_raw:
2025-11-19 09:26:50.287
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{78CA3586-0715-4862-B091-200565E3BC87}"
DisplayVersion=2.8.85.0
InstallDate=20251109
InstallSource=C:\ProgramData\chocolatey\lib\tightvnc\tools\
ModifyPath=MsiExec.exe /I{78CA3586-0715-4862-B091-200565E3BC87}
Publisher=GlavSoft LLC.
EstimatedSize=0x402
UninstallString=MsiExec.exe /I{78CA3586-0715-4862-B091-200565E3BC87}
VersionMajor=0x2
VersionMinor=0x8
WindowsInstaller=0x1
Version=0x2080055
Language=0x409
DisplayName="TightVNC"


_raw:
2025-11-19 09:26:50.209
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}"
DisplayVersion=10.0.1.0
InstallDate=20251109
InstallLocation=C:\Program Files\SplunkUniversalForwarder\
InstallSource=C:\windows\TEMP\
ModifyPath=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
NoModify=0x1
Publisher=Splunk, Inc.
EstimatedSize=0x7b750
UninstallString=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
VersionMajor=0xa
VersionMinor=0x0
WindowsInstaller=0x1
Version=0xa000001
Language=0x409
DisplayName="UniversalForwarder"


_raw:
2025-11-19 09:26:50.131
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-19 09:26:50.068
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-19 09:26:49.990
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProPlus2019Volume - en-us"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProPlus2019Volume=en-us
UninstallString="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProPlus2019Volume.16_en-us_x-none culture=en-us version.16=16.0
ModifyPath="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" scenario=repair platform=x64 culture=en-us
NoRepair=0x0
NoRemove=0x0
NoModify=0x0
DisplayIcon=C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
DisplayName="Microsoft Office Professional Plus 2019 - en-us"
DisplayVersion=16.0.10346.20002
Publisher=Microsoft Corporation
InstallLocation=C:\Program Files\Microsoft Office
ClickToRunComponent=0x1


_raw:
2025-11-19 09:26:49.912
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-19 09:26:49.834
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService"
DisplayName="Mozilla Maintenance Service"
UninstallString="C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
DisplayIcon=C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe,0
DisplayVersion=144.0.2
Publisher=Mozilla
Comments=Mozilla Maintenance Service
NoModify=0x1
EstimatedSize=0x17b


_raw:
2025-11-19 09:26:49.756
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox"
Comments=Mozilla Firefox 144.0.2 (x64 en-US)
DisplayIcon=C:\Program Files\Mozilla Firefox\firefox.exe,0
DisplayName="Mozilla Firefox (x64 en-US)"
DisplayVersion=144.0.2
HelpLink=https://support.mozilla.org
InstallLocation=C:\Program Files\Mozilla Firefox
Publisher=Mozilla
UninstallString="C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
URLUpdateInfo=https://www.mozilla.org/firefox/144.0.2/releasenotes
URLInfoAbout=https://www.mozilla.org
NoModify=0x1
NoRepair=0x1
EstimatedSize=0x4ddda


_raw:
2025-11-19 09:26:49.678
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-19 09:26:49.600
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-19 09:26:49.522
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-19 09:26:49.428
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-19 09:26:49.350
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-19 09:26:49.287
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-19 09:26:49.209
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-19 09:26:49.131
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-19 09:26:49.068
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-19 09:26:48.990
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-19 09:06:30.645
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-19 09:06:30.552
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-19 09:06:30.474
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-19 09:06:30.379
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-19 09:06:30.286
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Update"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft=Update
DisplayVersion=1.3.207.5
Version=1.3.207.5
NoRemove=0x1
DisplayName="Microsoft Edge Update"


_raw:
2025-11-19 09:06:30.177
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge"
DisplayName="Microsoft Edge"
DisplayVersion=142.0.3595.80
Version=142.0.3595.80
ModifyPath="C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /install appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=true&repairtype=windowsonlinerepair /installsource windows
UninstallString="C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\Installer\setup.exe" --uninstall --msedge --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files (x86)\Microsoft\Edge\Application
DisplayIcon=C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\msedge.exe,0
NoRepair=0x1
Publisher=Microsoft Corporation
InstallDate=20251114
VersionMajor=0xe0b
VersionMinor=0x50


_raw:
2025-11-19 09:06:30.083
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-19 09:06:30.004
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-19 09:06:29.926
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-19 09:06:29.817
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-19 09:06:29.739
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-19 09:06:29.630
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-19 09:06:29.551
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-19 09:06:29.458
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-19 09:06:29.348
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-19 09:06:29.192
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}"
DisplayVersion=1.1.2.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
Publisher=Cloudbase Solutions Srl
EstimatedSize=0x268e0
UninstallString=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
VersionMajor=0x1
VersionMinor=0x1
WindowsInstaller=0x1
Version=0x1010002
Language=0x409
DisplayName="Cloudbase-Init 1.1.2"


_raw:
2025-11-19 09:06:29.098
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9B265631-958D-415B-9925-53DEEC43E31D}"
DisplayVersion=100.0.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
Publisher=RedHat
EstimatedSize=0x13bd
UninstallString=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
VersionMajor=0x64
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x64000000
Language=0x409
DisplayName="QEMU guest agent"


_raw:
2025-11-19 09:06:29.005
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}"
DisplayVersion=10.0.1.0
InstallDate=20251109
InstallLocation=C:\Program Files\SplunkUniversalForwarder\
InstallSource=C:\windows\TEMP\
ModifyPath=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
NoModify=0x1
Publisher=Splunk, Inc.
EstimatedSize=0x7b750
UninstallString=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
VersionMajor=0xa
VersionMinor=0x0
WindowsInstaller=0x1
Version=0xa000001
Language=0x409
DisplayName="UniversalForwarder"


_raw:
2025-11-19 09:06:28.911
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-19 09:06:28.833
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-19 09:06:28.739
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-19 09:06:28.645
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-19 09:06:28.567
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-19 09:06:28.473
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-19 09:06:28.380
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-19 09:06:28.270
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-19 09:06:28.192
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-19 09:06:28.114
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-19 09:06:28.020
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-19 09:06:27.942
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-19 09:06:27.848
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:34:01.783
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1"
Inno=Setup Version    REG_SZ    6.4.1
Inno=App Path    REG_SZ    C:\Program Files (x86)\WinSCP
InstallLocation=C:\Program Files (x86)\WinSCP\
Inno=Icon Group    REG_SZ    (Default)
Inno=User    REG_SZ    SYSTEM
Inno=Setup Type    REG_SZ    full
Inno=Selected Components    REG_SZ    main,shellext,pageant,puttygen,transl
Inno=Deselected Components    REG_SZ
Inno=Selected Tasks    REG_SZ    enableupdates,enableupdates\enablecollectusage,desktopicon,sendtohook,urlhandler
Inno=Deselected Tasks    REG_SZ    searchpath
Inno=Language    REG_SZ    en
DisplayName="WinSCP 6.5.4"
DisplayIcon=C:\Program Files (x86)\WinSCP\WinSCP.exe
UninstallString="C:\Program Files (x86)\WinSCP\unins000.exe"
QuietUninstallString="C:\Program Files (x86)\WinSCP\unins000.exe" /SILENT
DisplayVersion=6.5.4
Publisher=Martin Prikryl
URLInfoAbout=https://winscp.net/
HelpLink=https://winscp.net/forum/
URLUpdateInfo=https://winscp.net/eng/download.php
NoModify=0x1
NoRepair=0x1
InstallDate=20251109
MajorVersion=0x6
MinorVersion=0x5
VersionMajor=0x6
VersionMinor=0x5
EstimatedSize=0x1876e
Inno=CodeFile: SetupType    REG_SZ    typical


