Quantcast
Channel: Forensic Artifacts » Cloud Based
Viewing all articles
Browse latest Browse all 10

Google Drive

$
0
0

Matt Nelson

Google Drive artifacts based on a default install. The Google Drive install is really noisy on the registry entries.

Per Google:

With Google Drive, you can:
Create and collaborate. Google Docs is built right into Google Drive, so you can work with others in real time on documents, spreadsheets and presentations. Once you choose to share content with others, you can add and reply to comments on anything (PDF, image, video file, etc.) and receive notifications when other people comment on shared items.

Store everything safely and access it anywhere (especially while on the go). All your stuff is just… there. You can access your stuff from anywhere—on the web, in your home, at the office, while running errands and from all of your devices. You can install Drive on your Mac or PC and can download the Drive app to your Android phone or tablet. We’re also working hard on a Drive app for your iOS devices. And regardless of platform, blind users can access Drive with a screen reader.

Google Drive sync folder:
C:\Documents and Settings\[username]\My Documents\Google Drive

HKLM\SOFTWARE\Classes\AppID\GoogleUpdate.exe

HKLM\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.google.oneclickctrl.9
HKLM\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.google.update3webcontrol.3

HKLM\SOFTWARE\Classes\Google.OneClickCtrl.9
HKLM\SOFTWARE\Classes\Google.OneClickCtrl.9\CLSID
HKLM\SOFTWARE\Classes\Google.OneClickProcessLauncherMachine
HKLM\SOFTWARE\Classes\Google.OneClickProcessLauncherMachine\CLSID
HKLM\SOFTWARE\Classes\Google.OneClickProcessLauncherMachine\CurVer
HKLM\SOFTWARE\Classes\Google.OneClickProcessLauncherMachine.1.0
HKLM\SOFTWARE\Classes\Google.OneClickProcessLauncherMachine.1.0\CLSID
HKLM\SOFTWARE\Classes\Google.Update3WebControl.3
HKLM\SOFTWARE\Classes\Google.Update3WebControl.3\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.CoCreateAsync
HKLM\SOFTWARE\Classes\GoogleUpdate.CoCreateAsync\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.CoCreateAsync\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.CoCreateAsync.1.0
HKLM\SOFTWARE\Classes\GoogleUpdate.CoCreateAsync.1.0\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass.1
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass.1\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreMachineClass
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreMachineClass\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreMachineClass\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreMachineClass.1
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreMachineClass.1\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.CredentialDialogMachine
HKLM\SOFTWARE\Classes\GoogleUpdate.CredentialDialogMachine\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.CredentialDialogMachine\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.CredentialDialogMachine.1.0
HKLM\SOFTWARE\Classes\GoogleUpdate.CredentialDialogMachine.1.0\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine.1.0
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine.1.0\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachineFallback
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachineFallback\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachineFallback\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachineFallback.1.0
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachineFallback.1.0\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassSvc
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassSvc\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassSvc\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassSvc.1.0
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassSvc.1.0\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.ProcessLauncher
HKLM\SOFTWARE\Classes\GoogleUpdate.ProcessLauncher\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.ProcessLauncher\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.ProcessLauncher.1.0
HKLM\SOFTWARE\Classes\GoogleUpdate.ProcessLauncher.1.0\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3COMClassService
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3COMClassService\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3COMClassService\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3COMClassService.1.0
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3COMClassService.1.0\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachine
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachine\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachine\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachine.1.0
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachine.1.0\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachineFallback
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachineFallback\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachineFallback\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachineFallback.1.0
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachineFallback.1.0\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebSvc
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebSvc\CLSID
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebSvc\CurVer
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebSvc.1.0
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebSvc.1.0\CLSID
HKLM\SOFTWARE\Microsoft\ESENT\Process\googledrivesync
HKLM\SOFTWARE\Microsoft\ESENT\Process\googledrivesync\DEBUG

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveBlacklistedOverlay
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSharedOverlay
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSyncedOverlay
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSyncingOverlay

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe
HKLM\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3
HKLM\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3\MimeTypes
HKLM\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3\MimeTypes\application/x-vnd.google.update3webcontrol.3
HKLM\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9
HKLM\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9\MimeTypes
HKLM\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9\MimeTypes\application/x-vnd.google.oneclickctrl.9
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\Google\Drive
HKLM\SOFTWARE\Google\Update
HKLM\SOFTWARE\Google\Update\Clients
HKLM\SOFTWARE\Google\Update\Clients\{3C122445-AECE-4309-90B7-85A6AEF42AC0}
HKLM\SOFTWARE\Google\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}
HKLM\SOFTWARE\Google\Update\ClientState
HKLM\SOFTWARE\Google\Update\ClientState\{3C122445-AECE-4309-90B7-85A6AEF42AC0}
HKLM\SOFTWARE\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}
HKLM\SOFTWARE\Google\Update\ClientStateMedium
HKLM\SOFTWARE\Google\Update\ClientStateMedium\{3C122445-AECE-4309-90B7-85A6AEF42AC0}
HKLM\SOFTWARE\Google\Update\network
HKLM\SOFTWARE\Google\Update\network\secure
HKLM\SOFTWARE\Google\Update\uid
HKLM\SOFTWARE\Google\Update\UsageStats
HKLM\SOFTWARE\Google\Update\UsageStats\Daily
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gdoc
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gdraw
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gform
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.glink
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gsheet
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gslides
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gtable
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdoc
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdoc\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdoc\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdoc\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdoc\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdraw
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdraw\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdraw\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdraw\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdraw\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gform
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gform\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gform\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gform\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gform\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.glink
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.glink\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.glink\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.glink\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.glink\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gsheet
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gsheet\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gsheet\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gsheet\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gsheet\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gslides
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gslides\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gslides\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gslides\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gslides\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gtable
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gtable\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gtable\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gtable\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gtable\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\Local Settings
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\Local Settings\Software
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\Local Settings\Software\Microsoft
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\Local Settings\Software\Microsoft\Windows
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google\Cloud Connect for Microsoft Office
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google\Cloud Connect for Microsoft Office\2.0
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google\Drive
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google\Update
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google\Update\ClientState
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google\Update\ClientState\{3C122445-AECE-4309-90B7-85A6AEF42AC0}
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google\Update\proxy
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gdoc
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gdraw
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gform
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.glink
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gsheet
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gslides
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gtable
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdoc
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdoc\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdoc\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdoc\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdoc\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdraw
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdraw\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdraw\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdraw\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdraw\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gform
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gform\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gform\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gform\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gform\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.glink
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.glink\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.glink\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.glink\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.glink\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gsheet
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gsheet\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gsheet\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gsheet\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gsheet\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gslides
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gslides\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gslides\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gslides\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gslides\shell\open\command
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gtable
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gtable\DefaultIcon
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gtable\shell
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gtable\shell\open
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gtable\shell\open\command

