.exe
write
HKEY_CURRENT_USER\Software\Draftable\Compare
oldShortcutName
2576
Draftable.CompareTool.exe
write
HKEY_CURRENT_USER\Software\Draftable\Validator
trial_draftable-compare
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASAPI32
EnableFileTracing
0
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASAPI32
EnableConsoleTracing
0
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASAPI32
FileTracingMask
4294901760
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASAPI32
ConsoleTracingMask
4294901760
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASAPI32
MaxFileSize
1048576
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASAPI32
FileDirectory
%windir%\tracing
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASMANCS
EnableFileTracing
0
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASMANCS
EnableConsoleTracing
0
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASMANCS
FileTracingMask
4294901760
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASMANCS
ConsoleTracingMask
4294901760
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASMANCS
MaxFileSize
1048576
2576
Draftable.CompareTool.exe
write
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Draftable_RASMANCS
FileDirectory
%windir%\tracing
2576
Draftable.CompareTool.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
UNCAsIntranet
0
2576
Draftable.CompareTool.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
AutoDetect
1
2576
Draftable.CompareTool.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
ProxyEnable
0
2576
Draftable.CompareTool.exe
write
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
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
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Local Settings\MuiCache\62\52C64B7E
LanguageList
en-US
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
lock!740000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
lock!720000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
lock!700000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
lock!6e0000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
lock!6c0000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
lock!6a0000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
lock!680000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
lock!660000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
lock!640000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
lock!620000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
lock!600000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
lock!5e0000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
lock!5c0000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
lock!5a0000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
lock!580000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
lock!560000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
lock!540000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
lock!520000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2576
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
lock!500000005d121400100a0000d00900000000000000000000b0a039ecac0ad501
30303030306131302C30316435306161636532303666316261
2008
rundll32.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
lock!0100000018011400d80700002c050000000000000000000032e796e9ac0ad501
30303030303764382C30316435306161636539383633366263
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
lock!26000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
lock!24000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
lock!22000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
lock!20000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
lock!1e000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
lock!1c000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
lock!1a000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
lock!18000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
lock!16000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
lock!14000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
lock!12000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
lock!10000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
lock!0e000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
lock!0c000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
lock!0a000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
lock!08000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
lock!06000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
lock!04000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
lock!02000000950114005c0d00001c0b0000000000000000000002faa9e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
lock!4c000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
lock!4a000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
lock!48000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
lock!46000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
lock!44000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
lock!42000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
lock!40000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
lock!3e000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
lock!3c000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
lock!3a000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
lock!38000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
lock!36000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
lock!34000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
lock!32000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
lock!30000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
lock!2e000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
lock!2c000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
lock!2a000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
lock!28000000c30114005c0d00001c0b000000000000000000001021b1e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
lock!4d000000400214005c0d00001c0b00000000000000000000e033c4e9ac0ad501
30303030306435632C30316435306161636539393934393863
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Families\F_draf..tion_ed18b5d23647a6f3_02b9b99b765b8e15
LastRunVersion
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
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Families\Gc_draf..tion_b13d7ee81bce0eec
LastRunVersion
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
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Families\Gi_draf..tion_ed18b5d23647a6f3_72e8a2846488357f
LastRunVersion
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
3420
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Applications\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
HasRunBefore
01
2884
rundll32.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
