Trojan.Siggen30.58502

Technical Information

Malicious functions

Executes the following

'%WINDIR%\syswow64\netsh.exe' advfirewall firewall add rule name="GaituyaPhotoEditor" dir=in program="%ALLUSERSPROFILE%\GaituyaPhotoEditor\GaituyaPhotoEditor.exe" action=allow
'%WINDIR%\syswow64\netsh.exe' advfirewall firewall add rule name="GaituyaPhotoEditor" dir=out program="%ALLUSERSPROFILE%\GaituyaPhotoEditor\GaituyaPhotoEditor.exe" action=allow

Injects code into

the following user processes:

gaituyaphotoeditor.exe

Modifies file system

Creates the following files

%TEMP%\nsd2ba2.tmp\system.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\sr\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\sv-se\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\szl\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ta\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\te\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\tg\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\pl\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\th\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\tr\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\trs\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\uk\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ur\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\uz\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\vi\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\son\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\sq\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\sl\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\sk\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\si\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\my\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\nb-no\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ne-np\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\nl\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\nn-no\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\oc\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\wo\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\tl\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\pa-in\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\pt-pt\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\rm\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ro\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ru\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\scn\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\sco\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ms\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\pt-br\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitsansitalic.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\log.xml
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\zh-tw\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\imagemagick.rdf
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\license.txt
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\notice.txt
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\colors.xml
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\configure.xml
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\delegates.xml
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\xh\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\english.xml
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\gsdll64.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\gswin32.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\gswin32c.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\gswin64.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\gswin64c.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\locale.xml
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\liberationsans-regular.ttf
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\dll\antiwatermark.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\liberationsans-italic.ttf
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\liberationsans-bolditalic.ttf
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\liberationsans-bold.ttf
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitfixed.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitfixedbold.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitfixedbolditalic.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitfixeditalic.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitsans.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitsansbold.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\zh-cn\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\mr\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitsansbolditalic.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitserifbold.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitserifbolditalic.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitserifitalic.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitsymbol.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\license_foxit
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\license_liberation
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitdingbats.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\standard_fonts\foxitserif.pfb
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\gsdll32.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\mk\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\km\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\brx\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\bs\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ca\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\cak\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ckb\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\cs\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\treeitem-expanded.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\cy\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\de\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\dsb\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\el\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\en-ca\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\en-gb\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\en-us\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\bo\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\br\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\bn\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\bg\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\be\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-viewattachments.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-viewlayers.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-viewoutline.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-viewthumbnail.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-zoomin.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-zoomout.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\eo\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\da\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\treeitem-collapsed.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ach\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\af\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\an\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ar\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ast\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\az\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-sidebartoggle.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\locale.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ga-ie\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\lv\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\es-es\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\id\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\is\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\it\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ja\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ka\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\kab\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\es-ar\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\kk\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\kn\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ko\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\lij\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\lo\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\lt\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ltg\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\hye\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ia\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\hy-am\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\hu\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\hsb\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\et\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\eu\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\fa\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\ff\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\fi\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\fr\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\es-cl\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\meh\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\fy-nl\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\gl\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\gn\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\gu-in\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\he\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\hi-in\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\hr\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\es-mx\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\locale\gd\viewer.properties