HKLM\SOFTWARE\Classes\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}\VersionIndependentProgID\: “GoogleUpdate.CredentialDialogMachine”
HKLM\SOFTWARE\Classes\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}\ProgID\: “GoogleUpdate.CredentialDialogMachine.1.0″
HKLM\SOFTWARE\Classes\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}\LocalServer32\: “”C:\Program Files\Google\Update\1.3.21.111\GoogleUpdateOnDemand.exe”"
HKLM\SOFTWARE\Classes\CLSID\{25461599-633D-42B1-84FB-7CD68D026E53}\: “GoogleUpdate CredentialDialog”
HKLM\SOFTWARE\Classes\CLSID\{4AD5D8BA-976D-42BE-A47F-ADBC15F82D3C}\InprocHandler32\: “C:\Program Files\Google\Update\1.3.21.111\psmachine.dll”
HKLM\SOFTWARE\Classes\CLSID\{4AD5D8BA-976D-42BE-A47F-ADBC15F82D3C}\InprocHandler32\ThreadingModel: “Both”
HKLM\SOFTWARE\Classes\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\VersionIndependentProgID\: “GoogleUpdate.Update3COMClassService”
HKLM\SOFTWARE\Classes\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ProgID\: “GoogleUpdate.Update3COMClassService.1.0″
HKLM\SOFTWARE\Classes\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\: “Update3COMClass”
HKLM\SOFTWARE\Classes\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\AppID: “{4EB61BAC-A3B6-4760-9581-655041EF4D69}”
HKLM\SOFTWARE\Classes\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}\VersionIndependentProgID\: “GoogleUpdate.Update3WebSvc”
HKLM\SOFTWARE\Classes\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}\ProgID\: “GoogleUpdate.Update3WebSvc.1.0″
HKLM\SOFTWARE\Classes\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}\: “GoogleUpdate Update3Web”
HKLM\SOFTWARE\Classes\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}\AppID: “{9465B4B4-5216-4042-9A2C-754D3BCDC410}”
HKLM\SOFTWARE\Classes\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\VersionIndependentProgID\: “GoogleUpdate.Update3WebMachineFallback”
HKLM\SOFTWARE\Classes\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\ProgID\: “GoogleUpdate.Update3WebMachineFallback.1.0″
HKLM\SOFTWARE\Classes\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\LocalServer32\: “”C:\Program Files\Google\Update\1.3.21.111\GoogleUpdateOnDemand.exe”"
HKLM\SOFTWARE\Classes\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\Elevation\Enabled: 0×00000001
HKLM\SOFTWARE\Classes\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\Elevation\IconReference: “@C:\Program Files\Google\Update\1.3.21.111\goopdate.dll,-1004″
HKLM\SOFTWARE\Classes\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\: “GoogleUpdate Update3Web”
HKLM\SOFTWARE\Classes\CLSID\{598FE0E5-E02D-465D-9A9D-37974A28FD42}\LocalizedString: “@C:\Program Files\Google\Update\1.3.21.111\goopdate.dll,-3000″
HKLM\SOFTWARE\Classes\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\VersionIndependentProgID\: “GoogleUpdate.OnDemandCOMClassMachine”
HKLM\SOFTWARE\Classes\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\ProgID\: “GoogleUpdate.OnDemandCOMClassMachine.1.0″
HKLM\SOFTWARE\Classes\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\LocalServer32\: “”C:\Program Files\Google\Update\1.3.21.111\GoogleUpdateBroker.exe”"
HKLM\SOFTWARE\Classes\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\Elevation\Enabled: 0×00000001
HKLM\SOFTWARE\Classes\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\Elevation\IconReference: “@C:\Program Files\Google\Update\1.3.21.111\goopdate.dll,-1004″
HKLM\SOFTWARE\Classes\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\: “Google Update Broker Class Factory”
HKLM\SOFTWARE\Classes\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\LocalizedString: “@C:\Program Files\Google\Update\1.3.21.111\goopdate.dll,-3000″
HKLM\SOFTWARE\Classes\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}\VersionIndependentProgID\: “GoogleUpdate.CoCreateAsync”
HKLM\SOFTWARE\Classes\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}\ProgID\: “GoogleUpdate.CoCreateAsync.1.0″
HKLM\SOFTWARE\Classes\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}\LocalServer32\: “”C:\Program Files\Google\Update\1.3.21.111\GoogleUpdateBroker.exe”"
HKLM\SOFTWARE\Classes\CLSID\{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}\: “CoCreateAsync”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}\InProcServer32\: “C:\Program Files\Google\Drive\googledrivesync32.dll”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}\InProcServer32\ThreadingModel: “Apartment”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}\: “Google Drive Shell extension”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}\InProcServer32\: “C:\Program Files\Google\Drive\googledrivesync32.dll”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}\InProcServer32\ThreadingModel: “Apartment”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}\: “Google Drive Shell extension”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}\InProcServer32\: “C:\Program Files\Google\Drive\googledrivesync32.dll”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}\InProcServer32\ThreadingModel: “Apartment”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}\: “Google Drive Shell extension”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}\InProcServer32\: “C:\Program Files\Google\Drive\googledrivesync32.dll”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}\InProcServer32\ThreadingModel: “Apartment”
HKLM\SOFTWARE\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}\: “Google Drive Shell extension”
HKLM\SOFTWARE\Classes\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\VersionIndependentProgID\: “GoogleUpdate.Update3WebMachine”
HKLM\SOFTWARE\Classes\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\ProgID\: “GoogleUpdate.Update3WebMachine.1.0″