_raw:
2025-11-18 09:34:01.705
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:34:01.627
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:34:01.564
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:34:01.486
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:34:01.423
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Update"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft=Update
DisplayVersion=1.3.207.5
Version=1.3.207.5
NoRemove=0x1
DisplayName="Microsoft Edge Update"


_raw:
2025-11-18 09:34:01.346
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge"
DisplayName="Microsoft Edge"
DisplayVersion=142.0.3595.80
Version=142.0.3595.80
ModifyPath="C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /install appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=true&repairtype=windowsonlinerepair /installsource windows
UninstallString="C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\Installer\setup.exe" --uninstall --msedge --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files (x86)\Microsoft\Edge\Application
DisplayIcon=C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\msedge.exe,0
NoRepair=0x1
Publisher=Microsoft Corporation
InstallDate=20251114
VersionMajor=0xe0b
VersionMinor=0x50


_raw:
2025-11-18 09:34:01.267
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:34:01.205
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:34:01.126
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:34:01.063
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:34:00.970
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome"
DisplayName="Google Chrome"
UninstallString="C:\Program Files\Google\Chrome\Application\142.0.7444.163\Installer\setup.exe" --uninstall --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files\Google\Chrome\Application
DisplayIcon=C:\Program Files\Google\Chrome\Application\chrome.exe,0
NoModify=0x1
NoRepair=0x1
Publisher=Google LLC
Version=142.0.7444.163
DisplayVersion=142.0.7444.163
InstallDate=20251114
VersionMajor=0x1d14
VersionMinor=0xa3


_raw:
2025-11-18 09:34:00.891
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:34:00.829
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:34:00.750
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:34:00.625
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:34:00.546
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:34:00.453
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}"
DisplayVersion=1.1.2.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
Publisher=Cloudbase Solutions Srl
EstimatedSize=0x268e0
UninstallString=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
VersionMajor=0x1
VersionMinor=0x1
WindowsInstaller=0x1
Version=0x1010002
Language=0x409
DisplayName="Cloudbase-Init 1.1.2"


_raw:
2025-11-18 09:34:00.359
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ED41CD4E-33BB-400C-AB20-B09388DC83EF}"
DisplayVersion=0.83.0.0
InstallDate=20251109
InstallSource=C:\ProgramData\chocolatey\lib\putty.install\tools\
ModifyPath=MsiExec.exe /X{ED41CD4E-33BB-400C-AB20-B09388DC83EF}
NoModify=0x1
Publisher=Simon Tatham
EstimatedSize=0x1734
UninstallString=MsiExec.exe /X{ED41CD4E-33BB-400C-AB20-B09388DC83EF}
VersionMajor=0x0
VersionMinor=0x53
WindowsInstaller=0x1
Version=0x530000
Language=0x409
DisplayName="PuTTY release 0.83 (64-bit)"


_raw:
2025-11-18 09:34:00.281
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9B265631-958D-415B-9925-53DEEC43E31D}"
DisplayVersion=100.0.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
Publisher=RedHat
EstimatedSize=0x13bd
UninstallString=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
VersionMajor=0x64
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x64000000
Language=0x409
DisplayName="QEMU guest agent"


_raw:
2025-11-18 09:34:00.203
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-008C-0409-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}
NoModify=0x1
Publisher=Microsoft Corporation
EstimatedSize=0x30
SystemComponent=0x1
UninstallString=MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x409
DisplayName="Office 16 Click-to-Run Localization Component"


_raw:
2025-11-18 09:34:00.109
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-008C-0000-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}
NoModify=0x1
Publisher=Microsoft Corporation
EstimatedSize=0x7bcc
SystemComponent=0x1
UninstallString=MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x0
DisplayName="Office 16 Click-to-Run Extensibility Component"


_raw:
2025-11-18 09:34:00.031
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-007E-0000-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}
Publisher=Microsoft Corporation
EstimatedSize=0x179c
SystemComponent=0x1
UninstallString=MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x0
DisplayName="Office 16 Click-to-Run Licensing Component"


_raw:
2025-11-18 09:33:59.937
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{78CA3586-0715-4862-B091-200565E3BC87}"
DisplayVersion=2.8.85.0
InstallDate=20251109
InstallSource=C:\ProgramData\chocolatey\lib\tightvnc\tools\
ModifyPath=MsiExec.exe /I{78CA3586-0715-4862-B091-200565E3BC87}
Publisher=GlavSoft LLC.
EstimatedSize=0x402
UninstallString=MsiExec.exe /I{78CA3586-0715-4862-B091-200565E3BC87}
VersionMajor=0x2
VersionMinor=0x8
WindowsInstaller=0x1
Version=0x2080055
Language=0x409
DisplayName="TightVNC"


_raw:
2025-11-18 09:33:59.843
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}"
DisplayVersion=10.0.1.0
InstallDate=20251109
InstallLocation=C:\Program Files\SplunkUniversalForwarder\
InstallSource=C:\windows\TEMP\
ModifyPath=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
NoModify=0x1
Publisher=Splunk, Inc.
EstimatedSize=0x7b750
UninstallString=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
VersionMajor=0xa
VersionMinor=0x0
WindowsInstaller=0x1
Version=0xa000001
Language=0x409
DisplayName="UniversalForwarder"


_raw:
2025-11-18 09:33:59.765
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:33:59.703
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:33:59.625
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProPlus2019Volume - en-us"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProPlus2019Volume=en-us
UninstallString="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProPlus2019Volume.16_en-us_x-none culture=en-us version.16=16.0
ModifyPath="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" scenario=repair platform=x64 culture=en-us
NoRepair=0x0
NoRemove=0x0
NoModify=0x0
DisplayIcon=C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
DisplayName="Microsoft Office Professional Plus 2019 - en-us"
DisplayVersion=16.0.10346.20002
Publisher=Microsoft Corporation
InstallLocation=C:\Program Files\Microsoft Office
ClickToRunComponent=0x1


_raw:
2025-11-18 09:33:59.562
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:33:59.484
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService"
DisplayName="Mozilla Maintenance Service"
UninstallString="C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
DisplayIcon=C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe,0
DisplayVersion=144.0.2
Publisher=Mozilla
Comments=Mozilla Maintenance Service
NoModify=0x1
EstimatedSize=0x17b