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\39.png
%TEMP%\2f1cf401-1a1f-448d-9b33-d2e000c83072.tmp
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\msvcp140.dll
%APPDATA%\gaituyaphotoeditor\cache\cache_data\index
%APPDATA%\gaituyaphotoeditor\cache\cache_data\data_0
%APPDATA%\gaituyaphotoeditor\cache\cache_data\data_1
%APPDATA%\gaituyaphotoeditor\cache\cache_data\data_2
%APPDATA%\gaituyaphotoeditor\cache\cache_data\data_3
%APPDATA%\gaituyaphotoeditor\gpucache\index
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\改图鸭.lnk
%APPDATA%\gaituyaphotoeditor\gpucache\data_0
%APPDATA%\gaituyaphotoeditor\gpucache\data_2
%APPDATA%\gaituyaphotoeditor\gpucache\data_3
%APPDATA%\gaituyaphotoeditor\ba7d5bfe-d4d8-4f82-880a-2ffae7f2e00e.tmp
%APPDATA%\gaituyaphotoeditor\2222ba04-06a3-4ed6-95f1-a2c9927b7b5d.tmp
%APPDATA%\gaituyaphotoeditor\network\de8e9bd8-eb27-4a78-905c-c9de39844f0d.tmp
%APPDATA%\gaituyaphotoeditor\session storage\log
%APPDATA%\gaituyaphotoeditor\network\cookies-journal
%APPDATA%\gaituyaphotoeditor\network\cookies
%APPDATA%\gaituyaphotoeditor\code cache\wasm\index-dir\temp-index
%APPDATA%\gaituyaphotoeditor\code cache\wasm\index
%APPDATA%\gaituyaphotoeditor\code cache\js\index-dir\temp-index
%ALLUSERSPROFILE%\gaituyaphotoeditor\config.ini
%ALLUSERSPROFILE%\gaituyaphotoeditor\set.ini
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\改图鸭\改图鸭.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\改图鸭\卸载改图鸭.lnk
C:\users\public\desktop\改图鸭.lnk
%TEMP%\nsd2ba2.tmp\nsexec.dll
%APPDATA%\gaituyaphotoeditor\session storage\manifest-000001
%APPDATA%\gaituyaphotoeditor\gpucache\data_1
%TEMP%\nsd2ba2.tmp\stdutils.dll
%TEMP%\nsd2ba2.tmp\shellexecasuser.dll
%TEMP%\4260d5a5-0da3-47aa-a8fc-33016c6489ce.tmp.ico
%APPDATA%\gaituyaphotoeditor\local storage\leveldb\log
%APPDATA%\gaituyaphotoeditor\local storage\leveldb\manifest-000001
%APPDATA%\gaituyaphotoeditor\local storage\leveldb\000001.dbtmp
%APPDATA%\gaituyaphotoeditor\code cache\js\index
%ALLUSERSPROFILE%\gaituyaphotoeditor\licenses.chromium.html
%ALLUSERSPROFILE%\gaituyaphotoeditor\uninst.ep
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_000008
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\mime.xml
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_000001
%APPDATA%\gaituyaphotoeditor\code cache\js\af5701d88d9b429c_0
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_000009
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_00000a
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_00000b
%APPDATA%\gaituyaphotoeditor\code cache\js\ecfe74f2be05bf54_0
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_00000c
%APPDATA%\gaituyaphotoeditor\session storage\000001.dbtmp
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_00000d
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\statistics.json
%APPDATA%\gaituyaphotoeditor\code cache\js\3b34a9c174baea2f_0
%APPDATA%\gaituyaphotoeditor\code cache\js\f18e4fbb5804403e_0
%APPDATA%\hudundata\hudunimageconverter\hdsensorsanalytics.ini
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_00000e
%APPDATA%\gaituyaphotoeditor\local storage\leveldb\000003.log
%APPDATA%\gaituyaphotoeditor\code cache\js\0faa12daed793866_0
%APPDATA%\gaituyaphotoeditor\code cache\js\6255525d8b34418c_0
%APPDATA%\gaituyaphotoeditor\code cache\js\aabdbba9a4b41e3b_0
%APPDATA%\gaituyaphotoeditor\code cache\js\e570335691371b84_0
%APPDATA%\gaituyaphotoeditor\code cache\js\f9ea014ef990ce2a_0
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_000003
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_000004
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_000005
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_000006
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_000007
%APPDATA%\gaituyaphotoeditor\code cache\js\feeb8ba70e840a00_0
%APPDATA%\gaituyaphotoeditor\session storage\000003.log
%ALLUSERSPROFILE%\gaituyaphotoeditor\icudtl.dat
%APPDATA%\gaituyaphotoeditor\code cache\js\7929a3c849bc2d1e_0
%APPDATA%\gaituyaphotoeditor\fontlookuptablecache\font_unique_name_table.pb
%APPDATA%\gaituyaphotoeditor\code cache\js\6c1096c25cb55db6_0
%APPDATA%\gaituyaphotoeditor\code cache\js\2387a51bac10f5c2_0
%APPDATA%\gaituyaphotoeditor\code cache\js\8993255a59d761ce_0
%APPDATA%\gaituyaphotoeditor\code cache\js\3800a3b3d0062f3e_0
%APPDATA%\gaituyaphotoeditor\code cache\js\f6ed142ccc521b1e_0
%APPDATA%\gaituyaphotoeditor\cache\cache_data\f_000002
%APPDATA%\gaituyaphotoeditor\code cache\js\74f0d6cc3313b4db_0
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-secondarytoolbartoggle.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\v8_context_snapshot.bin
%ALLUSERSPROFILE%\gaituyaphotoeditor\uninst.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\13.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\14.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\15.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\16.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\17.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\18.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\vcruntime140_1.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\19.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\21.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\22.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\23.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\24.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\25.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\26.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\11.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\12.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\10.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\09.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\08.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\quantization-table.xml
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\srgb.icc
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\thresholds.xml
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\type-ghostscript.xml
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\type.xml
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\vcomp140.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\27.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\20.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\vcruntime140.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\02.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\03.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\04.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\05.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\06.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\07.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\policy.xml
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\01.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\imagemagick\magick.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\logo.ico
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\30.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\d3dcompiler_47.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\ffmpeg.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\libegl.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\libglesv2.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\vk_swiftshader.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\vulkan-1.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\28.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\gaituyaphotoeditor.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\inst.ep
%ALLUSERSPROFILE%\gaituyaphotoeditor\license
%ALLUSERSPROFILE%\gaituyaphotoeditor\version
%ALLUSERSPROFILE%\gaituyaphotoeditor\chrome_100_percent.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\chrome_200_percent.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\50.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\51.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\49.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\48.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\47.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\32.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\33.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\34.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\35.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\36.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\37.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\29.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\snapshot_blob.bin
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\38.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\41.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\42.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\43.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\44.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\45.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\46.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\31.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\start-animation\40.png
%APPDATA%\gaituyaphotoeditor\code cache\js\0f239883609d6ed6_0
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-search.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-bookmark.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\viewer.html
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\viewer.js
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\viewer.js.map