HKLM\SOFTWARE\Classes\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\LocalServer32\: “”C:\Program Files\Google\Update\1.3.21.111\GoogleUpdateBroker.exe”"
HKLM\SOFTWARE\Classes\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\Elevation\Enabled: 0×00000001
HKLM\SOFTWARE\Classes\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\Elevation\IconReference: “@C:\Program Files\Google\Update\1.3.21.111\goopdate.dll,-1004″
HKLM\SOFTWARE\Classes\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\: “Google Update Broker Class Factory”
HKLM\SOFTWARE\Classes\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\LocalizedString: “@C:\Program Files\Google\Update\1.3.21.111\goopdate.dll,-3000″
HKLM\SOFTWARE\Classes\CLSID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}\VersionIndependentProgID\: “GoogleUpdate.OnDemandCOMClassSvc”
HKLM\SOFTWARE\Classes\CLSID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}\ProgID\: “GoogleUpdate.OnDemandCOMClassSvc.1.0″
HKLM\SOFTWARE\Classes\CLSID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}\: “Google Update Legacy On Demand”
HKLM\SOFTWARE\Classes\CLSID\{9465B4B4-5216-4042-9A2C-754D3BCDC410}\AppID: “{9465B4B4-5216-4042-9A2C-754D3BCDC410}”
HKLM\SOFTWARE\Classes\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\VersionIndependentProgID\: “GoogleUpdate.CoreMachineClass”
HKLM\SOFTWARE\Classes\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\ProgID\: “GoogleUpdate.CoreMachineClass.1″
HKLM\SOFTWARE\Classes\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\LocalServer32\: “”C:\Program Files\Google\Update\1.3.21.111\GoogleUpdateOnDemand.exe”"
HKLM\SOFTWARE\Classes\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\Elevation\Enabled: 0×00000001
HKLM\SOFTWARE\Classes\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\Elevation\IconReference: “@C:\Program Files\Google\Update\1.3.21.111\goopdate.dll,-1004″
HKLM\SOFTWARE\Classes\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\: “Google Update Core Class”
HKLM\SOFTWARE\Classes\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\LocalizedString: “@C:\Program Files\Google\Update\1.3.21.111\goopdate.dll,-3000″
HKLM\SOFTWARE\Classes\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InprocServer32\: “C:\Program Files\Google\Update\1.3.21.111\psmachine.dll”
HKLM\SOFTWARE\Classes\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}\InprocServer32\ThreadingModel: “Both”
HKLM\SOFTWARE\Classes\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\VersionIndependentProgID\: “Google.OneClickProcessLauncherMachine”
HKLM\SOFTWARE\Classes\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\ProgID\: “Google.OneClickProcessLauncherMachine.1.0″
HKLM\SOFTWARE\Classes\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\LocalServer32\: “”C:\Program Files\Google\Update\1.3.21.111\GoogleUpdateBroker.exe”"
HKLM\SOFTWARE\Classes\CLSID\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\: “Google.OneClickProcessLauncher”
HKLM\SOFTWARE\Classes\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\VersionIndependentProgID\: “GoogleUpdate.ProcessLauncher”
HKLM\SOFTWARE\Classes\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\ProgID\: “GoogleUpdate.ProcessLauncher.1.0″
HKLM\SOFTWARE\Classes\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\LocalServer32\: “”C:\Program Files\Google\Update\1.3.21.111\GoogleUpdateOnDemand.exe”"
HKLM\SOFTWARE\Classes\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\: “Google Update Process Launcher Class”
HKLM\SOFTWARE\Classes\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\VersionIndependentProgID\: “GoogleUpdate.OnDemandCOMClassMachineFallback”
HKLM\SOFTWARE\Classes\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\ProgID\: “GoogleUpdate.OnDemandCOMClassMachineFallback.1.0″
HKLM\SOFTWARE\Classes\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\LocalServer32\: “”C:\Program Files\Google\Update\1.3.21.111\GoogleUpdateOnDemand.exe”"
HKLM\SOFTWARE\Classes\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\Elevation\Enabled: 0×00000001
HKLM\SOFTWARE\Classes\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\Elevation\IconReference: “@C:\Program Files\Google\Update\1.3.21.111\goopdate.dll,-1004″
HKLM\SOFTWARE\Classes\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\: “Google Update Legacy On Demand”
HKLM\SOFTWARE\Classes\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\LocalizedString: “@C:\Program Files\Google\Update\1.3.21.111\goopdate.dll,-3000″
HKLM\SOFTWARE\Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\ProgID\: “Google.Update3WebControl.3″
HKLM\SOFTWARE\Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32\: “C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll”
HKLM\SOFTWARE\Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32\ThreadingModel: “Apartment”
HKLM\SOFTWARE\Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\: “Google Update Plugin”
HKLM\SOFTWARE\Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\ProgID\: “Google.OneClickCtrl.9″
HKLM\SOFTWARE\Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32\: “C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll”
HKLM\SOFTWARE\Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32\ThreadingModel: “Apartment”
HKLM\SOFTWARE\Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\: “Google Update Plugin”
HKLM\SOFTWARE\Classes\CLSID\{E0730E95-4D82-4716-BF23-4F3AB3EF790D}\InProcServer32\: “C:\Program Files\Google\Update\1.3.21.111\psmachine.dll”
HKLM\SOFTWARE\Classes\CLSID\{E0730E95-4D82-4716-BF23-4F3AB3EF790D}\InProcServer32\ThreadingModel: “Both”