_raw:
2025-11-18 09:33:59.390
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox"
Comments=Mozilla Firefox 144.0.2 (x64 en-US)
DisplayIcon=C:\Program Files\Mozilla Firefox\firefox.exe,0
DisplayName="Mozilla Firefox (x64 en-US)"
DisplayVersion=144.0.2
HelpLink=https://support.mozilla.org
InstallLocation=C:\Program Files\Mozilla Firefox
Publisher=Mozilla
UninstallString="C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
URLUpdateInfo=https://www.mozilla.org/firefox/144.0.2/releasenotes
URLInfoAbout=https://www.mozilla.org
NoModify=0x1
NoRepair=0x1
EstimatedSize=0x4ddda


_raw:
2025-11-18 09:33:59.328
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:33:59.265
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:33:59.187
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:33:59.109
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:33:59.046
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:33:58.968
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:33:58.890
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:33:58.828
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:33:58.750
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:33:58.687
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:33:34.121
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1"
Inno=Setup Version    REG_SZ    6.4.1
Inno=App Path    REG_SZ    C:\Program Files (x86)\WinSCP
InstallLocation=C:\Program Files (x86)\WinSCP\
Inno=Icon Group    REG_SZ    (Default)
Inno=User    REG_SZ    SYSTEM
Inno=Setup Type    REG_SZ    full
Inno=Selected Components    REG_SZ    main,shellext,pageant,puttygen,transl
Inno=Deselected Components    REG_SZ
Inno=Selected Tasks    REG_SZ    enableupdates,enableupdates\enablecollectusage,desktopicon,sendtohook,urlhandler
Inno=Deselected Tasks    REG_SZ    searchpath
Inno=Language    REG_SZ    en
DisplayName="WinSCP 6.5.4"
DisplayIcon=C:\Program Files (x86)\WinSCP\WinSCP.exe
UninstallString="C:\Program Files (x86)\WinSCP\unins000.exe"
QuietUninstallString="C:\Program Files (x86)\WinSCP\unins000.exe" /SILENT
DisplayVersion=6.5.4
Publisher=Martin Prikryl
URLInfoAbout=https://winscp.net/
HelpLink=https://winscp.net/forum/
URLUpdateInfo=https://winscp.net/eng/download.php
NoModify=0x1
NoRepair=0x1
InstallDate=20251109
MajorVersion=0x6
MinorVersion=0x5
VersionMajor=0x6
VersionMinor=0x5
EstimatedSize=0x1876e
Inno=CodeFile: SetupType    REG_SZ    typical


_raw:
2025-11-18 09:33:34.042
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:33:33.980
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:33:33.902
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:33:33.839
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:33:33.761
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Update"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft=Update
DisplayVersion=1.3.207.5
Version=1.3.207.5
NoRemove=0x1
DisplayName="Microsoft Edge Update"


_raw:
2025-11-18 09:33:33.683
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge"
DisplayName="Microsoft Edge"
DisplayVersion=142.0.3595.80
Version=142.0.3595.80
ModifyPath="C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /install appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=true&repairtype=windowsonlinerepair /installsource windows
UninstallString="C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\Installer\setup.exe" --uninstall --msedge --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files (x86)\Microsoft\Edge\Application
DisplayIcon=C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\msedge.exe,0
NoRepair=0x1
Publisher=Microsoft Corporation
InstallDate=20251114
VersionMajor=0xe0b
VersionMinor=0x50


_raw:
2025-11-18 09:33:33.605
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:33:33.543
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:33:33.464
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:33:33.402
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:33:33.308
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome"
DisplayName="Google Chrome"
UninstallString="C:\Program Files\Google\Chrome\Application\142.0.7444.175\Installer\setup.exe" --uninstall --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files\Google\Chrome\Application
DisplayIcon=C:\Program Files\Google\Chrome\Application\chrome.exe,0
NoModify=0x1
NoRepair=0x1
Publisher=Google LLC
Version=142.0.7444.175
DisplayVersion=142.0.7444.175
InstallDate=20251117
VersionMajor=0x1d14
VersionMinor=0xaf


_raw:
2025-11-18 09:33:33.230
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:33:33.167
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:33:33.089
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:33:33.027
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:33:32.949
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:33:32.839
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}"
DisplayVersion=1.1.2.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
Publisher=Cloudbase Solutions Srl
EstimatedSize=0x268e0
UninstallString=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
VersionMajor=0x1
VersionMinor=0x1
WindowsInstaller=0x1
Version=0x1010002
Language=0x409
DisplayName="Cloudbase-Init 1.1.2"


_raw:
2025-11-18 09:33:32.746
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ED41CD4E-33BB-400C-AB20-B09388DC83EF}"
DisplayVersion=0.83.0.0
InstallDate=20251109
InstallSource=C:\ProgramData\chocolatey\lib\putty.install\tools\
ModifyPath=MsiExec.exe /X{ED41CD4E-33BB-400C-AB20-B09388DC83EF}
NoModify=0x1
Publisher=Simon Tatham
EstimatedSize=0x1734
UninstallString=MsiExec.exe /X{ED41CD4E-33BB-400C-AB20-B09388DC83EF}
VersionMajor=0x0
VersionMinor=0x53
WindowsInstaller=0x1
Version=0x530000
Language=0x409
DisplayName="PuTTY release 0.83 (64-bit)"


_raw:
2025-11-18 09:33:32.667
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9B265631-958D-415B-9925-53DEEC43E31D}"
DisplayVersion=100.0.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
Publisher=RedHat
EstimatedSize=0x13bd
UninstallString=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
VersionMajor=0x64
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x64000000
Language=0x409
DisplayName="QEMU guest agent"


_raw:
2025-11-18 09:33:32.574
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-008C-0409-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}
NoModify=0x1
Publisher=Microsoft Corporation
EstimatedSize=0x30
SystemComponent=0x1
UninstallString=MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x409
DisplayName="Office 16 Click-to-Run Localization Component"


_raw:
2025-11-18 09:33:32.496
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-008C-0000-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}
NoModify=0x1
Publisher=Microsoft Corporation
EstimatedSize=0x7bcc
SystemComponent=0x1
UninstallString=MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x0
DisplayName="Office 16 Click-to-Run Extensibility Component"


_raw:
2025-11-18 09:33:32.402
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-007E-0000-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}
Publisher=Microsoft Corporation
EstimatedSize=0x179c
SystemComponent=0x1
UninstallString=MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x0
DisplayName="Office 16 Click-to-Run Licensing Component"


_raw:
2025-11-18 09:33:32.323
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{78CA3586-0715-4862-B091-200565E3BC87}"
DisplayVersion=2.8.85.0
InstallDate=20251109
InstallSource=C:\ProgramData\chocolatey\lib\tightvnc\tools\
ModifyPath=MsiExec.exe /I{78CA3586-0715-4862-B091-200565E3BC87}
Publisher=GlavSoft LLC.
EstimatedSize=0x402
UninstallString=MsiExec.exe /I{78CA3586-0715-4862-B091-200565E3BC87}
VersionMajor=0x2
VersionMinor=0x8
WindowsInstaller=0x1
Version=0x2080055
Language=0x409
DisplayName="TightVNC"