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\78-euc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\78-euc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\78-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\asposeconverter\pdfconsole.exe.config
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\78-rksj-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\78-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\78ms-rksj-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\78ms-rksj-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\83pv-rksj-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\90ms-rksj-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\90ms-rksj-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\debugger.js
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\viewer.css
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\build\pdf.worker.js.map
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\build\pdf.worker.js
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\build\pdf.sandbox.js.map
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\hdpdfreader.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdflib.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\asposeconverter\aspose.cells.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\asposeconverter\aspose.pdf.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\asposeconverter\aspose.slides.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\asposeconverter\aspose.words.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\90msp-rksj-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\78-rksj-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\asposeconverter\pdfconsole.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\asposeconverter\puboperate.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\asposeconverter\libssh.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\license
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\build\pdf.js
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\build\pdf.js.map
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\build\pdf.sandbox.js
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdfoperation.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\asposeconverter\pubmethod.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-cns1-4.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\cns-euc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\90pv-rksj-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-japan1-2.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-japan1-3.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-japan1-4.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-japan1-5.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-japan1-6.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-japan1-ucs2.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\90msp-rksj-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-korea1-0.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-korea1-2.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-korea1-ucs2.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\b5-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\b5-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\b5pc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\b5pc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-japan1-0.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-japan1-1.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-gb1-ucs2.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-gb1-5.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-gb1-4.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\add-rksj-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\add-rksj-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\add-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-cns1-0.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-cns1-1.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-cns1-2.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\90pv-rksj-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\hdlaunchsplash.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-cns1-3.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-cns1-6.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-cns1-ucs2.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-gb1-0.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-gb1-1.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-gb1-2.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-gb1-3.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\add-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-cns1-5.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\adobe-korea1-1.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\microsoft.windows.common-controls\comctl32.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\microsoft.vc90.crt\microsoft.vc90.crt.manifest
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\gu.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\he.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\hi.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\hr.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\hu.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\id.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\cs.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\it.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\kn.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\ko.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\lt.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\lv.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\ml.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\mr.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\fil.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\fr.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\fi.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\fa.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\et.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\releasenotes
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\af.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\am.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\ar.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\bg.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\bn.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\ms.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\ja.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\ca.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\de.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\el.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\en-gb.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\en-us.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\es-419.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\es.pak
%TEMP%\nsd2ba2.tmp\killprocdll.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\da.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\sw.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\microsoft.vc90.mfc\mfcm90.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\pl.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\pic_shuiyin.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\7zip\7z.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\7zip\7z.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\converttojpg.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\wicloader.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\imageprocess.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\nb.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\webp.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\microsoft.vc90.crt\msvcm90.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\microsoft.vc90.crt\msvcp90.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\microsoft.vc90.crt\msvcr90.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\microsoft.vc90.mfc\microsoft.vc90.mfc.manifest
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\microsoft.vc90.mfc\mfc90.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\microsoft.vc90.mfc\mfc90u.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\hdlaunchsplash.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\app.asar
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\cadtopdf.exe
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\zh-tw.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\zh-cn.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\pt-pt.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\ro.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\ru.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\sk.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\sl.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\sr.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\nl.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\convertertojpg\microsoft.vc90.mfc\mfcm90u.dll
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\sv.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\te.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\th.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\tr.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\uk.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\ur.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\vi.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\pt-br.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\locales\ta.pak
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ksc-euc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-presentationmode.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\cns1-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijispro-ucs2-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijispro-utf8-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijisx0213-utf32-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijisx0213-utf32-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijisx02132004-utf32-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijisx02132004-utf32-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis-utf16-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\uniks-ucs2-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\uniks-utf16-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\uniks-utf16-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\uniks-utf32-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\uniks-utf32-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\uniks-utf8-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\uniks-utf8-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis2004-utf8-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijispro-ucs2-hw-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis2004-utf8-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis2004-utf32-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis2004-utf32-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unigb-utf32-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unigb-utf8-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unigb-utf8-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis-ucs2-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis-ucs2-hw-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis-ucs2-hw-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\uniks-ucs2-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis-ucs2-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis-utf32-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis-utf32-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis-utf8-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis-utf8-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis2004-utf16-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis2004-utf16-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unigb-utf32-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unijis-utf16-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\findbarbutton-previous.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\cns1-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\annotation-comment.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-scrollvertical.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-scrollwrapped.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-selecttool.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-spreadeven.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-spreadnone.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-spreadodd.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\wp-symbol.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\shadow.png
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-currentoutlineitem.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-download.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-menuarrow.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-openfile.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-pagedown.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-pageup.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-rotatecw.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-scrollhorizontal.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-rotateccw.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-lastpage.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-handtool.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\annotation-insert.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\annotation-key.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\annotation-newparagraph.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\annotation-noicon.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\annotation-note.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\annotation-paragraph.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\annotation-check.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unigb-utf16-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\findbarbutton-next.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\grabbing.cur
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\loading-dark.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\loading-icon.gif
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\loading.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-documentproperties.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\secondarytoolbarbutton-firstpage.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\annotation-help.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\grab.cur
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\images\toolbarbutton-print.svg
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unigb-utf16-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unicns-ucs2-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbk2k-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbkp-euc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbkp-euc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbt-euc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbt-euc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbt-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\euc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbt-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbtpc-euc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbpc-euc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbpc-euc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkdla-b5-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkdla-b5-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbk-euc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbk2k-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbk-euc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gb-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gb-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\cns2-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ethk-b5-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ethk-b5-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\eten-b5-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\eten-b5-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\etenms-b5-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkdlb-b5-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gbtpc-euc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\etenms-b5-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ext-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ext-rksj-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ext-rksj-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ext-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gb-euc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\gb-euc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\cns2-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\euc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\cns-euc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unigb-ucs2-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkgccs-b5-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\license
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\nwp-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\nwp-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\rksj-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\rksj-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\roman.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkdlb-b5-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unicns-ucs2-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unicns-utf16-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unicns-utf16-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unicns-utf32-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unicns-utf32-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unicns-utf8-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unicns-utf8-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\kscpc-euc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\katakana.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\kscpc-euc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\kscms-uhc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\kscms-uhc-hw-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkm314-b5-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkm471-b5-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkm471-b5-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkscs-b5-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkscs-b5-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hankaku.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkgccs-b5-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\unigb-ucs2-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hiragana.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ksc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ksc-johab-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ksc-johab-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ksc-v.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\kscms-uhc-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\kscms-uhc-hw-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\hkm314-b5-h.bcmap
%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\sdk\pdf\web\cmaps\ksc-euc-v.bcmap
%APPDATA%\gaituyaphotoeditor\network\2eccfd20-62eb-428e-86f5-bc5a3684488a.tmp

Deletes the following files

%TEMP%\nsd2ba2.tmp\killprocdll.dll
%TEMP%\nsd2ba2.tmp\nsexec.dll
%TEMP%\nsd2ba2.tmp\shellexecasuser.dll
%TEMP%\nsd2ba2.tmp\stdutils.dll
%TEMP%\nsd2ba2.tmp\system.dll
%APPDATA%\gaituyaphotoeditor\code cache\js\index-dir\the-real-index~rfab99e.tmp

Moves the following files

from %APPDATA%\gaituyaphotoeditor\local storage\leveldb\000001.dbtmp to %APPDATA%\gaituyaphotoeditor\local storage\leveldb\current
from %APPDATA%\gaituyaphotoeditor\code cache\js\index-dir\temp-index to %APPDATA%\gaituyaphotoeditor\code cache\js\index-dir\the-real-index
from %APPDATA%\gaituyaphotoeditor\code cache\wasm\index-dir\temp-index to %APPDATA%\gaituyaphotoeditor\code cache\wasm\index-dir\the-real-index
from %APPDATA%\gaituyaphotoeditor\ba7d5bfe-d4d8-4f82-880a-2ffae7f2e00e.tmp to %APPDATA%\gaituyaphotoeditor\local state
from %APPDATA%\gaituyaphotoeditor\2222ba04-06a3-4ed6-95f1-a2c9927b7b5d.tmp to %APPDATA%\gaituyaphotoeditor\preferences
from %APPDATA%\gaituyaphotoeditor\network\de8e9bd8-eb27-4a78-905c-c9de39844f0d.tmp to %APPDATA%\gaituyaphotoeditor\network\network persistent state
from %APPDATA%\gaituyaphotoeditor\session storage\000001.dbtmp to %APPDATA%\gaituyaphotoeditor\session storage\current
from %APPDATA%\gaituyaphotoeditor\network\2eccfd20-62eb-428e-86f5-bc5a3684488a.tmp to %APPDATA%\gaituyaphotoeditor\network\transportsecurity
from %APPDATA%\gaituyaphotoeditor\code cache\js\index-dir\the-real-index to %APPDATA%\gaituyaphotoeditor\code cache\js\index-dir\the-real-index~rfab99e.tmp

Substitutes the following files

%APPDATA%\gaituyaphotoeditor\code cache\js\index-dir\the-real-index

Network activity

Connects to

're####ctor.gvt1.com':443
'ku######api.yiyongcad.com':443
'ce######ate.yiyongcad.com':443
'ae#####m.pptbest.com':443
'us##.##i.hudunsoft.com':443
'ic#######api.xunjietupian.com':443
'ce#######te.weiduruanjian.com':443
'h5.###tudashi.com':443
'dn#.google':443
'ap#.##p.baidu.com':443
'11#.#5.162.48':443
'17#.#04.135.123':443

TCP

Other

're####ctor.gvt1.com':443
'ku######api.yiyongcad.com':443
'us###.#eiduruanjian.com':443
'ce######ate.yiyongcad.com':443
'ae#####m.pptbest.com':443
'ic#######api.xunjietupian.com':443
'ic#######api.weiduruanjian.com':443
'ap#.##njiepdf.com':443
'dn#.google':443
'ap#.##p.baidu.com':443
'17#.#04.135.123':443
'11#.#5.162.48':443

UDP

DNS ASK re####ctor.gvt1.com
DNS ASK ap#.##p.baidu.com
DNS ASK dn#.google
DNS ASK h5.###tudashi.com
DNS ASK us##.##i.hudunsoft.com
DNS ASK ae#####m.pptbest.com
DNS ASK ga#########oeditor.weiduruanjian.com
DNS ASK ce#######te.weiduruanjian.com
DNS ASK ic#######api.weiduruanjian.com
DNS ASK vo####.#eiduruanjian.com
DNS ASK ae######.weiduruanjian.com
DNS ASK us###.#eiduruanjian.com
DNS ASK ku#######pi2.weiduruanjian.com
DNS ASK ap##.##iduruanjian.com
DNS ASK ga########toeditor.xunjiepdf.com
DNS ASK vo###.xunjiepdf.com
DNS ASK ap#.##njiepdf.com
DNS ASK ic#######api.xunjietupian.com
DNS ASK ce######ate.yiyongcad.com
DNS ASK ku######api.yiyongcad.com
DNS ASK sa##.#ap.baidu.com
'dn#.google':443

Miscellaneous

Searches for the following windows

ClassName: 'Chrome_MessageWindow' WindowName: '%APPDATA%\gaituyaphotoeditor'

Creates and executes the following

'%ALLUSERSPROFILE%\gaituyaphotoeditor\gaituyaphotoeditor.exe' 0
'%ALLUSERSPROFILE%\gaituyaphotoeditor\gaituyaphotoeditor.exe' --type=gpu-process --user-data-dir="%APPDATA%\gaituyaphotoeditor" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYA...
'%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\hdlaunchsplash.exe' %ALLUSERSPROFILE%\GaituyaPhotoEditor\resources\start-animation 80 20000
'%ALLUSERSPROFILE%\gaituyaphotoeditor\gaituyaphotoeditor.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --ignore-certificate-errors --ignore-certificate-errors --user-data-dir="%APPDATA%\gaituy...
'%ALLUSERSPROFILE%\gaituyaphotoeditor\gaituyaphotoeditor.exe' --type=renderer --user-data-dir="%APPDATA%\gaituyaphotoeditor" --app-path="%ALLUSERSPROFILE%\GaituyaPhotoEditor\resources\app.asar" --no-sandbox --no-zygote --disable-gpu-compositing --lang=en-...

Executes the following

'%WINDIR%\syswow64\netsh.exe' advfirewall firewall add rule name="GaituyaPhotoEditor" dir=in program="%ALLUSERSPROFILE%\GaituyaPhotoEditor\GaituyaPhotoEditor.exe" action=allow' (with hidden window)
'%WINDIR%\syswow64\netsh.exe' advfirewall firewall add rule name="GaituyaPhotoEditor" dir=out program="%ALLUSERSPROFILE%\GaituyaPhotoEditor\GaituyaPhotoEditor.exe" action=allow' (with hidden window)
'%ALLUSERSPROFILE%\gaituyaphotoeditor\resources\hdlaunchsplash.exe' %ALLUSERSPROFILE%\GaituyaPhotoEditor\resources\start-animation 80 20000' (with hidden window)

技术

术语

教育培训

误区

Technical Information

Curing recommendations

Free trial