HKLM\SOFTWARE\Classes\CLSID\{E0730E95-4D82-4716-BF23-4F3AB3EF790D}\: “PSFactoryBuffer”
HKLM\SOFTWARE\Classes\CLSID\{E225E692-4B47-4777-9BED-4FD7FE257F0E}\VersionIndependentProgID\: “GoogleUpdate.CoreClass”
HKLM\SOFTWARE\Classes\CLSID\{E225E692-4B47-4777-9BED-4FD7FE257F0E}\ProgID\: “GoogleUpdate.CoreClass.1″
HKLM\SOFTWARE\Classes\CLSID\{E225E692-4B47-4777-9BED-4FD7FE257F0E}\: “Google Update Core Class”
HKLM\SOFTWARE\Classes\CLSID\{E225E692-4B47-4777-9BED-4FD7FE257F0E}\AppID: “{9465B4B4-5216-4042-9A2C-754D3BCDC410}”
HKLM\SOFTWARE\Classes\Installer\Features\5281A6F1F47442140961118674D148B7\GoogleDriveSync: “”
HKLM\SOFTWARE\Classes\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E\Complete: “”
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\SourceList\Net\1: “C:\Program Files\Google\Update\Install\{D7F3AEF7-4BC5-4983-A5AF-E1B25064D94D}\”
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\SourceList\Media\1: “;”
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\SourceList\PackageName: “gsync.msi”
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\SourceList\LastUsedSource: “n;1;C:\Program Files\Google\Update\Install\{D7F3AEF7-4BC5-4983-A5AF-E1B25064D94D}\”
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\ProductName: “Google Drive”
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\PackageCode: “1D98BDEE05D181240AC61326179C69CA”
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\Language: 0×00000409
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\Version: 0x01020C33
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\Assignment: 0×00000001
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\AdvertiseFlags: 0×00000184
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\ProductIcon: “C:\WINDOWS\Installer\{1F6A1825-474F-4124-9016-1168471D847B}\DriveIcon”
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\InstanceType: 0×00000000
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\AuthorizedLUAApp: 0×00000000
HKLM\SOFTWARE\Classes\Installer\Products\5281A6F1F47442140961118674D148B7\Clients: ‘:’
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\SourceList\Net\1: “C:\Program Files\Google\Update\1.3.21.111\”
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\SourceList\Media\1: “;”
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\SourceList\PackageName: “GoogleUpdateHelper.msi”
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\SourceList\LastUsedSource: “n;1;C:\Program Files\Google\Update\1.3.21.111\”
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\ProductName: “Google Update Helper”
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\PackageCode: “B3F59421B85A8E143AD1AFD59FFD1016″
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\Language: 0×00000409
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\Version: 0×01030015
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\Assignment: 0×00000001
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\AdvertiseFlags: 0×00000184
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\InstanceType: 0×00000000
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\AuthorizedLUAApp: 0×00000000
HKLM\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E\Clients: ‘:’
HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\DBFF5159BA0409649B38F48A1EE47E5F\93BAD29AC2E44034A96BCB446EB8552E: “”
HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\FB7EA8B9DDE3A0B48A2BB7CED13E83EA\5281A6F1F47442140961118674D148B7: “”
HKLM\SOFTWARE\Classes\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}\NumMethods\: “10″
HKLM\SOFTWARE\Classes\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}\: “IAppVersionWeb”
HKLM\SOFTWARE\Classes\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}\NumMethods\: “6″
HKLM\SOFTWARE\Classes\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}\: “IProcessLauncher”
HKLM\SOFTWARE\Classes\Interface\{1C642CED-CA3B-4013-A9DF-CA6CE5FF6503}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{1C642CED-CA3B-4013-A9DF-CA6CE5FF6503}\NumMethods\: “9″
HKLM\SOFTWARE\Classes\Interface\{1C642CED-CA3B-4013-A9DF-CA6CE5FF6503}\: “IProgressWndEvents”
HKLM\SOFTWARE\Classes\Interface\{247954F9-9EDC-4E68-8CC3-150C2B89EADF}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{247954F9-9EDC-4E68-8CC3-150C2B89EADF}\NumMethods\: “24″
HKLM\SOFTWARE\Classes\Interface\{247954F9-9EDC-4E68-8CC3-150C2B89EADF}\: “ICurrentState”
HKLM\SOFTWARE\Classes\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}\NumMethods\: “4″
HKLM\SOFTWARE\Classes\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}\: “IGoogleUpdate3WebSecurity”
HKLM\SOFTWARE\Classes\Interface\{2E629606-312A-482F-9B12-2C4ABF6F0B6D}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{2E629606-312A-482F-9B12-2C4ABF6F0B6D}\NumMethods\: “10″
HKLM\SOFTWARE\Classes\Interface\{2E629606-312A-482F-9B12-2C4ABF6F0B6D}\: “ICoCreateAsyncStatus”
HKLM\SOFTWARE\Classes\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\NumMethods\: “5″
HKLM\SOFTWARE\Classes\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\: “IGoogleUpdate”
HKLM\SOFTWARE\Classes\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}\NumMethods\: “8″
HKLM\SOFTWARE\Classes\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}\: “IGoogleUpdate3Web”
HKLM\SOFTWARE\Classes\Interface\{49D7563B-2DDB-4831-88C8-768A53833837}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{49D7563B-2DDB-4831-88C8-768A53833837}\NumMethods\: “13″
HKLM\SOFTWARE\Classes\Interface\{49D7563B-2DDB-4831-88C8-768A53833837}\: “IJobObserver”
HKLM\SOFTWARE\Classes\Interface\{4E223325-C16B-4EEB-AEDC-19AA99A237FA}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{4E223325-C16B-4EEB-AEDC-19AA99A237FA}\NumMethods\: “8″