_raw:
2025-11-18 09:33:32.230
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}"
DisplayVersion=10.0.1.0
InstallDate=20251109
InstallLocation=C:\Program Files\SplunkUniversalForwarder\
InstallSource=C:\windows\TEMP\
ModifyPath=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
NoModify=0x1
Publisher=Splunk, Inc.
EstimatedSize=0x7b750
UninstallString=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
VersionMajor=0xa
VersionMinor=0x0
WindowsInstaller=0x1
Version=0xa000001
Language=0x409
DisplayName="UniversalForwarder"


_raw:
2025-11-18 09:33:32.167
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:33:32.089
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:33:32.011
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProPlus2019Volume - en-us"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProPlus2019Volume=en-us
UninstallString="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProPlus2019Volume.16_en-us_x-none culture=en-us version.16=16.0
ModifyPath="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" scenario=repair platform=x64 culture=en-us
NoRepair=0x0
NoRemove=0x0
NoModify=0x0
DisplayIcon=C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
DisplayName="Microsoft Office Professional Plus 2019 - en-us"
DisplayVersion=16.0.10346.20002
Publisher=Microsoft Corporation
InstallLocation=C:\Program Files\Microsoft Office
ClickToRunComponent=0x1


_raw:
2025-11-18 09:33:31.948
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:33:31.870
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService"
DisplayName="Mozilla Maintenance Service"
UninstallString="C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
DisplayIcon=C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe,0
DisplayVersion=144.0.2
Publisher=Mozilla
Comments=Mozilla Maintenance Service
NoModify=0x1
EstimatedSize=0x17b


_raw:
2025-11-18 09:33:31.793
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox"
Comments=Mozilla Firefox 144.0.2 (x64 en-US)
DisplayIcon=C:\Program Files\Mozilla Firefox\firefox.exe,0
DisplayName="Mozilla Firefox (x64 en-US)"
DisplayVersion=144.0.2
HelpLink=https://support.mozilla.org
InstallLocation=C:\Program Files\Mozilla Firefox
Publisher=Mozilla
UninstallString="C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
URLUpdateInfo=https://www.mozilla.org/firefox/144.0.2/releasenotes
URLInfoAbout=https://www.mozilla.org
NoModify=0x1
NoRepair=0x1
EstimatedSize=0x4ddda


_raw:
2025-11-18 09:33:31.714
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:33:31.652
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:33:31.573
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:33:31.511
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:33:31.448
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:33:31.370
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:33:31.293
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:33:31.230
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:33:31.152
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:33:31.073
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:32:34.368
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1"
Inno=Setup Version    REG_SZ    6.4.1
Inno=App Path    REG_SZ    C:\Program Files (x86)\WinSCP
InstallLocation=C:\Program Files (x86)\WinSCP\
Inno=Icon Group    REG_SZ    (Default)
Inno=User    REG_SZ    SYSTEM
Inno=Setup Type    REG_SZ    full
Inno=Selected Components    REG_SZ    main,shellext,pageant,puttygen,transl
Inno=Deselected Components    REG_SZ
Inno=Selected Tasks    REG_SZ    enableupdates,enableupdates\enablecollectusage,desktopicon,sendtohook,urlhandler
Inno=Deselected Tasks    REG_SZ    searchpath
Inno=Language    REG_SZ    en
DisplayName="WinSCP 6.5.4"
DisplayIcon=C:\Program Files (x86)\WinSCP\WinSCP.exe
UninstallString="C:\Program Files (x86)\WinSCP\unins000.exe"
QuietUninstallString="C:\Program Files (x86)\WinSCP\unins000.exe" /SILENT
DisplayVersion=6.5.4
Publisher=Martin Prikryl
URLInfoAbout=https://winscp.net/
HelpLink=https://winscp.net/forum/
URLUpdateInfo=https://winscp.net/eng/download.php
NoModify=0x1
NoRepair=0x1
InstallDate=20251109
MajorVersion=0x6
MinorVersion=0x5
VersionMajor=0x6
VersionMinor=0x5
EstimatedSize=0x1876e
Inno=CodeFile: SetupType    REG_SZ    typical


_raw:
2025-11-18 09:32:34.289
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:32:34.227
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:32:34.149
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:32:34.085
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:32:34.022
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Update"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft=Update
DisplayVersion=1.3.207.5
Version=1.3.207.5
NoRemove=0x1
DisplayName="Microsoft Edge Update"


_raw:
2025-11-18 09:32:33.944
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge"
DisplayName="Microsoft Edge"
DisplayVersion=142.0.3595.80
Version=142.0.3595.80
ModifyPath="C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /install appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=true&repairtype=windowsonlinerepair /installsource windows
UninstallString="C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\Installer\setup.exe" --uninstall --msedge --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files (x86)\Microsoft\Edge\Application
DisplayIcon=C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\msedge.exe,0
NoRepair=0x1
Publisher=Microsoft Corporation
InstallDate=20251114
VersionMajor=0xe0b
VersionMinor=0x50


_raw:
2025-11-18 09:32:33.865
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:32:33.803
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:32:33.725
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:32:33.662
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:32:33.584
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome"
DisplayName="Google Chrome"
UninstallString="C:\Program Files\Google\Chrome\Application\142.0.7444.163\Installer\setup.exe" --uninstall --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files\Google\Chrome\Application
DisplayIcon=C:\Program Files\Google\Chrome\Application\chrome.exe,0
NoModify=0x1
NoRepair=0x1
Publisher=Google LLC
Version=142.0.7444.163
DisplayVersion=142.0.7444.163
InstallDate=20251114
VersionMajor=0x1d14
VersionMinor=0xa3


_raw:
2025-11-18 09:32:33.521
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:32:33.459
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:32:33.396
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:32:33.334
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:32:33.271
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:32:33.178
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}"
DisplayVersion=1.1.2.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
Publisher=Cloudbase Solutions Srl
EstimatedSize=0x268e0
UninstallString=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
VersionMajor=0x1
VersionMinor=0x1
WindowsInstaller=0x1
Version=0x1010002
Language=0x409
DisplayName="Cloudbase-Init 1.1.2"


_raw:
2025-11-18 09:32:33.100
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ED41CD4E-33BB-400C-AB20-B09388DC83EF}"
DisplayVersion=0.83.0.0
InstallDate=20251109
InstallSource=C:\ProgramData\chocolatey\lib\putty.install\tools\
ModifyPath=MsiExec.exe /X{ED41CD4E-33BB-400C-AB20-B09388DC83EF}
NoModify=0x1
Publisher=Simon Tatham
EstimatedSize=0x1734
UninstallString=MsiExec.exe /X{ED41CD4E-33BB-400C-AB20-B09388DC83EF}
VersionMajor=0x0
VersionMinor=0x53
WindowsInstaller=0x1
Version=0x530000
Language=0x409
DisplayName="PuTTY release 0.83 (64-bit)"


