Skip to content

Instantly share code, notes, and snippets.

@whitequark
Created July 26, 2024 03:59
Show Gist options
  • Save whitequark/a63c75da90ac2f8a40f2a51dec092683 to your computer and use it in GitHub Desktop.
Save whitequark/a63c75da90ac2f8a40f2a51dec092683 to your computer and use it in GitHub Desktop.
Every `GenericInstaller` in the Windows apppatch database (if your binary matches any of these you'll get an UAC prompt)
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Tarma Installer</APP_NAME>
<VENDOR type="xs:string">Tarma</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{22187a8c-2c98-41f6-8ed6-6f653fe134c7}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<INTERNAL_NAME type="xs:string">TSULoader</INTERNAL_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Installer Detection</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{a0267b0d-1556-47fa-96a5-224065343db5}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<COMPANY_NAME type="xs:string">*instal*</COMPANY_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Installer Detection</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{b99128bd-65d4-4969-ad0f-bba7ee2fd8e9}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<PRODUCT_NAME type="xs:string">*instal*</PRODUCT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Installer Detection</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{1939c994-6fbb-4d10-8f25-c94b2668c18b}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<FILE_DESCRIPTION type="xs:string">*インストー*</FILE_DESCRIPTION>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Installer Detection</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{aada05f8-b2a6-4084-9bac-3f34ee0dce1e}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<FILE_DESCRIPTION type="xs:string">*インストー*</FILE_DESCRIPTION>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Installer Detection</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{77d7c91e-cc42-489b-affb-cb13ff85e61e}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<PRODUCT_NAME type="xs:string">*インストー*</PRODUCT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Installer Detection</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{55d6b2c1-cc8f-4707-ba26-72777a6de897}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<PRODUCT_NAME type="xs:string">*インストー*</PRODUCT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Installer Detection</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{72caa196-c961-4449-affa-4171c3d8c81d}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<EXPORT_NAME type="xs:string">install.exe</EXPORT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Installer Detection</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{a9f603c2-b224-4a07-b6ea-a2bcc1a51297}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<FILE_DESCRIPTION type="xs:string">*instal*</FILE_DESCRIPTION>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Installer Detection</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{8405f65d-d1b5-4d11-9a0f-ebaa5ccb3b4f}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<ORIGINAL_FILENAME type="xs:string">*instal*</ORIGINAL_FILENAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Installer Detection</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{035d3ce1-a39b-4884-aa94-b5aaac108858}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<INTERNAL_NAME type="xs:string">*instal*</INTERNAL_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">InstallShield</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{bd65bd72-1df0-47f0-a102-6500e836433a}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<ORIGINAL_FILENAME type="xs:string">stub32i.exe*</ORIGINAL_FILENAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">InstallShield</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{8b170a23-524e-439d-869e-51571db169e7}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<_x0031_6BIT_DESCRIPTION type="xs:string">InstallShield Self-Extracting Stub Program</_x0031_6BIT_DESCRIPTION>
<_x0031_6BIT_MODULE_NAME type="xs:string">EXTSTUB</_x0031_6BIT_MODULE_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Netopsystems</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{c851e713-b4eb-48e3-9c00-a0697f626d94}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<COMPANY_NAME type="xs:string">Netopsystems AG</COMPANY_NAME>
<INTERNAL_NAME type="xs:string">Recomposer</INTERNAL_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Netopsystems</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{896adee0-0d66-4ef4-8397-b3d2c3500175}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<COMPANY_NAME type="xs:string">Netopsystems AG*</COMPANY_NAME>