HKLM\SOFTWARE\Classes\Interface\{4E223325-C16B-4EEB-AEDC-19AA99A237FA}\: “IRegistrationUpdateHook”
HKLM\SOFTWARE\Classes\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}\NumMethods\: “4″
HKLM\SOFTWARE\Classes\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}\: “IBrowserHttpRequest2″
HKLM\SOFTWARE\Classes\Interface\{5CCCB0EF-7073-4516-8028-4C628D0C8AAB}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{5CCCB0EF-7073-4516-8028-4C628D0C8AAB}\NumMethods\: “4″
HKLM\SOFTWARE\Classes\Interface\{5CCCB0EF-7073-4516-8028-4C628D0C8AAB}\: “IOneClickProcessLauncher”
HKLM\SOFTWARE\Classes\Interface\{6DB17455-4E85-46E7-9D23-E555E4B005AF}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{6DB17455-4E85-46E7-9D23-E555E4B005AF}\NumMethods\: “10″
HKLM\SOFTWARE\Classes\Interface\{6DB17455-4E85-46E7-9D23-E555E4B005AF}\: “IGoogleUpdate3″
HKLM\SOFTWARE\Classes\Interface\{909489C2-85A6-4322-AA56-D25278649D67}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{909489C2-85A6-4322-AA56-D25278649D67}\NumMethods\: “4″
HKLM\SOFTWARE\Classes\Interface\{909489C2-85A6-4322-AA56-D25278649D67}\: “IGoogleUpdateCore”
HKLM\SOFTWARE\Classes\Interface\{B3A47570-0A85-4AEA-8270-529D47899603}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{B3A47570-0A85-4AEA-8270-529D47899603}\NumMethods\: “4″
HKLM\SOFTWARE\Classes\Interface\{B3A47570-0A85-4AEA-8270-529D47899603}\: “ICredentialDialog”
HKLM\SOFTWARE\Classes\Interface\{BCDCB538-01C0-46D1-A6A7-52F4D021C272}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{BCDCB538-01C0-46D1-A6A7-52F4D021C272}\NumMethods\: “10″
HKLM\SOFTWARE\Classes\Interface\{BCDCB538-01C0-46D1-A6A7-52F4D021C272}\: “IAppVersion”
HKLM\SOFTWARE\Classes\Interface\{C6398F88-69CE-44AC-B6A7-1D3E2AA46679}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{C6398F88-69CE-44AC-B6A7-1D3E2AA46679}\NumMethods\: “14″
HKLM\SOFTWARE\Classes\Interface\{C6398F88-69CE-44AC-B6A7-1D3E2AA46679}\: “IAppWeb”
HKLM\SOFTWARE\Classes\Interface\{D999CE21-98B3-4894-BACB-A49A1D50848F}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{D999CE21-98B3-4894-BACB-A49A1D50848F}\NumMethods\: “40″
HKLM\SOFTWARE\Classes\Interface\{D999CE21-98B3-4894-BACB-A49A1D50848F}\: “IApp”
HKLM\SOFTWARE\Classes\Interface\{DAB1D343-1B2A-47F9-B445-93DC50704BFE}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{DAB1D343-1B2A-47F9-B445-93DC50704BFE}\NumMethods\: “4″
HKLM\SOFTWARE\Classes\Interface\{DAB1D343-1B2A-47F9-B445-93DC50704BFE}\: “ICoCreateAsync”
HKLM\SOFTWARE\Classes\Interface\{DCAB8386-4F03-4DBD-A366-D90BC9F68DE6}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{DCAB8386-4F03-4DBD-A366-D90BC9F68DE6}\NumMethods\: “10″
HKLM\SOFTWARE\Classes\Interface\{DCAB8386-4F03-4DBD-A366-D90BC9F68DE6}\: “IPackage”
HKLM\SOFTWARE\Classes\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}\NumMethods\: “24″
HKLM\SOFTWARE\Classes\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}\: “IAppBundleWeb”
HKLM\SOFTWARE\Classes\Interface\{FE908CDD-22BB-472A-9870-1A0390E42F36}\ProxyStubClsid32\: “{E0730E95-4D82-4716-BF23-4F3AB3EF790D}”
HKLM\SOFTWARE\Classes\Interface\{FE908CDD-22BB-472A-9870-1A0390E42F36}\NumMethods\: “41″
HKLM\SOFTWARE\Classes\Interface\{FE908CDD-22BB-472A-9870-1A0390E42F36}\: “IAppBundle”
HKLM\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.google.oneclickctrl.9\CLSID: “{C442AC41-9200-4770-8CC0-7CDB4F245C55}”
HKLM\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.google.update3webcontrol.3\CLSID: “{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}”
HKLM\SOFTWARE\Classes\Google.OneClickCtrl.9\CLSID\: “{C442AC41-9200-4770-8CC0-7CDB4F245C55}”
HKLM\SOFTWARE\Classes\Google.OneClickCtrl.9\: “Google Update Plugin”
HKLM\SOFTWARE\Classes\Google.OneClickProcessLauncherMachine\CurVer\: “Google.OneClickProcessLauncherMachine.1.0″
HKLM\SOFTWARE\Classes\Google.OneClickProcessLauncherMachine\CLSID\: “{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}”
HKLM\SOFTWARE\Classes\Google.OneClickProcessLauncherMachine\: “Google.OneClickProcessLauncher”
HKLM\SOFTWARE\Classes\Google.OneClickProcessLauncherMachine.1.0\CLSID\: “{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}”
HKLM\SOFTWARE\Classes\Google.OneClickProcessLauncherMachine.1.0\: “Google.OneClickProcessLauncher”
HKLM\SOFTWARE\Classes\Google.Update3WebControl.3\CLSID\: “{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}”
HKLM\SOFTWARE\Classes\Google.Update3WebControl.3\: “Google Update Plugin”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoCreateAsync\CurVer\: “GoogleUpdate.CoCreateAsync.1.0″
HKLM\SOFTWARE\Classes\GoogleUpdate.CoCreateAsync\CLSID\: “{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoCreateAsync\: “CoCreateAsync”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoCreateAsync.1.0\CLSID\: “{7DE94008-8AFD-4C70-9728-C6FBFFF6A73E}”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoCreateAsync.1.0\: “CoCreateAsync”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass\CurVer\: “GoogleUpdate.CoreClass.1″
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass\CLSID\: “{E225E692-4B47-4777-9BED-4FD7FE257F0E}”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass\: “Google Update Core Class”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass.1\CLSID\: “{E225E692-4B47-4777-9BED-4FD7FE257F0E}”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreClass.1\: “Google Update Core Class”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreMachineClass\CurVer\: “GoogleUpdate.CoreMachineClass.1″
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreMachineClass\CLSID\: “{9B2340A0-4068-43D6-B404-32E27217859D}”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreMachineClass\: “Google Update Core Class”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreMachineClass.1\CLSID\: “{9B2340A0-4068-43D6-B404-32E27217859D}”
HKLM\SOFTWARE\Classes\GoogleUpdate.CoreMachineClass.1\: “Google Update Core Class”
HKLM\SOFTWARE\Classes\GoogleUpdate.CredentialDialogMachine\CurVer\: “GoogleUpdate.CredentialDialogMachine.1.0″
HKLM\SOFTWARE\Classes\GoogleUpdate.CredentialDialogMachine\CLSID\: “{25461599-633D-42B1-84FB-7CD68D026E53}”
HKLM\SOFTWARE\Classes\GoogleUpdate.CredentialDialogMachine\: “GoogleUpdate CredentialDialog”
HKLM\SOFTWARE\Classes\GoogleUpdate.CredentialDialogMachine.1.0\CLSID\: “{25461599-633D-42B1-84FB-7CD68D026E53}”
HKLM\SOFTWARE\Classes\GoogleUpdate.CredentialDialogMachine.1.0\: “GoogleUpdate CredentialDialog”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine\CurVer\: “GoogleUpdate.OnDemandCOMClassMachine.1.0″
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine\CLSID\: “{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine\: “Google Update Broker Class Factory”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine.1.0\CLSID\: “{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachine.1.0\: “Google Update Broker Class Factory”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachineFallback\CurVer\: “GoogleUpdate.OnDemandCOMClassMachineFallback.1.0″
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachineFallback\CLSID\: “{B3D28DBD-0DFA-40E4-8071-520767BADC7E}”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachineFallback\: “Google Update Legacy On Demand”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachineFallback.1.0\CLSID\: “{B3D28DBD-0DFA-40E4-8071-520767BADC7E}”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassMachineFallback.1.0\: “Google Update Legacy On Demand”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassSvc\CurVer\: “GoogleUpdate.OnDemandCOMClassSvc.1.0″
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassSvc\CLSID\: “{9465B4B4-5216-4042-9A2C-754D3BCDC410}”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassSvc\: “Google Update Legacy On Demand”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassSvc.1.0\CLSID\: “{9465B4B4-5216-4042-9A2C-754D3BCDC410}”
HKLM\SOFTWARE\Classes\GoogleUpdate.OnDemandCOMClassSvc.1.0\: “Google Update Legacy On Demand”
HKLM\SOFTWARE\Classes\GoogleUpdate.ProcessLauncher\CurVer\: “GoogleUpdate.ProcessLauncher.1.0″
HKLM\SOFTWARE\Classes\GoogleUpdate.ProcessLauncher\CLSID\: “{ABC01078-F197-4B0B-ADBC-CFE684B39C82}”
HKLM\SOFTWARE\Classes\GoogleUpdate.ProcessLauncher\: “Google Update Process Launcher Class”
HKLM\SOFTWARE\Classes\GoogleUpdate.ProcessLauncher.1.0\CLSID\: “{ABC01078-F197-4B0B-ADBC-CFE684B39C82}”
HKLM\SOFTWARE\Classes\GoogleUpdate.ProcessLauncher.1.0\: “Google Update Process Launcher Class”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3COMClassService\CurVer\: “GoogleUpdate.Update3COMClassService.1.0″
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3COMClassService\CLSID\: “{4EB61BAC-A3B6-4760-9581-655041EF4D69}”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3COMClassService\: “Update3COMClass”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3COMClassService.1.0\CLSID\: “{4EB61BAC-A3B6-4760-9581-655041EF4D69}”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3COMClassService.1.0\: “Update3COMClass”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachine\CurVer\: “GoogleUpdate.Update3WebMachine.1.0″
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachine\CLSID\: “{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachine\: “Google Update Broker Class Factory”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachine.1.0\CLSID\: “{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachine.1.0\: “Google Update Broker Class Factory”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachineFallback\CurVer\: “GoogleUpdate.Update3WebMachineFallback.1.0″
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachineFallback\CLSID\: “{598FE0E5-E02D-465D-9A9D-37974A28FD42}”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachineFallback\: “GoogleUpdate Update3Web”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachineFallback.1.0\CLSID\: “{598FE0E5-E02D-465D-9A9D-37974A28FD42}”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebMachineFallback.1.0\: “GoogleUpdate Update3Web”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebSvc\CurVer\: “GoogleUpdate.Update3WebSvc.1.0″
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebSvc\CLSID\: “{534F5323-3569-4F42-919D-1E1CF93E5BF6}”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebSvc\: “GoogleUpdate Update3Web”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebSvc.1.0\CLSID\: “{534F5323-3569-4F42-919D-1E1CF93E5BF6}”
HKLM\SOFTWARE\Classes\GoogleUpdate.Update3WebSvc.1.0\: “GoogleUpdate Update3Web”
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\CLSID: “{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}”
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AAD4AE2E-D834-46D4-8B09-490FAC9C722B}\Policy: 0×00000003
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\AppName: “GoogleUpdateBroker.exe”
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\AppPath: “C:\Program Files\Google\Update\1.3.21.111″
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\Policy: 0×00000003
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\AppName: “GoogleUpdate.exe”
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\AppPath: “C:\Program Files\Google\Update”
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\Policy: 0×00000003
HKLM\SOFTWARE\Microsoft\SchedulingAgent\LastTaskRun: DC 07 06 00 02 00 1A 00 16 00 2B 00 01 00 00 00