lock!0100000009131400440b0000bc0a000000000000000000008eda53ecac0ad501
30303030306234342C30316435306161636563343765656363
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
lock!26000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
lock!24000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
lock!22000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
lock!20000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
lock!1e000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
lock!1c000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
lock!1a000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
lock!18000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
lock!16000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
lock!14000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
lock!12000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
lock!10000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
lock!0e000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
lock!0c000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
lock!0a000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
lock!08000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
lock!06000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
lock!04000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
lock!02000000a61314004c09000028030000000000000000000012b26becac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
lock!4c000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
lock!4a000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
lock!48000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
lock!46000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
lock!44000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
lock!42000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
lock!40000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
lock!3e000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
lock!3c000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
lock!3a000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ko_f3025aa107f25ea0
lock!38000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_de_f053c79709a02785
lock!36000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..vity_31bf3856ad364e35_0004.0005_none_1b13e2ad9f564705
lock!34000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_es_f02defdd09c8b33a
lock!32000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_fr_f0aa46f709779bd0
lock!30000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\icsh..plib_1b03e6acf1164f73_0000.0056_none_de4cd1c6aa483fc8
lock!2e000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..s_36f2e58437528c9d
lock!2c000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf...exe_ed18b5d23647a6f3_0001.0001_none_38b7bd33a599801d
lock!2a000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_none_be2a52895bb7b874
lock!28000000e41314004c0900002803000000000000000000007a3b75ecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
lock!4d000000031414004c0900002803000000000000000000002e007aecac0ad501
30303030303934632C30316435306161636563353633636538
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Families\F_draf..tion_ed18b5d23647a6f3_02b9b99b765b8e15
LastRunVersion
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
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Families\Gc_draf..tion_b13d7ee81bce0eec
LastRunVersion
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
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Families\Gi_draf..tion_ed18b5d23647a6f3_72e8a2846488357f
LastRunVersion
68747470733A2F2F647261667461626C652D636F6D706172652E73332E616D617A6F6E6177732E636F6D2F6C6976652F447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E23447261667461626C652E436F6D70617265546F6F6C2E6170706C69636174696F6E2C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C2F447261667461626C652E436F6D70617265546F6F6C2E6578652C2056657273696F6E3D312E312E332E322C2043756C747572653D6E65757472616C2C205075626C69634B6579546F6B656E3D656431386235643233363437613666332C2070726F636573736F724172636869746563747572653D6D73696C2C20747970653D77696E3332
2380
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\StateManager\Applications\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
HasRunBefore
01
2664
rundll32.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\draf..tion_ed18b5d23647a6f3_0001.0001_8bb8ccde17319e2d
lock!0100000048201400680a0000940d00000000000000000000d83859eeac0ad501
30303030306136382C30316435306161636565343363336165
2776
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\nuni..work_96d09a1eb7f44a77_0002.0006_none_d9e160d392c7c45b
lock!26000000c5201400d80a0000c80b00000000000000000000a84b6ceeac0ad501
30303030306164382C30316435306161636565356239623332
2776
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_zh..t_36f3e5ce3751a5f4
lock!24000000c5201400d80a0000c80b00000000000000000000a84b6ceeac0ad501
30303030306164382C30316435306161636565356239623332
2776
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ja_f328325b07c9d2eb
lock!22000000c5201400d80a0000c80b00000000000000000000a84b6ceeac0ad501
30303030306164382C30316435306161636565356239623332
2776
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_ru_f5dc2d5b062425f7
lock!20000000c5201400d80a0000c80b00000000000000000000a84b6ceeac0ad501
30303030306164382C30316435306161636565356239623332
2776
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\boun..ypto_0e99375e54769942_0001.0008_none_033c6a8b892e06d0
lock!1e000000c5201400d80a0000c80b00000000000000000000a84b6ceeac0ad501
30303030306164382C30316435306161636565356239623332
2776
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\log4net_669e0ddf0bb1aa2a_0002.0000_none_03ea841a0adc1249
lock!1c000000c5201400d80a0000c80b00000000000000000000a84b6ceeac0ad501
30303030306164382C30316435306161636565356239623332
2776
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_it_f1e93ca908ace147
lock!1a000000c5201400d80a0000c80b00000000000000000000a84b6ceeac0ad501
30303030306164382C30316435306161636565356239623332
2776
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\postsharp_b13fd38b8f9c99d7_0004.0003_none_98df93012993ab7c
lock!18000000c5201400d80a0000c80b00000000000000000000a84b6ceeac0ad501
30303030306164382C30316435306161636565356239623332
2776
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\fsha..core_b03f5f7f11d50a3a_0004.0004_none_e4c4e57e0f78171e
lock!16000000c5201400d80a0000c80b00000000000000000000a84b6ceeac0ad501
30303030306164382C30316435306161636565356239623332
2776
Draftable.CompareTool.exe
write
HKEY_CLASSES_ROOT\Software\Microsoft\Windows\CurrentVersion\Deployment\SideBySide\2.0\Marks\syst..rces_31bf3856ad364e35_0004.0005_en_f063ff7909a02785
lock!14000000c5201400d80a0000c80b00000000000000000000a84b6ceeac0ad501
30303030306164382C30316435306161636565356239623332
2776
Draftable.CompareTool