_raw:
2025-11-18 09:32:33.021
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9B265631-958D-415B-9925-53DEEC43E31D}"
DisplayVersion=100.0.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
Publisher=RedHat
EstimatedSize=0x13bd
UninstallString=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
VersionMajor=0x64
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x64000000
Language=0x409
DisplayName="QEMU guest agent"


_raw:
2025-11-18 09:32:32.959
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-008C-0409-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}
NoModify=0x1
Publisher=Microsoft Corporation
EstimatedSize=0x30
SystemComponent=0x1
UninstallString=MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x409
DisplayName="Office 16 Click-to-Run Localization Component"


_raw:
2025-11-18 09:32:32.881
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-008C-0000-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}
NoModify=0x1
Publisher=Microsoft Corporation
EstimatedSize=0x7bcc
SystemComponent=0x1
UninstallString=MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x0
DisplayName="Office 16 Click-to-Run Extensibility Component"


_raw:
2025-11-18 09:32:32.818
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-007E-0000-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}
Publisher=Microsoft Corporation
EstimatedSize=0x179c
SystemComponent=0x1
UninstallString=MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x0
DisplayName="Office 16 Click-to-Run Licensing Component"


_raw:
2025-11-18 09:32:32.740
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{78CA3586-0715-4862-B091-200565E3BC87}"
DisplayVersion=2.8.85.0
InstallDate=20251109
InstallSource=C:\ProgramData\chocolatey\lib\tightvnc\tools\
ModifyPath=MsiExec.exe /I{78CA3586-0715-4862-B091-200565E3BC87}
Publisher=GlavSoft LLC.
EstimatedSize=0x402
UninstallString=MsiExec.exe /I{78CA3586-0715-4862-B091-200565E3BC87}
VersionMajor=0x2
VersionMinor=0x8
WindowsInstaller=0x1
Version=0x2080055
Language=0x409
DisplayName="TightVNC"


_raw:
2025-11-18 09:32:32.662
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}"
DisplayVersion=10.0.1.0
InstallDate=20251109
InstallLocation=C:\Program Files\SplunkUniversalForwarder\
InstallSource=C:\windows\TEMP\
ModifyPath=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
NoModify=0x1
Publisher=Splunk, Inc.
EstimatedSize=0x7b750
UninstallString=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
VersionMajor=0xa
VersionMinor=0x0
WindowsInstaller=0x1
Version=0xa000001
Language=0x409
DisplayName="UniversalForwarder"


_raw:
2025-11-18 09:32:32.600
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:32:32.537
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:32:32.459
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProPlus2019Volume - en-us"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProPlus2019Volume=en-us
UninstallString="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProPlus2019Volume.16_en-us_x-none culture=en-us version.16=16.0
ModifyPath="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" scenario=repair platform=x64 culture=en-us
NoRepair=0x0
NoRemove=0x0
NoModify=0x0
DisplayIcon=C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
DisplayName="Microsoft Office Professional Plus 2019 - en-us"
DisplayVersion=16.0.10346.20002
Publisher=Microsoft Corporation
InstallLocation=C:\Program Files\Microsoft Office
ClickToRunComponent=0x1


_raw:
2025-11-18 09:32:32.397
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:32:32.318
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService"
DisplayName="Mozilla Maintenance Service"
UninstallString="C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
DisplayIcon=C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe,0
DisplayVersion=144.0.2
Publisher=Mozilla
Comments=Mozilla Maintenance Service
NoModify=0x1
EstimatedSize=0x17b


_raw:
2025-11-18 09:32:32.240
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox"
Comments=Mozilla Firefox 144.0.2 (x64 en-US)
DisplayIcon=C:\Program Files\Mozilla Firefox\firefox.exe,0
DisplayName="Mozilla Firefox (x64 en-US)"
DisplayVersion=144.0.2
HelpLink=https://support.mozilla.org
InstallLocation=C:\Program Files\Mozilla Firefox
Publisher=Mozilla
UninstallString="C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
URLUpdateInfo=https://www.mozilla.org/firefox/144.0.2/releasenotes
URLInfoAbout=https://www.mozilla.org
NoModify=0x1
NoRepair=0x1
EstimatedSize=0x4ddda


_raw:
2025-11-18 09:32:32.178
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:32:32.115
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:32:32.037
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:32:31.975
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:32:31.928
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:32:31.865
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:32:31.803
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:32:31.725
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:32:31.662
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:32:31.584
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:31:30.068
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7F6E8FAE-C96A-4B24-B59B-A6E035504B26}"
DisplayVersion=9.4.0.0
InstallDate=20251109
InstallSource=C:\installer\
ModifyPath=MsiExec.exe /X{7F6E8FAE-C96A-4B24-B59B-A6E035504B26}
NoModify=0x1
Publisher=Mobatek
EstimatedSize=0x66c7
UninstallString=MsiExec.exe /X{7F6E8FAE-C96A-4B24-B59B-A6E035504B26}
VersionMajor=0x9
VersionMinor=0x4
WindowsInstaller=0x1
Version=0x9040000
Language=0x409
DisplayName="MobaXterm"


_raw:
2025-11-18 09:31:29.990
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:31:29.927
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:31:29.849
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:31:29.771
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:31:29.709
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Update"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft=Update
DisplayVersion=1.3.207.5
Version=1.3.207.5
NoRemove=0x1
DisplayName="Microsoft Edge Update"


_raw:
2025-11-18 09:31:29.630
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge"
DisplayName="Microsoft Edge"
DisplayVersion=142.0.3595.80
Version=142.0.3595.80
ModifyPath="C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /install appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=true&repairtype=windowsonlinerepair /installsource windows
UninstallString="C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\Installer\setup.exe" --uninstall --msedge --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files (x86)\Microsoft\Edge\Application
DisplayIcon=C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\msedge.exe,0
NoRepair=0x1
Publisher=Microsoft Corporation
InstallDate=20251114
VersionMajor=0xe0b
VersionMinor=0x50


_raw:
2025-11-18 09:31:29.552
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:31:29.474
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:31:29.396
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:31:29.318
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:31:29.224
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome"
DisplayName="Google Chrome"
UninstallString="C:\Program Files\Google\Chrome\Application\142.0.7444.163\Installer\setup.exe" --uninstall --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files\Google\Chrome\Application
DisplayIcon=C:\Program Files\Google\Chrome\Application\chrome.exe,0
NoModify=0x1
NoRepair=0x1
Publisher=Google LLC
Version=142.0.7444.163
DisplayVersion=142.0.7444.163
InstallDate=20251114
VersionMajor=0x1d14
VersionMinor=0xa3


_raw:
2025-11-18 09:31:29.146
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:31:29.052
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:31:28.959
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:31:28.865
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:31:28.771
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:31:28.615
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}"
DisplayVersion=1.1.2.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
Publisher=Cloudbase Solutions Srl
EstimatedSize=0x268e0
UninstallString=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
VersionMajor=0x1
VersionMinor=0x1
WindowsInstaller=0x1
Version=0x1010002
Language=0x409
DisplayName="Cloudbase-Init 1.1.2"


_raw:
2025-11-18 09:31:28.505
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9B265631-958D-415B-9925-53DEEC43E31D}"
DisplayVersion=100.0.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
Publisher=RedHat
EstimatedSize=0x13bd
UninstallString=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
VersionMajor=0x64
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x64000000
Language=0x409
DisplayName="QEMU guest agent"


_raw:
2025-11-18 09:31:28.396
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}"
DisplayVersion=10.0.1.0
InstallDate=20251109
InstallLocation=C:\Program Files\SplunkUniversalForwarder\
InstallSource=C:\windows\TEMP\
ModifyPath=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
NoModify=0x1
Publisher=Splunk, Inc.
EstimatedSize=0x7b750
UninstallString=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
VersionMajor=0xa
VersionMinor=0x0
WindowsInstaller=0x1
Version=0xa000001
Language=0x409
DisplayName="UniversalForwarder"


_raw:
2025-11-18 09:31:28.302
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:31:28.208
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:31:28.099
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:31:28.021
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService"
DisplayName="Mozilla Maintenance Service"
UninstallString="C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
DisplayIcon=C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe,0
DisplayVersion=144.0.2
Publisher=Mozilla
Comments=Mozilla Maintenance Service
NoModify=0x1
EstimatedSize=0x17b


_raw:
2025-11-18 09:31:27.928
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox"
Comments=Mozilla Firefox 144.0.2 (x64 en-US)
DisplayIcon=C:\Program Files\Mozilla Firefox\firefox.exe,0
DisplayName="Mozilla Firefox (x64 en-US)"
DisplayVersion=144.0.2
HelpLink=https://support.mozilla.org
InstallLocation=C:\Program Files\Mozilla Firefox
Publisher=Mozilla
UninstallString="C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
URLUpdateInfo=https://www.mozilla.org/firefox/144.0.2/releasenotes
URLInfoAbout=https://www.mozilla.org
NoModify=0x1
NoRepair=0x1
EstimatedSize=0x4ddda


_raw:
2025-11-18 09:31:27.849
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:31:27.771
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:31:27.693
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:31:27.630
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:31:27.552
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:31:27.473
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:31:27.411
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:31:27.333
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:31:27.255
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:31:27.145
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:31:26.413
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1"
Inno=Setup Version    REG_SZ    6.4.1
Inno=App Path    REG_SZ    C:\Program Files (x86)\WinSCP
InstallLocation=C:\Program Files (x86)\WinSCP\
Inno=Icon Group    REG_SZ    (Default)
Inno=User    REG_SZ    SYSTEM
Inno=Setup Type    REG_SZ    full
Inno=Selected Components    REG_SZ    main,shellext,pageant,puttygen,transl
Inno=Deselected Components    REG_SZ
Inno=Selected Tasks    REG_SZ    enableupdates,enableupdates\enablecollectusage,desktopicon,sendtohook,urlhandler
Inno=Deselected Tasks    REG_SZ    searchpath
Inno=Language    REG_SZ    en
DisplayName="WinSCP 6.5.4"
DisplayIcon=C:\Program Files (x86)\WinSCP\WinSCP.exe
UninstallString="C:\Program Files (x86)\WinSCP\unins000.exe"
QuietUninstallString="C:\Program Files (x86)\WinSCP\unins000.exe" /SILENT
DisplayVersion=6.5.4
Publisher=Martin Prikryl
URLInfoAbout=https://winscp.net/
HelpLink=https://winscp.net/forum/
URLUpdateInfo=https://winscp.net/eng/download.php
NoModify=0x1
NoRepair=0x1
InstallDate=20251109
MajorVersion=0x6
MinorVersion=0x5
VersionMajor=0x6
VersionMinor=0x5
EstimatedSize=0x1876e
Inno=CodeFile: SetupType    REG_SZ    typical


_raw:
2025-11-18 09:31:26.335
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:31:26.257
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:31:26.194
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:31:26.116
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:31:26.038
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Update"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft=Update
DisplayVersion=1.3.207.5
Version=1.3.207.5
NoRemove=0x1
DisplayName="Microsoft Edge Update"


_raw:
2025-11-18 09:31:25.960
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge"
DisplayName="Microsoft Edge"
DisplayVersion=142.0.3595.80
Version=142.0.3595.80
ModifyPath="C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /install appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=true&repairtype=windowsonlinerepair /installsource windows
UninstallString="C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\Installer\setup.exe" --uninstall --msedge --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files (x86)\Microsoft\Edge\Application
DisplayIcon=C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\msedge.exe,0
NoRepair=0x1
Publisher=Microsoft Corporation
InstallDate=20251114
VersionMajor=0xe0b
VersionMinor=0x50


_raw:
2025-11-18 09:31:25.882
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:31:25.819
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:31:25.741
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:31:25.679
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:31:25.600
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome"
DisplayName="Google Chrome"
UninstallString="C:\Program Files\Google\Chrome\Application\142.0.7444.175\Installer\setup.exe" --uninstall --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files\Google\Chrome\Application
DisplayIcon=C:\Program Files\Google\Chrome\Application\chrome.exe,0
NoModify=0x1
NoRepair=0x1
Publisher=Google LLC
Version=142.0.7444.175
DisplayVersion=142.0.7444.175
InstallDate=20251118
VersionMajor=0x1d14
VersionMinor=0xaf


_raw:
2025-11-18 09:31:25.522
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:31:25.460
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:31:25.382
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:31:25.319
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:31:25.241
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:31:25.132
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}"
DisplayVersion=1.1.2.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
Publisher=Cloudbase Solutions Srl
EstimatedSize=0x268e0
UninstallString=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
VersionMajor=0x1
VersionMinor=0x1
WindowsInstaller=0x1
Version=0x1010002
Language=0x409
DisplayName="Cloudbase-Init 1.1.2"


_raw:
2025-11-18 09:31:25.054
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ED41CD4E-33BB-400C-AB20-B09388DC83EF}"
DisplayVersion=0.83.0.0
InstallDate=20251109
InstallSource=C:\ProgramData\chocolatey\lib\putty.install\tools\
ModifyPath=MsiExec.exe /X{ED41CD4E-33BB-400C-AB20-B09388DC83EF}
NoModify=0x1
Publisher=Simon Tatham
EstimatedSize=0x1734
UninstallString=MsiExec.exe /X{ED41CD4E-33BB-400C-AB20-B09388DC83EF}
VersionMajor=0x0
VersionMinor=0x53
WindowsInstaller=0x1
Version=0x530000
Language=0x409
DisplayName="PuTTY release 0.83 (64-bit)"


_raw:
2025-11-18 09:31:24.960
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9B265631-958D-415B-9925-53DEEC43E31D}"
DisplayVersion=100.0.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
Publisher=RedHat
EstimatedSize=0x13bd
UninstallString=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
VersionMajor=0x64
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x64000000
Language=0x409
DisplayName="QEMU guest agent"


_raw:
2025-11-18 09:31:24.882
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-008C-0409-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}
NoModify=0x1
Publisher=Microsoft Corporation
EstimatedSize=0x30
SystemComponent=0x1
UninstallString=MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x409
DisplayName="Office 16 Click-to-Run Localization Component"


_raw:
2025-11-18 09:31:24.803
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-008C-0000-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}
NoModify=0x1
Publisher=Microsoft Corporation
EstimatedSize=0x7bcc
SystemComponent=0x1
UninstallString=MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x0
DisplayName="Office 16 Click-to-Run Extensibility Component"


_raw:
2025-11-18 09:31:24.710
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90160000-007E-0000-1000-0000000FF1CE}"
DisplayVersion=16.0.10346.20002
InstallDate=20251109
InstallSource=c:\program files\microsoft office\root\integration\
ModifyPath=MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}
Publisher=Microsoft Corporation
EstimatedSize=0x179c
SystemComponent=0x1
UninstallString=MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}
VersionMajor=0x10
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x1000286a
Language=0x0
DisplayName="Office 16 Click-to-Run Licensing Component"


_raw:
2025-11-18 09:31:24.632
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{78CA3586-0715-4862-B091-200565E3BC87}"
DisplayVersion=2.8.85.0
InstallDate=20251109
InstallSource=C:\ProgramData\chocolatey\lib\tightvnc\tools\
ModifyPath=MsiExec.exe /I{78CA3586-0715-4862-B091-200565E3BC87}
Publisher=GlavSoft LLC.
EstimatedSize=0x402
UninstallString=MsiExec.exe /I{78CA3586-0715-4862-B091-200565E3BC87}
VersionMajor=0x2
VersionMinor=0x8
WindowsInstaller=0x1
Version=0x2080055
Language=0x409
DisplayName="TightVNC"


_raw:
2025-11-18 09:31:24.538
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}"
DisplayVersion=10.0.1.0
InstallDate=20251109
InstallLocation=C:\Program Files\SplunkUniversalForwarder\
InstallSource=C:\windows\TEMP\
ModifyPath=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
NoModify=0x1
Publisher=Splunk, Inc.
EstimatedSize=0x7b750
UninstallString=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
VersionMajor=0xa
VersionMinor=0x0
WindowsInstaller=0x1
Version=0xa000001
Language=0x409
DisplayName="UniversalForwarder"


_raw:
2025-11-18 09:31:24.460
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:31:24.397
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:31:24.304
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProPlus2019Volume - en-us"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ProPlus2019Volume=en-us
UninstallString="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProPlus2019Volume.16_en-us_x-none culture=en-us version.16=16.0
ModifyPath="C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" scenario=repair platform=x64 culture=en-us
NoRepair=0x0
NoRemove=0x0
NoModify=0x0
DisplayIcon=C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
DisplayName="Microsoft Office Professional Plus 2019 - en-us"
DisplayVersion=16.0.10346.20002
Publisher=Microsoft Corporation
InstallLocation=C:\Program Files\Microsoft Office
ClickToRunComponent=0x1


_raw:
2025-11-18 09:31:24.241
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:31:24.164
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService"
DisplayName="Mozilla Maintenance Service"
UninstallString="C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
DisplayIcon=C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe,0
DisplayVersion=144.0.2
Publisher=Mozilla
Comments=Mozilla Maintenance Service
NoModify=0x1
EstimatedSize=0x17b


_raw:
2025-11-18 09:31:24.068
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox"
Comments=Mozilla Firefox 144.0.2 (x64 en-US)
DisplayIcon=C:\Program Files\Mozilla Firefox\firefox.exe,0
DisplayName="Mozilla Firefox (x64 en-US)"
DisplayVersion=144.0.2
HelpLink=https://support.mozilla.org
InstallLocation=C:\Program Files\Mozilla Firefox
Publisher=Mozilla
UninstallString="C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
URLUpdateInfo=https://www.mozilla.org/firefox/144.0.2/releasenotes
URLInfoAbout=https://www.mozilla.org
NoModify=0x1
NoRepair=0x1
EstimatedSize=0x4ddda


_raw:
2025-11-18 09:31:24.006
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:31:23.943
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:31:23.865
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:31:23.787
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:31:23.724
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:31:23.646
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:31:23.584
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:31:23.505
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:31:23.443
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:31:23.365
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:29:54.067
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:29:53.972
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:29:53.879
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:29:53.785
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:29:53.691
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Update"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft=Update
DisplayVersion=1.3.207.5
Version=1.3.207.5
NoRemove=0x1
DisplayName="Microsoft Edge Update"


_raw:
2025-11-18 09:29:53.582
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge"
DisplayName="Microsoft Edge"
DisplayVersion=142.0.3595.80
Version=142.0.3595.80
ModifyPath="C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /install appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=true&repairtype=windowsonlinerepair /installsource windows
UninstallString="C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\Installer\setup.exe" --uninstall --msedge --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files (x86)\Microsoft\Edge\Application
DisplayIcon=C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\msedge.exe,0
NoRepair=0x1
Publisher=Microsoft Corporation
InstallDate=20251114
VersionMajor=0xe0b
VersionMinor=0x50


_raw:
2025-11-18 09:29:53.472
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:29:53.379
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:29:53.269
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:29:53.160
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:29:53.051
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome"
DisplayName="Google Chrome"
UninstallString="C:\Program Files\Google\Chrome\Application\142.0.7444.163\Installer\setup.exe" --uninstall --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files\Google\Chrome\Application
DisplayIcon=C:\Program Files\Google\Chrome\Application\chrome.exe,0
NoModify=0x1
NoRepair=0x1
Publisher=Google LLC
Version=142.0.7444.163
DisplayVersion=142.0.7444.163
InstallDate=20251115
VersionMajor=0x1d14
VersionMinor=0xa3


_raw:
2025-11-18 09:29:52.973
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:29:52.879
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:29:52.785
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:29:52.691
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:29:52.596
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:29:52.456
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}"
DisplayVersion=1.1.2.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
Publisher=Cloudbase Solutions Srl
EstimatedSize=0x268e0
UninstallString=MsiExec.exe /I{ED85F19F-057A-4EE6-BC8D-F576DEACE78D}
VersionMajor=0x1
VersionMinor=0x1
WindowsInstaller=0x1
Version=0x1010002
Language=0x409
DisplayName="Cloudbase-Init 1.1.2"


_raw:
2025-11-18 09:29:52.346
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9B265631-958D-415B-9925-53DEEC43E31D}"
DisplayVersion=100.0.0
InstallDate=20220621
InstallSource=C:\UnattendResources\
ModifyPath=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
Publisher=RedHat
EstimatedSize=0x13bd
UninstallString=MsiExec.exe /I{9B265631-958D-415B-9925-53DEEC43E31D}
VersionMajor=0x64
VersionMinor=0x0
WindowsInstaller=0x1
Version=0x64000000
Language=0x409
DisplayName="QEMU guest agent"


_raw:
2025-11-18 09:29:52.237
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}"
DisplayVersion=10.0.1.0
InstallDate=20251109
InstallLocation=C:\Program Files\SplunkUniversalForwarder\
InstallSource=C:\windows\TEMP\
ModifyPath=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
NoModify=0x1
Publisher=Splunk, Inc.
EstimatedSize=0x7b750
UninstallString=MsiExec.exe /X{13A2796E-E4EB-4F69-8A1F-24A1D76DC0F7}
VersionMajor=0xa
VersionMinor=0x0
WindowsInstaller=0x1
Version=0xa000001
Language=0x409
DisplayName="UniversalForwarder"


_raw:
2025-11-18 09:29:52.143
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:29:52.050
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:29:51.971
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:29:51.862
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService"
DisplayName="Mozilla Maintenance Service"
UninstallString="C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
DisplayIcon=C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe,0
DisplayVersion=144.0.2
Publisher=Mozilla
Comments=Mozilla Maintenance Service
NoModify=0x1
EstimatedSize=0x17b


_raw:
2025-11-18 09:29:51.768
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox"
Comments=Mozilla Firefox 144.0.2 (x64 en-US)
DisplayIcon=C:\Program Files\Mozilla Firefox\firefox.exe,0
DisplayName="Mozilla Firefox (x64 en-US)"
DisplayVersion=144.0.2
HelpLink=https://support.mozilla.org
InstallLocation=C:\Program Files\Mozilla Firefox
Publisher=Mozilla
UninstallString="C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
URLUpdateInfo=https://www.mozilla.org/firefox/144.0.2/releasenotes
URLInfoAbout=https://www.mozilla.org
NoModify=0x1
NoRepair=0x1
EstimatedSize=0x4ddda


_raw:
2025-11-18 09:29:51.659
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:29:51.565
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:29:51.456
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:29:51.362
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:29:51.253
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:29:51.159
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:29:51.065
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:29:50.940
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:29:50.831
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:29:50.659
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"


_raw:
2025-11-18 09:29:39.866
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1"
Inno=Setup Version    REG_SZ    6.4.1
Inno=App Path    REG_SZ    C:\Program Files (x86)\WinSCP
InstallLocation=C:\Program Files (x86)\WinSCP\
Inno=Icon Group    REG_SZ    (Default)
Inno=User    REG_SZ    SYSTEM
Inno=Setup Type    REG_SZ    full
Inno=Selected Components    REG_SZ    main,shellext,pageant,puttygen,transl
Inno=Deselected Components    REG_SZ
Inno=Selected Tasks    REG_SZ    enableupdates,enableupdates\enablecollectusage,desktopicon,sendtohook,urlhandler
Inno=Deselected Tasks    REG_SZ    searchpath
Inno=Language    REG_SZ    en
DisplayName="WinSCP 6.5.4"
DisplayIcon=C:\Program Files (x86)\WinSCP\WinSCP.exe
UninstallString="C:\Program Files (x86)\WinSCP\unins000.exe"
QuietUninstallString="C:\Program Files (x86)\WinSCP\unins000.exe" /SILENT
DisplayVersion=6.5.4
Publisher=Martin Prikryl
URLInfoAbout=https://winscp.net/
HelpLink=https://winscp.net/forum/
URLUpdateInfo=https://winscp.net/eng/download.php
NoModify=0x1
NoRepair=0x1
InstallDate=20251109
MajorVersion=0x6
MinorVersion=0x5
VersionMajor=0x6
VersionMinor=0x5
EstimatedSize=0x1876e
Inno=CodeFile: SetupType    REG_SZ    typical


_raw:
2025-11-18 09:29:39.803
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WIC"
NoRemove=0x1
DisplayName="WIC"


_raw:
2025-11-18 09:29:39.726
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SchedulingAgent"
DisplayName="SchedulingAgent"


_raw:
2025-11-18 09:29:39.647
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MPlayer2"
DisplayName="MPlayer2"


_raw:
2025-11-18 09:29:39.584
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MobileOptionPack"
DisplayName="MobileOptionPack"


_raw:
2025-11-18 09:29:39.506
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Update"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft=Update
DisplayVersion=1.3.207.5
Version=1.3.207.5
NoRemove=0x1
DisplayName="Microsoft Edge Update"


_raw:
2025-11-18 09:29:39.428
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge"
DisplayName="Microsoft Edge"
DisplayVersion=142.0.3595.80
Version=142.0.3595.80
ModifyPath="C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /install appguid={56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}&appname=Microsoft%20Edge&needsadmin=true&repairtype=windowsonlinerepair /installsource windows
UninstallString="C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\Installer\setup.exe" --uninstall --msedge --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files (x86)\Microsoft\Edge\Application
DisplayIcon=C:\Program Files (x86)\Microsoft\Edge\Application\142.0.3595.80\msedge.exe,0
NoRepair=0x1
Publisher=Microsoft Corporation
InstallDate=20251114
VersionMajor=0xe0b
VersionMinor=0x50


_raw:
2025-11-18 09:29:39.365
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IEData"
DisplayName="IEData"


_raw:
2025-11-18 09:29:39.303
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE5BAKEX"
DisplayName="IE5BAKEX"


_raw:
2025-11-18 09:29:39.224
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE4Data"
DisplayName="IE4Data"


_raw:
2025-11-18 09:29:39.162
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IE40"
DisplayName="IE40"


_raw:
2025-11-18 09:29:39.099
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome"
DisplayName="Google Chrome"
UninstallString="C:\Program Files\Google\Chrome\Application\142.0.7444.163\Installer\setup.exe" --uninstall --channel=stable --system-level --verbose-logging
InstallLocation=C:\Program Files\Google\Chrome\Application
DisplayIcon=C:\Program Files\Google\Chrome\Application\chrome.exe,0
NoModify=0x1
NoRepair=0x1
Publisher=Google LLC
Version=142.0.7444.163
DisplayVersion=142.0.7444.163
InstallDate=20251115
VersionMajor=0x1d14
VersionMinor=0xa3


_raw:
2025-11-18 09:29:39.021
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Fontcore"
DisplayName="Fontcore"


_raw:
2025-11-18 09:29:38.959
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DXM_Runtime"
DisplayName="DXM_Runtime"


_raw:
2025-11-18 09:29:38.896
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DirectDrawEx"
DisplayName="DirectDrawEx"


_raw:
2025-11-18 09:29:38.834
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Connection Manager"
SystemComponent=0x1
DisplayName="Connection Manager"


_raw:
2025-11-18 09:29:38.756
Installed application enumerated from "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AddressBook"
DisplayName="AddressBook"