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveBlacklistedOverlay\: “{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSharedOverlay\: “{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSyncedOverlay\: “{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSyncingOverlay\: “{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Google\Drive\: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Documents and Settings\All Users\Start Menu\Programs\Google Drive\: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\WINDOWS\Installer\{1F6A1825-474F-4124-9016-1168471D847B}\: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\DBFF5159BA0409649B38F48A1EE47E5F\93BAD29AC2E44034A96BCB446EB8552E: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\FB7EA8B9DDE3A0B48A2BB7CED13E83EA\5281A6F1F47442140961118674D148B7: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\31147057103B8FC40BC00441A364B1E9\5281A6F1F47442140961118674D148B7: “02:\Software\Google\Drive\InstallLocation”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\696B2AABC05D0E11D8D98044844210B9\5281A6F1F47442140961118674D148B7: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9507B717889AF294FAB1CD7FB08E90BA\93BAD29AC2E44034A96BCB446EB8552E: “02:\SOFTWARE\Google\Update\MsiStubRun”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9719419FE6AD44144B828FFA74467B4C\5281A6F1F47442140961118674D148B7: “02:\Software\Google\Update\Clients\{3C122445-AECE-4309-90B7-85A6AEF42AC0}\pv”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CD5429927288CB546839F6191C48B96B\5281A6F1F47442140961118674D148B7: “01:\Software\Google\Drive\Installed”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC2B796210505EB4B8D7F0D0961CE138\5281A6F1F47442140961118674D148B7: “01:\Software\Google\Drive\Installed”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED128963B05D0E1199E00524844210B9\5281A6F1F47442140961118674D148B7: “C:\Program Files\Google\Drive\googledrivesync32.dll”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\Patches\AllPatches: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\LocalPackage: “C:\WINDOWS\Installer\480de6.msi”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\AuthorizedCDFPrefix: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\Comments: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\Contact: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\DisplayVersion: “1.2.3123.250″
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\HelpLink: “http://www.google.com”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\HelpTelephone: “http://www.google.com”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\InstallDate: “20120626″
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\InstallLocation: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\InstallSource: “C:\Program Files\Google\Update\Install\{D7F3AEF7-4BC5-4983-A5AF-E1B25064D94D}\”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\ModifyPath: “MsiExec.exe /X{1F6A1825-474F-4124-9016-1168471D847B}”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\NoModify: 0×00000001
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\NoRepair: 0×00000001
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\Publisher: “Google, Inc.”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\Readme: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\Size: “”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\EstimatedSize: 0x0000307B
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\UninstallString: “MsiExec.exe /X{1F6A1825-474F-4124-9016-1168471D847B}”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\URLInfoAbout: “http://www.google.com”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\URLUpdateInfo: “http://www.google.com”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\VersionMajor: 0×00000001
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\VersionMinor: 0×00000002
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\WindowsInstaller: 0×00000001
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\Version: 0x01020C33
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\Language: 0×00000409
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\InstallProperties\DisplayName: “Google Drive”
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5281A6F1F47442140961118674D148B7\Features\GoogleDriveSync: “N5*]Mxxjg@5+6S)c0AnZLbNV5P4Kh(c2ZB9,lVnY!`b}dQ4Kh(JF[r9,lVnYA{Z'yLM)}8XU@WaP?)7h[0cF1*M-K=CN0hVlz^ccg&BJ0`CFI@Mtl4'Jr'0R"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\Patches\AllPatches: ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\LocalPackage: "C:\WINDOWS\Installer\480de0.msi"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\AuthorizedCDFPrefix: ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\Comments: ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\Contact: ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\DisplayVersion: "1.3.21.111"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\HelpLink: ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\HelpTelephone: ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\InstallDate: "20120626"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\InstallLocation: ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\InstallSource: "C:\Program Files\Google\Update\1.3.21.111\"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\ModifyPath: "MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\Publisher: "Google Inc."
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\Readme: ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\Size: ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\EstimatedSize: 0x0000001C
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\SystemComponent: 0x00000001
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\UninstallString: "MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\URLInfoAbout: ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\URLUpdateInfo: ""
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\VersionMajor: 0x00000001
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\VersionMinor: 0x00000003
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\WindowsInstaller: 0x00000001
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\Version: 0x01030015
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\Language: 0x00000409
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties\DisplayName: "Google Update Helper"