<PRODUCT_NAME type="xs:string">*Optimizer*</PRODUCT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">OCX Dll Register</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{c44e9ad0-4f4d-48d4-8fff-4c1a1aa9beb1}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<EXPORT_NAME type="xs:string">OCXREG32.EXE</EXPORT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">OCX Dll Register</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{1e2e0738-face-435b-bf14-96b4f2ce25cd}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<EXPORT_NAME type="xs:string">REGOCX32.EXE</EXPORT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">RTPatch</APP_NAME>
<VENDOR type="xs:string">Pocket Soft, Inc.</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{edfc19df-363a-4419-b334-8b6bba9afda8}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<FILE_DESCRIPTION type="xs:string">RTPatch Executable</FILE_DESCRIPTION>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Setup</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{e218e318-f5c4-4e97-b198-8fccb1837540}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<COMPANY_NAME type="xs:string">*setup*</COMPANY_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Setup</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{90311299-c714-4367-be12-032f464885b2}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<PRODUCT_NAME type="xs:string">*setup*</PRODUCT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Setup</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{2b86dc25-8843-4bb3-a6c5-28f25b3e6657}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<FILE_DESCRIPTION type="xs:string">*セットアップ*</FILE_DESCRIPTION>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Setup</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{0b8cc0e0-b325-496b-961a-bde24e7214ac}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<FILE_DESCRIPTION type="xs:string">*セットアップ*</FILE_DESCRIPTION>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Setup</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{35bf919e-0495-48df-8e74-456384e34e74}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<FILE_DESCRIPTION type="xs:string">*setup*</FILE_DESCRIPTION>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Setup</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{475b3e82-4409-4364-992d-003c468e2036}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<ORIGINAL_FILENAME type="xs:string">*setup*</ORIGINAL_FILENAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Setup</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{ef104bd9-683c-4bf4-a5f5-78fbfcf2c93a}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<INTERNAL_NAME type="xs:string">*setup*</INTERNAL_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Setup</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{56a9abdd-3594-444a-a884-eba90caca87e}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<EXPORT_NAME type="xs:string">SETUP.EXE</EXPORT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">SFXPack</APP_NAME>
<VENDOR type="xs:string">Sony</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{ba82a6a1-c616-4013-82dc-fffe70717f26}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<EXPORT_NAME type="xs:string">sfxpack.exe</EXPORT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Uninstall</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{6b39d1b2-7883-4648-94bf-bd5109b4ac48}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<FILE_DESCRIPTION type="xs:string">*uninst*</FILE_DESCRIPTION>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Update</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{dc4d803f-de5a-4041-9f26-b7824aace9d3}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<COMPANY_NAME type="xs:string">*Update*</COMPANY_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Update</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{abffd2a7-69ed-49f5-9a32-2855803366c3}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<PRODUCT_NAME type="xs:string">*Update*</PRODUCT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Update</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{80747a4d-990f-4d9d-a9ab-d09d540bcb6f}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<FILE_DESCRIPTION type="xs:string">*アップデー*</FILE_DESCRIPTION>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Update</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{68541d21-d549-44d6-85d9-31394ca098f1}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<PRODUCT_NAME type="xs:string">*アップデー*</PRODUCT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Update</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{767a56fe-ce21-4e6f-a7f5-ddf314c776b0}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<FILE_DESCRIPTION type="xs:string">*Update*</FILE_DESCRIPTION>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Update</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{7ed89f95-873f-402b-a03d-43e639086992}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<ORIGINAL_FILENAME type="xs:string">*Update*</ORIGINAL_FILENAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">Update</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{6beda559-abd6-4cf6-a1f2-ac537aadf377}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<INTERNAL_NAME type="xs:string">*Update*</INTERNAL_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">WinSFX32</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{2edcd4f0-2e50-4100-8a07-0e178754539b}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<PRODUCT_NAME type="xs:string">WinSFX32* for Win32</PRODUCT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">WinZip</APP_NAME>