HKLM\SYSTEM\ControlSet001\Services\gupdate\Type: 0x00000010
HKLM\SYSTEM\ControlSet001\Services\gupdate\Start: 0x00000002
HKLM\SYSTEM\ControlSet001\Services\gupdate\ErrorControl: 0x00000001
HKLM\SYSTEM\ControlSet001\Services\gupdate\ImagePath: ""C:\Program Files\Google\Update\GoogleUpdate.exe" /svc"
HKLM\SYSTEM\ControlSet001\Services\gupdate\DisplayName: "Google Update Service (gupdate)"
HKLM\SYSTEM\ControlSet001\Services\gupdate\DependOnService: 'RPCSS'
HKLM\SYSTEM\ControlSet001\Services\gupdate\DependOnGroup: 00
HKLM\SYSTEM\ControlSet001\Services\gupdate\ObjectName: "LocalSystem"
HKLM\SYSTEM\ControlSet001\Services\gupdate\Description: "Keeps your Google software up to date. If this service is disabled or stopped, your Google software will not be kept up to date, meaning security vulnerabilities that may arise cannot be fixed and features may not work. This service uninstalls itself when there is no Google software using it."

HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gdoc\: "GoogleDrive.gdoc"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gdraw\: "GoogleDrive.gdraw"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gform\: "GoogleDrive.gform"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.glink\: "GoogleDrive.glink"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gsheet\: "GoogleDrive.gsheet"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gslides\: "GoogleDrive.gslides"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\.gtable\: "GoogleDrive.gtable"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdoc\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdoc\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-1"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdoc\: "Google document"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdraw\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdraw\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-2"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gdraw\: "Google drawing"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gform\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gform\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-3"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gform\: "Google form"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.glink\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.glink\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-4"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.glink\: "Google Drive link"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gsheet\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gsheet\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-5"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gsheet\: "Google spreadsheet"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gslides\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gslides\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-6"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gslides\: "Google presentation"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gtable\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gtable\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-7"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Classes\GoogleDrive.gtable\: "Google table"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google\Update\ClientState\{3C122445-AECE-4309-90B7-85A6AEF42AC0}\dr: "0"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google\Update\proxy\source: "direct"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google\Drive\Installed: "True"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003\Software\Google\Drive\OAuthToken: "xuNPWQPf/0WVf+24HY5jhJ/vMZrescsTk+ZBYzZi6zm/x4nr3wGqolr1GPiwi/mmf+IR/xvqmCI9IrHQ1p7B2QXSgwAfc7vaErDrTDcn+0UfbvoWwxjNZLtZ7WDPIFPLTPHIrOxNLYsCzY3v1PVSqCnDptSBxKP/eZhLjYrAerv+0Rqdt+fJbgGLlJrdYZBCyW91AAt4cqzSSqb7HXGc8eRXc7s6Gyct3LVt6uVwYZAqnxeZuKuSeUTVRVP0eVv7ksFQPicKOBur1hPsBi0/Jr/fryMfpTrHCFjzeRH5R+5c1LQQ07NweMf0SQ+IYqIbNzfM2bemp.........................................."
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gdoc\: "GoogleDrive.gdoc"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gdraw\: "GoogleDrive.gdraw"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gform\: "GoogleDrive.gform"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.glink\: "GoogleDrive.glink"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gsheet\: "GoogleDrive.gsheet"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gslides\: "GoogleDrive.gslides"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\.gtable\: "GoogleDrive.gtable"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdoc\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdoc\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-1"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdoc\: "Google document"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdraw\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdraw\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-2"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gdraw\: "Google drawing"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gform\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gform\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-3"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gform\: "Google form"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.glink\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.glink\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-4"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.glink\: "Google Drive link"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gsheet\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gsheet\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-5"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gsheet\: "Google spreadsheet"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gslides\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gslides\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-6"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gslides\: "Google presentation"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gtable\shell\open\command\: ""C:\Program Files\Google\Drive\googledrivesync.exe" --file="%1""
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gtable\DefaultIcon\: "C:\Program Files\Google\Drive\googledrivesync.exe,-7"
HKU\S-1-5-21-1993962763-1482476501-839522115-1003_Classes\GoogleDrive.gtable\: "Google table"

Google Drive sync folder:
C:\Documents and Settings\[username]\My Documents\Google Drive

Google Drive sync executable folder:
C:\Program Files\Google\Drive\googledrivesync.exe

Google Update executable folder:
C:\Program Files\Google\Update\GoogleUpdate.exe

http://googleblog.blogspot.com/2012/04/introducing-google-drive-yes-really.html

Regshot, ProcessHacker

Network particulars:

Google Drive connects to Google servers via SSL (TCP 443) encrypted. You are likely to see multiple googlesyncdrive.exe (pid) connected out.

googledrivesync.exe (pid1), computer.here.xxx >> ord08s05-in-f6.1e100.net, 443, TCP, Established
googledrivesync.exe (pid2), computer.here.xxx >> ord08s05-in-f6.1e100.net, 443, TCP, Established

Dumping the memory will allow you see the Google Account used for syncing.


Viewing all articles
Browse latest Browse all 10

Latest Images

Trending Articles





Latest Images