<VENDOR type="xs:string">WinZip Computing, Inc.</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{ca23cfd1-ea14-4554-8bed-203c0d6c3f1a}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<EXPORT_NAME type="xs:string">SI32*.SFX</EXPORT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">WinZip</APP_NAME>
<VENDOR type="xs:string">WinZip Computing, Inc.</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{0756446e-9af7-478a-8cc2-92741e514050}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<EXPORT_NAME type="xs:string">VW95SR*.SFX</EXPORT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">WISE</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{9fe03aeb-fde2-434d-9a87-583eead1531f}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<EXPORT_NAME type="xs:string">SIGNSTUB.EXE</EXPORT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">WISE</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{de647403-1998-4b27-bc49-df632b919450}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<EXPORT_NAME type="xs:string">STUB32.EXE</EXPORT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">WISE</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{ab6e73f7-3f09-4248-b60b-bbec59ffd668}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<EXPORT_NAME type="xs:string">STUB32</EXPORT_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*</NAME>
<WILDCARD_NAME type="xs:string">*</WILDCARD_NAME>
<APP_NAME type="xs:string">WISE</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{eae72db4-7824-46b8-9258-451bd296c6c4}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<_x0031_6BIT_DESCRIPTION type="xs:string">STUB.exe</_x0031_6BIT_DESCRIPTION>
<_x0031_6BIT_MODULE_NAME type="xs:string">GLBSSTUB</_x0031_6BIT_MODULE_NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*instal*</NAME>
<WILDCARD_NAME type="xs:string">*instal*</WILDCARD_NAME>
<APP_NAME type="xs:string">Installer Detection</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{6c3dff7f-feff-4e9b-9eb1-252651df86d4}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*patch*</NAME>
<WILDCARD_NAME type="xs:string">*patch*</WILDCARD_NAME>
<APP_NAME type="xs:string">Patch</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{9738bbf1-c495-4a04-a217-50356014b307}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*setup*</NAME>
<WILDCARD_NAME type="xs:string">*setup*</WILDCARD_NAME>
<APP_NAME type="xs:string">Setup</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{307a29ff-ad8d-4ecc-8869-11273cdbf47d}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*uninst*</NAME>
<WILDCARD_NAME type="xs:string">*uninst*</WILDCARD_NAME>
<APP_NAME type="xs:string">Uninstall</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{ffa48002-6b4c-475f-97b0-3e852c898bc5}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">*Update*</NAME>
<WILDCARD_NAME type="xs:string">*Update*</WILDCARD_NAME>
<APP_NAME type="xs:string">Update</APP_NAME>
<VENDOR type="xs:string">UNKNOWN</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{049efb11-5dd9-4112-998a-335fd1e47d27}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">Lhaca*.exe</NAME>
<WILDCARD_NAME type="xs:string">Lhaca*.exe</WILDCARD_NAME>
<APP_NAME type="xs:string">Lhaca</APP_NAME>
<VENDOR type="xs:string">村山富男</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{6b6149ee-b7e3-48f0-8415-bb4c8888041f}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<UPTO_LINK_DATE type="xs:int">967839141</UPTO_LINK_DATE>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">serious_sam_ii_pc_demo*.exe</NAME>
<WILDCARD_NAME type="xs:string">serious_sam_ii_pc_demo*.exe</WILDCARD_NAME>
<APP_NAME type="xs:string">Serious Sam II</APP_NAME>
<VENDOR type="xs:string">Croteam Ltd.</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{b398fd43-39d9-408c-8530-3e5f3c413691}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
<SIZE type="xs:int">388551338</SIZE>
<LINK_DATE type="xs:int">1129284047</LINK_DATE>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
<EXE>
<NAME type="xs:string">artpschd.exe</NAME>
<APP_NAME type="xs:string">RTPatch</APP_NAME>
<VENDOR type="xs:string">Pocket Soft, Inc.</VENDOR>
<EXE_ID type="xs:string" baseType="xs:base64Binary">{15dae69e-b238-46b4-8b91-f229e7ddaa60}</EXE_ID>
<APP_ID type="xs:base64Binary" />
<MITIGATION_OS />
<RUNTIME_PLATFORM type="xs:int">37</RUNTIME_PLATFORM>
<MATCHING_FILE>
<NAME type="xs:string">*</NAME>
</MATCHING_FILE>
<FLAG_REF>
<NAME type="xs:string">GenericInstaller</NAME>
<FLAG_TAGID type="xs:int">201730</FLAG_TAGID>
</FLAG_REF>
</EXE>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment