File details Download PDF Report | |
---|---|
File type: | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows |
File size: | 1058.00 KB (1083392 bytes) |
Compile time: | 2018-05-08 02:25:24 |
MD5: | e432274f6128d2647009934f821d0ea0 |
SHA1: | 73d15d44cff1a21c0415b9412b6f9153c8afa75d |
SHA256: | 424078f75ba65e4e76e952d2e185bebb235d40395c35e4e36c933e8323e28c4c |
Import hash: | f34d5f2d4577ed6d9ceec516c1f5a744 |
Sections 3 | .text .rsrc .reloc |
Directories 3 | import resource relocation |
First submission: | 2018-05-18 16:00:03 |
Last submission: | 2018-05-18 16:00:03 |
Filename detected: |
- Invoice_tr2018.exe (1) |
URL file hosting |
---|
hXXp://qualityoflife-lb.com/crypted/Invoice_tr2018.exe![]() |
Antivirus Report | |||
---|---|---|---|
Report Date | Detection Ratio | Permalink | Update |
2018-05-09 16:32:27 | [23/67] | ![]() |
PE Sections 2 suspicious | |||||
---|---|---|---|---|---|
Name | VAddress | VSize | Size | MD5 | SHA1 |
.text | 0x2000 | 0xef894 | 981504 | f329f58c208ef9dbf0ca473729399385 | 1d52474309e6b3766974e42c98034ad3ccf97ddb |
.rsrc | 0xf2000 | 0x18960 | 100864 | ac04e475b7d6157ca348e81f638f66ee | 37c8ee6a06dc03ec080f8aeb1f861459115c1db9 |
.reloc | 0x10c000 | 0xc | 512 | 330273cc7d67303b16104bf9c42e5103 | bcecbe6f1fd563a34562f331b8fe9557062e35f6 |
PE Resources | |||||
---|---|---|---|---|---|
Name | Offset | Size | Language | Sublanguage | Data |
RT_ICON | 0x10a248 | 1128 | LANG_NEUTRAL | SUBLANG_NEUTRAL | |
RT_GROUP_ICON | 0x10a6b0 | 76 | LANG_NEUTRAL | SUBLANG_NEUTRAL | |
RT_VERSION | 0x10a6fc | 612 | LANG_NEUTRAL | SUBLANG_NEUTRAL |
- API Alert
- Anti Debug
Meta Info | |
---|---|
LegalCopyright: | |
Assembly Version: | 0.0.0.0 |
InternalName: | Invoice_tr2018.exe |
FileVersion: | 0.0.0.0 |
FileDescription: | |
Translation: | 0x0000 0x04b0 |
OriginalFilename: | Invoice_tr2018.exe |
ProductVersion: | 0.0.0.0 |
XOR | |
---|---|
No XOR informations found in this file. |
Signature | |
---|---|
This file isn't digitally signed |
Packer(s) | |
---|---|
Microsoft Visual C# / Basic .NET | |
Microsoft Visual Studio .NET | |
.NET executable | |
Microsoft Visual C# v7.0 / Basic .NET |
File found | |
---|---|
FIle type: Library | |
mscoree.dll |
IP Found | |
---|---|
No IP detected |
URL(s) | |
---|---|
No URL found |
String too long |
---|
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING |
01Oq8XyQNKBZfb0FkjXq
yQAwH2tnjRyeydhjnvUboj7lDA
ZbBKcljj8lGdXgcwwdRyA3e3l0fA6T8cIB7
O5W54bfediXbXY9IWiHdZCcvkfWpBpJa
cH7ppLbzap453hV9DYL5ux4
N6N06tmpuKhFCe9bTLyr94f3TNU4AcYUPIPq7a
ik0eotHE2lS2sWwgRhmh0X0m3eiq9wuWffF0
InternalName
lsO7z22rVJe08VJQcp4LiQxe5VPN7m7OWbxWqtW
N3vunmNv3reKnLW2HBoIbdSNKnRnMtlP
LmIgZvvhyqAaWiN0fkXFw85oABV5Ie
dBbM7AGc5HyPFqRK4hbG4usLIkS2RnUIVOoJVi
HRz5QpNYw7YYUKrow7vWWpz6HE1dpH7BaWBV
Translation
tFK6rhrWPsLdNgfvNVjQriYIFyPi4nR
XNacIpwy6ToDsu34tXLeKf
oo2u2xRDjcn6Bihvb8I00j5
BgWTEFsriDJqxe2lRxRp7I1VPvEEU0qBU5UxZ
cFoyYYYpzfBj1H8hkR8KP7UC2TMYhbcadXXvzFu
2mVuKPqeJQ88BXIUJlV6seQo7jNTfc1fCe
CZMcOCdXIFPORfgBptXFSqY2BuNE
LegalCopyright
I7BQx0dvEBjirf11uDdYsXUBW7BN
GioVwazzTAglTOOjQuFqVsViaJ8mj
6XgpKjOumrgSkoULYSuNMSnBJeQTO
0a0VC9NDRjJ38RA3vKaT3ZHWeHHI5btNHnDks
zixqfnMeB6BT4d5VRWDf
PQLjPodTYLbk3BUsXGnQSit8iToxEGSrjH
jigQBp7d9xNwj70wuSGlH9C1UoVVz2B
y3PFrqUIir7fwYYwpvUXumogeuQg0ErlmbklaLb
UcTxpHvpBHpMFBIW05hEQLldqevIXtcOD3W
VarFileInfo
hAxg630W1EQ5UXwMrRwT5GL6
rElmzZzRLnQCZZKT8AhvA18
0RU
6SVqvqATKb2zJQrf6QOGF
hwYxJ5WyJCWH20HGrMF7EBsBtfTYwRXmlxuSyTd
Invoice_tr2018.exe
wUayfC1mhckhOHNMfwCVLiB
TdvJmJrycDeM3J7HauSxg9ExdGkX
BQO7zoVFGUEATeoSV9TgyYXP
Ff0l8wU6dbsW0sjhxN9WByQy9vJKWgzq23u
vhXzywIHkahEvLRWx2qqSuAvjJXUSnbsmi4
5cHy8dQtKZquU6gecooAVPzG
Xe71OElnNHs9HBFmoXghWeYT6H5L33wQPQiSQ8
VHuIHHnPAzSOGbhA5UetoM4kcb4GvauiU4gS1y
p4KC7LBnwsJMFhS3DcmD2IR5TW9Bj1XyDi
ZMtv3OTPEox9m12t5DXiPkho25f7
93K1Ftu5DaGb7vYnVxP6mGQO3zfxchLs1ic61
5FDSfThKvBtO5nqXzyYgZoKQPVckWOl1frsg
LKRC3KNokbEytXa2mkREecqlj9spJgKBCovztX
wv6MlsdUaDv1Fn0nwyvi1UQj3PlyZXe
SBz5bB302Fq74TQZsvFtQ7kc9U
3WjofEvSeyPyUmIevtlG3DDyxx
E76nzE5b7i0fkYpsG1P56yFTXRmG
y0Gm1c6cx5CZBGXbhYyNrl
y85qsxOP9Sk6CSQC3i3V9SwKzMHhSVad
hyWbK29cLysg9n3h9xZmYzxkJzd2fP0
FileDescription
Djwt3BtrhNcMZtlwvL4nTa2rl1DRn7GEg9dQ
GVeeP6ynNFSrG0w0DMijjd
a0LDxcWEGMtInFSS6Rpr
Pw8lsxWSu63sXZVRLlR52UPZ5GCmgHe8p4Gg
OS6sHUgEuZqa3yTuIkxyFVHmogtj
Uhoesc2i0tNLlaK44Y5coOTP
RXLOoO5icgJbOO13CxA6Pk
y46ot3wlO1zlGqDY3F9gZkAPwdvSwGkB8pjPNp
fYdhW7HFvH4Qcl7GEUG9ydQjv360DZ61E3Myv
YOpZtNV9Kj4V7nl7r7rEEvIPwvW34
hYPPQigmE9tCC4X4RPmdYBwwPW1KqyAQU
XoGLSaS2eix4oaXCayIj
VS_VERSION_INFO
TDdZAtuEFSYof5FdHcVCCwD
LynBf5HDgnDT9afcFWv2sbChC39
sSnGMnlSQHZW9hVkLxwfGCHcFbb3EHkN
Jo7LA6J5psFrUuy9MqfuWvXpt92
rPRXkH4bhnpkTssguCjbt
IypKxS2bqwIsi3j90NgqLUUVWPZP
EC4knVqD1GFtTqJC5zJSibx6qeBRwrPsTI6
Assembly Version
QdzLAbfdp3d1P0LV7XNslCXdm9T
2QoqgnYmJOGaGXSfPqy53OqNq1Le8WRGk
szVQrr3OckZQplA634ya7tsqWWedEZDhMvonK
mD9cHvGiQZQaVqTtSX8u
m5rwWwmoCnJnAhI7XMtzBIZCI99roEoJfWPyj7r
vjwln6cFFPwUVYiGH08xBIyDxMZ
x0PYQyOmtNMWz8mnibWg
NtWP6tvpo9XfxRRtveMPUDtqo413GZY5
E9E45ByTkg1Yuqg7MXr9G6gPmzrti5tH
SH5p13VFlQMCwm6t2O2AkMC68bjPiK
95Oz3kNKIVQCjqOn9IpMELICtkm
KeqXUDd57Xy7IEu8H5n21NTiahVQ98bebQCXjv
0t18Bicw12js5B021UwlltzbYRnAWgQjLq1eOv
6N38LR3UOoQxrWiCNuccddKyKRcwScsHNHFQ
Iq9jUmpnFgDqo648dTHin4gy0bstiiZdE3
StringFileInfo
5NByYvfD98OSPFuGzzXoJhDlInq5mINCE3E4
4S8PSdKtHFuxiqyMgElw6E
ilNnYxAdXcQo9kMSzC61zj0Xzy
FileVersion
H9GBGEQ1W9mkvKPuTsl3SCHX1UnIMoQOs
Echq2Q3kbb4iLU4J1fh2A5X1FKq
000004b0
ProductVersion
aZ34LjtuRwJn9BIX9cWb7VwaAGkp3AU22tddwRC
b5y9bBsPIBDu3jiC8kdrLJ33ZMCV6I
0.0.0.0
OriginalFilename
UkrOSN6yu4Ne4u1LXGsSx4nZzJyTxlG6kAT
m9gy8Z7o0gaPznnMxfooM
DNNK8gnJ8VU2ElUXKqahHb
YAhPr5c9k0Hv6Sq9Nn851bU64plYJ6UsLNRg8F
M6mGSuqR49T1tKCx6a20SQVkZYqopQv
8LtfR8QyTBN11wIDKJMCDQc2DGkwMz8XOkf
47oNPKn2vbyGBCxICmlU08Go
ZJC7fKNZ2tP5qA4zTINpYj8m
M:4,
ua\Xv
4AfT
#8'}
pJk#
mM:"
5~" %*
|>KG|-:
N~Ku~M*F
eA8]1
#W{&M
e[f:
V`]-
{yC
M|9&
6dvv
?G\r
~yDJ
+d(y @
,_Pi
{ E)
;Ml>
}FR
NP`Z
ulP'
+dk|
{]V
>Os"
[vJ@Js
f8#mg
dO2 W
598S
[? G
e!|
+>*8?
<tTv
yG g
1!O_
444R444
2f,z
H*-Q
%Mr"
X)c83
,O8% )c
FQrWX1K
XH^<
Fs<
lhCv
3R4}
4440444>444B444E444OHCAkIFJ
)%M^$
qz~W>
a+LL
+[tgk
ExrI2 \
444"444)444#444
L#'k
+ TL!4
efoY444!444{|
&M#*
Hrm}
|nAk(h
kzU=u
<h7(
yJGW
6(>o
w/I2t
D2s {P
b#x:
x=$
_zWMK
c!4T
I_.>[
^RYwP
x2A&y
US/$
1;$ 4/
PSh"
444/444444
8\^g+w
VyF
57s
&P.
E*^8
444u4448444
\r|
13F&//<
6pOQ
Z? 18
'a0YR
"'>
Y>x0Yr3%
/_5:Y
!9f;
m{Unk
x S_
sXnKp
@diKX
3GvN
K/?-
{~+A
IOe@
=hRv
Cw<6
% ; i
BY$
9u-D
{ cL
\U/6|
&KeqXUDd57Xy7IEu8H5n21NTiahVQ98bebQCXjv
&blc
s\Pp
Dn$KUYS
:^Mi
y0Gm1c6cx5CZBGXbhYyNrl
c@$d
~S~
rk:&
h&9e
H$^s
cV Y
^j2V^
QxiCNv
f*'t>
R;3q3
Ql=W5
W~D+
EmB4
jSp?
|Y]U
msC9
%f;E
#*R1
=?P ==HhQLF
Rt%
cq`V
ws/D
ZjA/
JJP
!hzc
B#1
<Ik,
|uxH
*c^!
vySI
%`\^
:~#s
h{~B
NC9Y
V-4N
Y4^R$P
c4yw=w
J@u
r.<
9D{P
@aTV
BYPvO
Hj3Q
=G:E
s, w:
W`55
}%{
%d-$
Bqk+
qraq&
DTc)
K3tH
VRS
vuxq
"T?:JPi
F??
!)<<[+
.wE9
v{B
r$<U
?s[*
v&#<K
.$w,
GVf(
9*^& ;^)
.qqg
w~^Zrn50GE
D@}h
Tr0"
cV{>L X
RXp";)
@wq%
RNaYQ1
qX%?
"Lj
>5IQ
rj*
t4B{U
2S<
nJH2y
B|X%
5%J.
tWHAJ
;>SKCRA.6]
=)4B
gsP`
:JV9
<4Ul
8=n/
vC:U
:7E5
s ed
E2KK
5gB^&r
cFuK
#)2z
!ijq
B 2n
J^ru
r3s<
)TBxW
1_UKc
W[*
<MB7
O|9h
35NJ2J1n-
p;3.S
Yi9/
)0K1R
(=eA
CWKK
Hg`
:6o3
Hz$GQD
;E|m&
7c=@
)Q4n
QKh)0
bd(V
4Dq6
f%bk
tsq;v
f|JT
p?ab
slhhsLgws
{:lI
-}*$
R5T!H
444`444:444
UnverifiableCodeAttribute
MY/
3T6X
50.
;\.
N[Q
F8!,
x?<g
erhs
Ih0n
,u~QT
! |
8\1 -?3
W:<<
Vxv,
!)?p
="~qyp
|]XKcsW
ecnfH
Eht!
WuHX^k
K[g9I
"0s e
hi z
e[&X
Iuu.
jD?B
a7:
?I"G
iq?R8sk
*oyp
FrgQ
!n(n
_L9M
;6-!
7m1xr
$8Mu
H1wMh
^{$?
miwZo[7
P&%^
9K512
;_fk
21>D
yFwr
nd<a
#EC4knVqD1GFtTqJC5zJSibx6qeBRwrPsTI6
@&(g
ZJZh
tao}
-^r n`
O-gU
2lq-
+D'
B?~
.>VyU
d6O
=vz/
"VJK
PP(#
HUC-
u~j>h8f4
$bx9
qc:u
7Vq,
`%5fN
U6-2nda-(
9,H w
AC$*N
nBEW
F7[C
; ^;
K8[
B0V.}|
w98n]
KfXH
3"!X
9>U4444
p37UX
d}w:
r:H`
)%VU
-D6O
/PG
l33<
W68\
aI%
JUZ
'7GR7
zs(t
;L`/`SO1
#%+a
Ej:e&w
?m?c
tnY~
Vs Q
Tvms9
SU`ePR_bHJT
<hN00
vIK
!*Y/)
FK_yS
oWHM
g2(m
4,*P*/_
C|Hq
'] @/
]9M) S
\O/P
>g_-
dmwj
|Pmt
Fy8q
t&JG5S
;#PO
kjUF
LgHx
G|>J
qU%c
&e8L7
> nDw
J$0W
4;V'
KK#_
5`Gg
78GS58H
J}YTF
a;SZ
~9![#kK
&|r@S
Jsuv
Sf;m
l&aM
i@'[
{|s'
4Bs)H
MKWZ|!
HEdt
tcyb
Svdx
Hc5%
I2,o
2A+U
^ED~h
umQ"
%B3m
d;1r
MXy6
9.i6
{P24
YOJ-BBXa
O[plg
]ejz
*(hgZy
f!d7h
);_HDOgQ
G,jH
$"2
I&F('
eP*ya~
hc"
>?q-y
"dQZ
8^:_\
(1DD
.text
b'px
(K#o_t
{n!^P
(mw(9
b]L1W$
GetObject
u$t:.
)H,E
444#IJXH<<G
xPa(
UB5tT8
)WeqJ
7}@&
X?V_,
C{=9
#pl
]4Y*
.3GMPdQ*%2
'91;
444/PPTl'(6
e!$DG
tLO|
}Og%
Eme\t
A{Ij
QRru
|\X{J
,5@+(
*1sH
4F;"
_LT_a
suTN
kW2v
dc
S'[K
[<,(
4s[kGO
3NX
Y2n
&)<{
(%P+
b6J;T8s;
444W444,444
k<P1
r:=.
m~(N
}!?7
uU=
.g~?
RDG%
Q.YJp
4448CBJ
e6Xd
FsIXu
xB=
zGZnK
lV.
Ldm(
X"5aw
q*,:z
9|l u`aR
1t5Z
#ok0
hh`|
~]!!]~Z
e6XB
&Elcm
~p,S
444p444)444
%JP0
mlv%
,F2>
T/,6R
JM9
RxpE
uqk/u
444<444g444
hEJr+Zr
~sP=
]X}q
)^n:
'aRP
fx'p
0%Q#
OccD|
v NFz
_[YN
yWBT
!*#F9MH
[0j*
444 444
F-I"
VeucS
`MmG
BQ3Y
3DfW
T!6d
2-8
K8n*
ZI{7%
1tqE
2zG\
>92
7tI2
s'?R
:,Y
>T35
54 {
s5Ddd
p7JX
/*$l}
J*v]
6Q5(
VPX$
7Kzd
ft;N
'w#]&
-JfP
444N444&444
a H[
P@:D
9VZ6
1Urf
nyy!
VW~J
WyPx
R648l
o$G
9?a)Bs{b
mH=c
F>xh
%5&e
:r6>
fNh1
j6wB
:5B
/EQs
T U
)X0!
|bdI
E8J8
odfm
M!xB
fcWT
|Vbu
@P J
"-+e
444P444%444
iG-3V
0y=|//
|c6U
lmsL444
'UM
54a/
(6;:
dn_D&
M.Ju:n
&V7F
EhNb
FwdZ,
/ =e
]bJs;
u=zG`
n^A.
W[kw
H{m~Ol
S\gC t
+$'x
6$9
|D {
2?f~"r x{
Kmc{
{-7}-^
>f9
[`I{
Df!f
.}0M
wy oS
;!I0
>^<
A>5
xsBn
9Wpzj
NSk6'.N
b*ou
p&.i_ ;
1/R O?S
Bx&o|=
vY |!
Jc9
3FPBsB
"PQLjPodTYLbk3BUsXGnQSit8iToxEGSrjH
C((
C &q;x
o~F4
,WA=U
5:AR}
!%?4
444M444
*wSFf
7n_C
.9 ZA
S^dD`
M :I
QP'JgQ
444VNRe?.5T
w:u:
~l{
gRyw
RJq`he
X^1P
~ +$
w1m
<[Oe5
(yz6
[?G;~
Vw@Y^
wdp<
izr)H
zRDd=
4z8<
get_Assembly
-u@/
%olq+
0?2
xafI
Xk,=
vflIB
4Yy!J
Y=%Y
czR
',K!
8b_
?%7
U=9"
f'<p'
Al 3$
x;w:
0#sWYVhY
'!SR
I9?Mw
System.Reflection
T pJ
2Qq@
Yf@;
jC{v
-5d}
i(;/
<RsX%
*|5
! &}
7 R]U
& M
O^t9E
LPku
}"-(b
<A>Y
\735
_W^D
8MlM
Qf|
L-&{
G-33;
TvH(
iyLO
jn
444:444v444
%P:L
"t4E.
c% [P
o|(]
Wv}4
m`^ 3
!wv{
]%ge
k;uz
444U444
)}}A
lx
+vh.a\
KuMvt $
(tu
Gn!
rchg7
NRDM<
kEc
=f7
uc/?
$Hm8U
[yp_
6I`6
,JS=
1L9<
Wt4
r@-_
flZ}
57$4
6&wn
)"zH
Af(%1;/
41h/
wIHklc
KhJ?J
ZmYVHW
#Rp7i
V?P@
RQ^nJ!n
JffVG
9zv<
g*u4a/_
FM\{
FVc1/
H`hF
Xs9%q
+\[f
@yCf
1(>a
@GKT
Sm
System
Md,:
bc:5
H#8ew8
f'%e
k5Wy
p"lN:
cHr$
:' '
]fprv
DQ&y+X[
DEPr444'444
|><OHq
[Hx8N.
<{+'
U Y#
D|IaE@
su5
A@9-
&l
444 444 LN[DA@G
AN#K
OZ2
dsybpO
(L<(
S<R,qH
`tl$#M
:f~D!7Y
:Q22
nSbn,A3
'q]
MethodBase
ydZ@
`=3
M@lj$CTq
$&8;ROY
5!yP
KN[j
HPiL7
nSO9
&}9
?!y7Yk
sD5||
e !(
yQA3
M'6X
j7#8u
50X9
%|*y
rQCG
gTJ-
8|8)0R
+rlT
o^dC
5F:]\u
C$z`
gFAZ
1Hxh
TxbR
oEU|
ueW2n
8)s$
9,9tv
Kk_n
,P.U
emgN
K,o)h3=n~
5=?$
7.-
61(j
j;{(
pNy%
1R?C
444~4440444 444
%w.OD
W55Q
WF=1F
x^~&
B02[
-ueQ
WP@4
e-{=
M" y6
JKn#
\Nh`
R8qB
_uj0O
Q6U3V
&'iY
m{YS
eDl(
Um%
.b
W|{)t
bm B
A6b^H
u.9GY
@h/<
Pgzm
[M{|0/
;y;%
i]Zt
$% 5^
='Ou
`)AZ
| |Qm`
KXo
n=w7
;UG\
ra~
*k,&2h2
3c8$X
(<lKMb
`5
f{zB
>h`D^H
St%)
9wI?
sD`Q
z/)
4Ukc
Nf0%6
2Dlq
6PiE
S>U9
YynS
Y.Fo:
*>RP_E
]uU\LX1
-4?n
w6wi
-qil
z_0'
RGJ8 [o
r-mYo
1v)ty
M@ym
n&fJQ
US`r$!&
[ntdNV>
d|oA
{[MM"
CZZ}w{
J3UsGA
8KkO
F
b)ed+1
F$(6
b.@b
p';/
rfJ~
!hYPPQigmE9tCC4X4RPmdYBwwPW1KqyAQU
#EH[
> Ui
Pd<{
DUWF
E%Q
f0k
xPc,
vC_
444cahTf[B
RD[K$)
*My{gpq
;&9e
6"3K
fH'?~
83_m
mYhO
^>8g
+"(%
T|^=
H"([
TT{h
BP~0?x
H~1*
K$8|
QOM_
yv@
,_ZQ
8@Vt
x50dKk
nN12
\{_7
!a-M
B#"o
sHH\R
ziNF
ZQ]Q
p28=
yYY1
?AqV
4TWHO
ci9(o
8Tf3.
R*#[U
&baq&h
kCh2
i70
~,0c
eKfh
PP I
4~x+"
q_2o
quj_9
_&&}
zs?RAeYz
fUn3a
/=~
<orS"
^+vi
<buHn>
2VB;~I
eGOt
vH4C
:BG6Tc
8L%~
~)-v
R|p(
;'(S
ohj)5y
FW.uk
tBeT
EJ0O
:6m1 A
wz#B
64&[6-F
XtRI
m_~&
y0^<7
?a/v
7s'
JB,zy
e8;5
^NBdS
Ti)sY
~H a
%Y.
6x<F
f*Q}j
bg8#
/L"gU
1XV<
4sM0r?
,]<
AGg>
\<QY
JsWf
tH}"M
&c.?
f;xC
uFa
<:u
w a1
8} P
0uxv
}nRt
)i1m
KMO<,
E:(
*W~
sO<?
KOf"9>Y
"]c1
[ "^
_k&
lbJ*
v Yz
b?)DD
63-ES
+,{h{E
o,iJ
O3Fp]7:
E8T@
Q&!b[E
Lj1
4442LNYh./?
[grq
3"?b"L
_"-wkZ
3]KT
3? 5==
F]A*
9#A#
~:u.;
7|E@
U|GA
X5sO=
"|`<
%d@n
L%HsK
PfKe
h4. :+Z
444\444
%rS7
j:X:
<`i8
/OzC$
i61
}gzS
Bkfw
cK^}
444 PJP
n<f+IH
/Pxi
^ <S
$qS+
UAQ!
Lb!:
SE0X
{BZd6;
[O+x
{o
d0C*3
<w"8
F>z@
444UVbb
iNYr!
G,Kc
m_^
l<'%
yG]b
s)k
PUi8444
2(1^b
WRF"DR
.p;&
f\'51
6^CEd_%
?db9
tL60
klX~
Nds!5O
8CH6
\\=G
=MV3z
n@H7
Gy9@
'@9,V
lri:
WLTV
Yn%l
u7g}19
cbOy
68CA
s5Ok
jT-2
/I7%
WSzr@=
Gu (
BA1htY
VEDt5q
d2;1
D/N2
gm"g
RKo /
^. &
uu0eI
nD0G=
Hw@zn
B,*]
/fZs
btCEl
hB1$C
=[>D
a,."
yb#$W
Z[ve
Kk,.
bjMB
@O-:
^ZkG
2F^ph
%Qt>?
)q"x
M dz
_6S<U
T I
444s444&444
~GokA-
66I /v%
@tof
Sdy
<k`}
: O
1!;&*m
.]I/
s;sR
4UUpa
$p` l
zjf:Yt
y~~V4
{jN#
4~Zk#
Gxat
#0n3T
444t444M4446444*444$444"444
u.CL3uo
*8KE
=07/
+a)B
ab V
_^>j{
O*aO
<,_)X
."q>e
_('p
DazI
+P|6
V>PI
z'r<u
ThJw#z
*nV\
32;x9}
H*S:
B6c!~
=]>+p
rIQ[
}{+^
B Pn
bH\JP%
~?1
W6D,
6{63
Nd%
nq r
{fJj
7K0/
zd {
:fc.l]
=WG]
[\m>?;9
RhK|
L8c-
j^EQ2
nB 0E
{zjf
%9M
V(y[yXs
r8!"z&
bzhGB
Q2xU
d4Ez0
U?"`4
\Q1za
r&bH
YH_m
HHUi444!444
BQO7zoVFGUEATeoSV9TgyYXP
0nQG'
|'_fH
z;UI
}c7/'U
:.V3
:k>a
lqwG
hiu)wp\
,%d[T X
>(FH
**QKX1
k.@&
]RL*Wz
PgHi
"Z$C
444u444*444 444
?a+A=R
r7r#Tc{
Atk<
~z0
}Aq|ND>^
^C7)
L#Ff
C}HB
938J
=)(M
)u{buw
*Rq~
`1OX
qg(
gAyCK
`VTH
3{t]
81DX
WL,n
M1b&\Y
r%7x
/aUhma
r& /
JX_]
61^FP7
*%TK
e{Gcd1
5 As
U!*DDmM
M K
v"\$]
~m Y
2"ca
[4s@+
&LJhnG
'~I(
P"qv,S
{UmXO
Gk`<\9
4Wmn|
444;444 444
0N!F
Hndgl
Ot:.H
wDy6V
{"F!-
O,{LkP6
\cs
6/B%v,y
|R >
?}&3
}kT6.
ruv<?X
444 444444 444
444 @;A
H10h
+J r
o]Ro
#{wio%
oQ ]
}z %U-r
uccY
4444444
~+^_
Y@A^
'+W=
ZCY!
!Y*)
4>~w
7ELj
\&g;d5
@4^l
y6v:+FD
01Oq8XyQNKBZfb0FkjXq
f&{_Zy
w88w
J/?3Y[
dvY9
Pw,6
B)MiD
-jVF!
444 444444
u^{,
77Rj
K%n&
cD_K
kA6n
"ja
9L0zK
0d5
grn`
x"lMn
H}pA
-'`]
+=P|9A
B{-E9
9{:<
j(;B
444K444
ZnZ3Xdo
idJ6,l
.hCR
=J6;
=G$R
3rn
F}}P
-;Ql
VIu0
.4#E
"QzU
~Gyc
f(dVn/N
H=/
%7+=
KM[O
"QzO
3!sm&
3a s
v|)5]
u4%VuH
>Y67k
!T#u
*CV
'JO
xW(h)
vw(_!
16F._
1U`sjq
|x&x
EZva
(Bf2;
ioFi
*WD=
vL+"
L:1C
!s^:-#r
X$<MBKo$
p!oh-i
4~q L
j!'
C&fP
$)8t
#RH
?/@\_
Ug #
L%t3e
[,cS
m,2
tTXlrd%
[,cI
)>?<_"
Z.B
m8Ew
#D1&o?9
`XW=
^XrP
Y. OeZu\
z"@[-
*4V7Z#lf#y8
W:hejvT
'3Ge
UKr5
XeeG
/*,(
GdH=
*UW,
IFkW
Nk_<
(0#^
KF$.a
<#4"
J!1Y
{l*N
OhK5P
5I&rb
F1+v@2A
w>x?
5*oW
h]$!
4R=5}D
.ctor
.e ""
X(]z
.a=:
{ 2
D{6P
$@U!
DAXc
U}| 0
ZR7([
E>IU
)TIVL,~tc>"
4F|7B>E\
*Jr+@
5m:(
(!1-
$(B\
<GiSSg
xb#^v
%%Vq
2mD
\R)
If)e
L7 \
bY#kp>K
71\Zc
X#yg
^Nz
#=D:=
6T""l
c35$
{w63A
{';
L5 h
0)qp
g2Tf
hZ9#]
S u!
E(s0
3`71]
qS?Q
1rWo5
<Z88
444 uw
%S"%
#k6$
444 \_oI(/N
?71`2*
LyjG
"hx
. f1
*f{!
~~9q
ww|FE?I
m|fop
Hb+]
RuntimeCompatibilityAttribute
antj
M@'?1
AD2-
@|Q
q(S
s!m!
jZy
i/z>3oo5
F7F[mZX4
"[("
GpzH
{C?I
Gi3"GW
`rRQ
8J9"
pruA
t"Fq
444 LO_5opf
3VFs
]sQX6L5I
@ rH
(Nnl
-0OVAb
I`
$)Bw
" ]?
jI2$~
aclx
I<.wx8
@xI8
cI.
Rk&3
^n3|q
xn{b2
(C$Q
x$:eS
3y y$r
1bp+}G
XkcpQ?
m}h~cA
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
wm>AK
E7-2
$ +N=
m6=5
=?F/
%O[
GZ5H
aAe[
[h9?{!
kPb6B
g*6
#eg9uM*
nmQ$
<1'1
`o
Wi dw
%1WPRr
"/l2
l xm
%vQm;
Gd@
Wy\"
,59Soj4
k^p
*w!w-
?O-Q
8jF!
,e;'
b*GYRm
:o~VI
{1]b
5jm!
f+x%fq
Wa]n
P'C}3
e1z
']<6
lhdf
p6Kd
] Te0'
\#6u
p/G#
n(0
<W.Lt0
_q6C
x=I4
AByh@
DbGf9Y{
,w'e
444s444I444'444
ZAKH
ASY]
oy<G
(2)J2
93b]
u&f
._x :
R5W+:
w;dX|
J]Vw
YVVQhf`
H0Sp
J-}|
qtRK
!WzJ
J)[U
ku~f
t/X
zny%
g|d.
cH7ppLbzap453hV9DYL5ux4
f2@V
"<82
B ?G
+W~kD
TSSO[
4UNI,N
%[7
}IA{
'K8e
:8IJ444
_;U]
I;*i1U
HHX[13F
^#)s
g=$C
H)Qv
H:I1
^?j2
B,(|
7"r'O
r<:4
[l3YG
X=!;
C?:).
B=
Z*juG
gxT?
W~0H
wES%
dM1&
X,3
i"9
M<Z*
gL;(
GL Z
tS1-0
iMj9
wa,F
ba *
ResourceManager
cY7=j7
1-Nu
#UkrOSN6yu4Ne4u1LXGsSx4nZzJyTxlG6kAT
X.$w
444 yxz1
0hq{
?gJp
UlBA,
Iy!(3
@/j
e. g
444[444
eAvp
&O,T
kKqO
7Wv
%!^Q
\Qqr
&M2K
DFgIF+i
-I`<W(@gRT!
ggFF
o2_
444444
<Y:d
Yyi}
y+"x
Wg5'
J\q?
ehH
SMB~
2-JA6
7H >'T
.60
\%l}
`i)mge/+
U{&
*\--{/
+zu3
+<!
& e&
_&\$j
P:G)[P
Oo{8
^Exf
YPZt
1KW6<
|UCw
`=4-4W
])C7
Echq2Q3kbb4iLU4J1fh2A5X1FKq
(SO>Y
<0:JY
p%j
Qrx_
]7HW
@c=V
L>SEC
`aT0
x a\
5U\1
nZ,(
IpBeXF
ULEj
Q,iX1(;E
=q?EG
$?/F
3#I0
aJcG
h%2.N
,*Rq'
4442444444
5e`}
jYUj
mP mc%
`*!}
n+3
9E5X
<Vd`
>d$fDGz1
[nb>
444N444'acqE"(D
IVkJ
4&U@=
Zg)k?
n<2)
q6v
Z[,H
0i#*
89Kw^M p
17|.+
-zvo?
|bg
'6nr
{EAZ
>^
c:
@+Id
JyV4
A%ET
{I?x
yG,xpM
J)c!@
_o~Gf
Y^V_
Type
^U-g
i[L<
-t-2
9 ZK
n1zEG
m,D}88c
u|tg
'.Ok
.a5
dX>+
[z6]
| -Y,
b$ps
Gpq^
s5n;
{Y&]R
Q_W-}
_]Ys$
z;~
Z~\xOjzd
QsCR*x
kl./
@Nk+<Sq]
`~OZx
K)jP
:#mfw
g7z
<pCt
! x
sMEC
urwp
Z=Q:
"yQ,u
X2Qbq
1YGe
q`rsx
qI<<
1iqD
}=%
1n9[
A|Rs
IG``
I"Sn%
2Twm
8<\=X
qkU|D&N1]
]kP:dqq
NRiu:>R4444
B[Q
Cx@#
wI]G@
vGc)
FDtl
gZB_d
AoDV
w{Qv
=QA
O%b<
;;LFua4
b5y9bBsPIBDu3jiC8kdrLJ33ZMCV6I
Y&aj
P@\W
uv4VT
ZM`
3xB,S
:F;)
'R:A
\*99
.D*5
Yp}S
LtK@
TC`:k
U+GM
YBMHa
2=`\
'paO
D /dC
#/C>
jk1"
&h.y@
bRB
"%:J
&YS#
/>d'
M.\U
<A]X
==!"
:& !
V -
vAboM
S!@G
7^{,:
QZFX
)k~:u9
]u (
mscorlib
pgNHS+
T%'t
)_E
H'8~
5PY\
mLW
g'|]ltw
Q\xr"%
'Vor4
#;'<
ymEM
<]{_
aG7Qe<
65t_f
tL)
GxX9v
1^]NC
$)=z
BXo7
xk &
u< -
N"Eg
JnO/
hA)u
N';(
p-)%
yxjC
#G
jx?KRl+89
1Vmh
F$y6=
pic
]n;@
G=0H
t\#{
VNzu^
M7Uc9
GV7W$WRj
Y(`<l
gO)L
)"<$
6,15
*Xk.
K("SO
VHqj
n0 Tvy
Ily:
16r8
{J7QQ"
*o9t
444444!mhf
8o,_
O5W54bfediXbXY9IWiHdZCcvkfWpBpJa
"6m'
0*BD0
s|s$q>9K
"gVbg
NQBm#
dmyQ
C5sh,+
Bm0*
0k 1
<8-46=
ac;>
)N70
a2h\=E
nCS`y:
W.2P
J%f)G
A(3v
mPzzOy9
(D;ALm8
leqQFO
YZ5/
n~,w
$m2s
DEO]
b: )
Jl]B
y6f
System.Runtime.CompilerServices
><YX
RHuY
2 4N
Ko >
x0.[I&
?n*J
D WX
v /AO
9t)d
/%Bdf
YMZ"
[:Z
Ix;v
0[n[a
O T0M#
0Wg
Fb1.
gZ,m
N9W
^93&D
j=]7
kY*r
7+Uz
G}`yeq
444'HGNT54;
-wy&
G"~
:^
2Y(f
T'GC
oH6Xl
]2MF
*W5siQ
'4~^
'uwQ
'tP
udy
444#444G444{444
,k.ix
~o!
_K4&
9RW[I
%zgN
!Av
oJ|8
dMT+
#}5t
~NuW6|h
pGy"
Y`wE
dCH_
{Db*Ct
E)Fc
%F(I1
*9hZX
z[^{]B
Gv&t
T#ky
fo5F
444v444a444J4442444
0\{w
G"~z
2owvP
f.-
*%u*"
$E{>
sj:H9v
6tX"?0Q@0
LeDG6
/P X
BSJB
Efk>
gj";
J.SB
|%*`?(
LS#k
[~f5
\\F>dF
/%rF
whETM
D X
FWHr
q{hP
:fYb
CZD)x
ql~i V0
~SX! ]=
PFT-]
^@;i
$)> 54Gx
K&k
x5&
mNNr
|p5W
V_xs
RmV*
K Z3
nL#4:
@S-F
U<LYl9ww
uDH
3qNQZ
1kTf!O
J/lw
P8e<
^Pe%
O\z.
@9^O
1+uM
OI16
=b\}
3'u
;3 o
0^ B
HC&4I
_u\k
1!+
!This program cannot be run in DOS mode. $
X?7
4EGO
MX(Q}
2n|
w|4G
p;m]'
M>X@
&{"/
7&L:q
A}hb|
>dyFO
444l444g444`444N444=444*444
OKToX
Iw:n
#c|v
T!E'
Liu^$
4Uq./
1g.=^FK
pk`V
|iM W eQ[
4448444
)3BROP`
Tq:)Y
y:5q
$FNBZ
emHH&m
w'C$
vL~%
S;JR
9BA^
Gpe+>;
p} DZ
`lcX
}R]*
@L?em
vnC{
p@i
u-X&
mSR>P
:c'N
ik*(
tV0i#
xK$oR
EiN'
aW D9
v`g<
2{r3;
jiR^
T[?z
BJee
WX p
l -"
7K2
%EuJc
%j=_n
vA=B
;t"7
UZ@
&@^HC
w]AF
;@CO
7'X#
L-b.w
OkkOi
'0KH
v)<
kGG
Z1k<wh
4FOgV
y0U_
x [5
7OB*
!$T
2B[,
(23#,
jS-^
)c1H
`Pb
T`vX"
? Y{
eq/Ye
{HO
444[]nR
CEE!:
^]i7444
DZ/?
)c1R
>5,8
['N&!
H\!nu
!i`H
iZPT
t[-
z+ w`
.4] n
^ee]o
XFEaV
gU6Z
k3fG^
dr:x-
]tlg(T
hXNe9<
Yu>o
bt>
lw?M\7
YoZH
444/444
Wj:
/D2
I3
(6H
@=[?
}X=h
V*9y
{T#a
8z2L
*Z\/}
<g%Z
+EI\
?@\H
}xK8
1Z>F
)<i!
kexj
444 ><H
ZBpm-
B`%]
og?Y
)-?"e
Cz1\
eWzP
A*l
C6JF
R Z
:o5
(E|N
M}}0
,iW)
RfYM
k8K@P
.#?W
FfS#m.
H/e;$F
;66m
[Fy1
w4+
a!3X
8,sr1OaA>
kD(_S
444g444 444
;Axw
f _7y
#!:1
3~l!
o%#+
qBn
"nqrNmQ
j,o.
u'w
siS.
|}p!
VT/r6
*/^m
A K
&Aml
@A6%
uJLj
07}&
{Or#
H>{b
>aV/
,Awy
l:B)
fb{c
GYrwS
, Ig
~|]:
%h^J!
a@5l>S"V
9S=k
/W@6
G$Z
B|Pk
444-444
'ZN
'aZ34LjtuRwJn9BIX9cWb7VwaAGkp3AU22tddwRC
444egu(b\O
4|Ib
huN)5
y]j;
.E&k4
R `,*
=Un.
qP;L
\UaWmJ
;m]h
rMea
# e!
VGa{`@zPB
hu:Y~z
jdIR
PHE0)
^Uz
O|!y
2hM.
'<|`?V
5;$
SO=D1{
DUoQe
;dsX%ZU&
U{cTT
`_T-\
-.Rc
,4 m
[wOnm
T"{d5
C$<]
=,rF
:k:7
\m[
~o]W$MMs C
#(*p@Q
8jYl
*;TW>
\OEA
10s?l
g:=J
[uHZ +
y$ N+v
}|y'
v BZ'
?GpmF4y
{)[
?sw[iVL,c
8UR",
qEG)x
Z\!Q
o87)
/~ 8
[pLS>s
uGFt
\0V1
Z]aS
ZoIe
`m?gd
wuOX
<X)!
G{%*
get_EntryPoint
B^;6
w5S@
CompilationRelaxationsAttribute
gYx.)iU$
i}:L
z4Ls
C3V]
R7-Xnz
I ]/
7fmP
SR:O
b]io/
_&2q'
444Y4440444
HZ8{
-_zs
444o444(444
BIb"
444N444
{"+"
Ap}tq|
s>XV
K~?t
/?qQq
PCI!
1(o&H/
l_kdE
mdOLZ
*'93
I.He
\yHC
9}8E/
iICY5x
:6g9
'4
4441444
F*wm
a|pv
y4~
2gl?j
y[\[
[I9\T
><c}
j8[-X
1yfM
F u%
vX4%6Yo5
CiBJQ
{y~5
444e444$444 444
*e mOEfbw
s:tE
TxxO
pnyI
}!*
jYL)^
K:()b
TR!
444 EFLTwte
7"%'H
T%T0
Q6#l
qrb%
A)Sr
3x:=
M6mGSuqR49T1tKCx6a20SQVkZYqopQv
" ra%
TT p0L
?:6k
X oA
)_K}_
tO-{
\,I*
.K3F
444'444HNMSm444
yW&
Hp :f
5aGj
yb7Z
Cm1L
3nE4
WIP#
rn`8
j,@
'/~^3!
xnes
N)C4
ozpi
yv)
){4
eF|m
r;AT2l^
$ .$
K@m.
0irq/
;m)
Y1,E
urv$:71
^^ha
cV&
hVf3
[2\H
Yd[S
"lBM
]vSN
Zqxqd
"|b
crid'cI
KE?
XX`r444'444 444
7-1"i
YR7P{i
Eugt
8Y="
!g_O
V]aWC
2r+(j`
OgbF
}d?#
a>-S
*<l@
+PybJ
l pThnOHy
}+B
Jq\
s6PV
G(<\}
T(IW
sn./
nJb.P
W~~ca
hP51
&Z.P
Y@~N
n%47
+~--
lS&w
!C{
[]m@
uM:3
F&%Z1
CxhvP `~
d,jyh$4K
(n ;
B\>E
T*9v3]
>-]
GH=8
444444!SS_V79F
GXOL
N >V
{<1~
9Pji
=ik(K
, x9
6Hb(J
A_T)l]
%(%Q
Qt*o4
9[ZP
`"P;y
K(XA
+gy+V
+}&=
%;kP
`LAk-
Pu>&
K.TF
fs|.
wu-L
L9 I
R1=g
t.}X
CT[ci?
>Aumc
ruk2
.xWe
WI/@
;'3&
i:c@9
Ao[2
8ag\
mhVP4
=LUq<
| Uf
T ^+O#Q
; yF
nVs
huIE!
mnx$*(2
t9+q
rQn26
Ja|eK
BY;K
F<.p/
d;1\
q&,BSo /g
|6@_d
>[^4
6-Z,
)VE
444u444<444
L/}2
RyA
C8S}
kIr
o]r&9
"W}A^
sxv%
pk2(
{/0Z
2Su|PR
R5G<iV
<qZS
0h=Q
KcX0
YVNER
O~"f
8n;
EDP^W
nxF.h
,lGA
b'x
e<;x
m|$^Y
BJ&(
D @E5uE
75t
gT |
~9
?@g=
5![-
*}!2
l7Bx
?DWf
])Zp
8hXY
amj1LqZ
aJmXbZ
JGeT
M.]
Pb*U
[@HU
.ms0
&[~%
`hW
+[{H
E<S(
k`EC
OA(w
>3yV
!,wp
e\+X
sMRN
rnhD
mxaT
t'r|+i]
v\]9
G0;x7N
>_6TT
I:6Qqz
FtlwL4
WIDx
B =2}u)
koG=
Js(Nl
Lt$jf
k7L,
So6|
A@uY
t@Pn
e Y^
}qqy_
+8.
:>TE
_[AR
.-JJ
>]e
P(nV^
hb'E
Go`j=J
u'F^D
d6U*t
SxSL
jZj2&
'%z^
{Qe,)
bk&A
8519
9z3IQ
l@_
j<hX
R *
UuN9G
JzkJ
}Oz 3d|X
_v[
vZ>g
j cX
\2 cW
f!n)'
d8m
_CorExeMain
m-t '
+-=WU
/ =&5Sk
_lcQ/6
*m &5
;EfR
A 2x
P*tV
Ciyv
Q7;^
< oR
`3h5
!7R
o-Egua3
4hA*:
eZ&f
T5w
Q|#b
dLl<@
nco(
Cz{p
K'}\
XMb8k!9
byOj
&#'a
4Jx1
J+Xk
h9)lz|
"#*eZ
lv$i
]v"
lSE#
~&E_
tcTT
^{X<N
x8X
3IW!
$K+/
7 vF
2' :
sWXd
.HTE
?<Jf
JvT%
ToArray
a9WM
6/_6vfFvV
y<wla
RUg~
hsBTr9P
i'
4jUt
<Zt(
# mP
y>_}
@fs]
5La^;qow
]*dg
r PE
]^Y3
&EK,_
HySy
Ku0U
7\z@
R"~;
OIh!?VG
}A*b
duDY&
i([*/'
6U)a
H'u\K
i* *
+Q`9
TDdZAtuEFSYof5FdHcVCCwD
'I.Z
\DY.)
H<&N
`-r.
Op[x
{ (^
$!,[(Kv
"E";
<u1`[Y PK&
NXf6
J},|?
Y6B)ZDf
x"9S/7
;pk2J
uz9@C7
Qnl<
;B Q
<ZtS
WJX
%LOid
\(?
!Dv"p
BS r
TFs s
0%qr
NJ ."O
lI8Y
, Jv
N01{
/&&4
|NF|O
=/(%
vVGY
}U n
QfC`
wSp'IbRss[
oh6Y
)*a(
;:sqs
Zs)w
>::L
[~E
@u!M
444~444I444)444
9N86
=O(<
M}{"
dt:<
{<\H
R)A*u_Q
ilNnYxAdXcQo9kMSzC61zj0Xzy
r4|q
v T9
B,~_
/52wG^ZQB
1d\Y]
mhY+
&?#\
@!D wV
5,-C
z#~OU
Fzy
X\|i!
*Q)L
P<tto
d3#
a;drH
YKku
YvCi
-U
4Sz5
?eTa"
To{z
GRb
444 []f
O`pXx
"t_}
=3KVg
@Wt=
Vktg?,
-=pmtx
E0A>
PnDs
Ie#\
5oUL
7Mb]
-S+L
uH|O
_JRn
hB!,
]/K8
A7F'Z(/
-fDT
\xqs(
QH;0
[Ik}
N[dS
BQ}1
/ 1kA
h>R'Dc
@S
V j
KF9#
a>]_
.ihnL
fO_w
W(Mj{
^;JEo
O j+4
%ZAK
m> "
z ]E;5
$7S[
et|&b*f
PnNc
$7S_
O+/-
_06G
Ox2zy/
;zke@s
0S+K)
z0=4*
'EOpr
}R>E
_)06
>5n=.
MF*;+_
FuDQ|
f:j891"z
}5+Gx
/$Gr8YG`
_:Ek
aKdS
85:F
fjMJ
444BCTy
`]Ky
e+(Z $.m3
o jL
!z-'
U <y
x-}G
#p_/
6?>
jLHA
9V6&
9Ce7
HF O
I 4@
4 vl
v4?s!
444q4440444
FAgxI
Zr?~s
} K9
j#U
y[v'
VR^$zrR
8=d#
nC E
ygs:
{vue.
UulR
Iwy0&<&P
H@oZL
eBO,\
+U *U
Ch | G
v@[>
F!U.
FRyrzAa
:VDQ
SUd862<
_)9V:
Fq_1
eWI|
B2W<
-eX-[
@y=Z
_l6
fn0U
2z9T
rMKv
\G]o
U)T+
$x?#
gG{k.
tGhZ
"Ik9R
,Iph
Rh68
?yj`NW
^+%>k
{^)ly
nb2'
V=/d~T]
lHF]
'j!1
SJV*uq_
9c0y
T1,,1_Y,%(
N3j
!1Q|
fEF@
F"4D-
L:J !
Jnsu
}f/I
"~ojB
j@IA
c%rf
JbW0cp
+,F
cp}A
fN}X
(4#nN\K
D;SS
AdZ!w
7G1H
h82)%7
j,NV
:o$
6S 6R
k:s
4I05
!uck
O\C?
)WD]
@2o`
%-bo6
j#p4n_
5aE[
}D\/
9*#M
444JBLatpc
}PA$
` }
- r
%fYdhW7HFvH4Qcl7GEUG9ydQjv360DZ61E3Myv
8 Rb
y!#IF
o1aA
++)|
R9pf(
U?J_
v*'*A
uZb
MG!N
qX I
w3<s
XkU7C
^?ZoYN
j yw
6:?e
7| w
95Oz3kNKIVQCjqOn9IpMELICtkm
:@j{
w4.
GUn(
{96)
v(?N
P |k
MWSDA4iR
N}h/
D8-"b
Xl`k {w
SB ly
&j{f
+ >m
i?f \
NPB
:mgm
KL=b
RFAt\
3;NvW:
Z<BE +
' {X
v|5ij
&aMM
k LU''D
NiS}
@(]3
&{;~
BMQ[
?}G\
aqf*
fMyr8^2K&0;
;0u^R
7:L;--@
Y`*~D
J4t.9
tw'G
sO|
#|;}
444b444 444
kOlZg;y3
[*_5
e2zB
eGT<U#kc|
Iln}'c!
bq!#
GIkR Z$yP
NM0Y
2J4p
VdpU
U[^J
#rQxq
s4}
1Mx|
_$6s
444R444 444
IjxD
.DJ
444:444
V#Nu8S=
ZEuCh
J>O?
<#X?
<#ZC
GyF
K!5wH
9z
cw@8
^Q02
Hm 5
':eT
OEyN
!"X^
jC%V~OZ
@)Q4
}.('Ne
$z ]c!uH
-7*Ot
E{S=
dU6F
=e4T
Q=].gL
&e)d
fN*C
B@%-?
0MYIW
49Tu`ao;EJ_!444
RoT<
bCg_w
"NBg
set_IV
\OZ \G
)6xv
=z?}
O)3j
nCA>
Yg+<
pVU DJ!
VlbtZ
0zSZR
IvSy
m>>3#
)t<t
3/Z(
7-Bu5
+2*qs
&ui
84w?
I/%y
>5)Bt"5
A6h:iE>
JFRg$ 5
,m=q
9WUO
Ix?/
#.0t
Z/N0
hOIA
<sF%f
SqpG
LW5~
&0<H4
rGiHH)
y-M4h7
.b#4`
=T}
eRyb
luh;
FIS<9
r `V
|_x!
@h_g
m~&?
"gyw
Z\x
B[Xwh
~/WZ
{PY
N9Q,Q
[/eh
D&i2
?{tfu bG
[gy"
Kt m
`6du
Anbc
}gb9
3bZpO^
|fK:l
BP,\
CreateDecryptor
i'*G?
fGz}
|JKN
ME-)E
scX
A>Cd444"444
UH82
{,x/
;y!%F
wi_$
|O/C
k,&V
Ra>G
e{]Dn
Pl>LS@
`{wB
EZ#\bU
9')C
BDwU
ylq `
*adh
pH C
Aa.H
hHDt
8Pf|
Cue$
TLG2M_&
okGn@
)m`kO'M
-K$
g<TM
jrD>
hK>j
w2h\
TO+i
5yg^E
I9+>"Y
1oNg;
[G~Z
oHRpd
.tqqD
CKo R}
1<2mV'
KJjq
AvRV
% !(
?rC>MX
x?i{@
g52#'S
}:DR
PQ` CCO
wNqW
% O3\N
?;l;
G4U
s&D/$
owDi
_F935#
RK*
oL-"g
g5C6`}Z
>-Rd
b>+\}
lc[}M
]rH_
~fAT
mCS*
hyqDM
E9>}$Pi
uEJ_+J
jCh&$E
ff'!
me6
qY7t(
8K)AR
/1Id>
nuB?
/og6]
=]EnP
^[lUwp
kJqFk
?d`DG
HIP}
[Lk!
U!b~
C-22
OE o
D.PU8
D)O>
@tzk
RK>@
ufhp
B]kfx
=*ZV<
5 UJ8
>zcB
pv4'
Av$V
_T]b
kPku
&c$WL
k vWn
fyS/
8f+/(
n22
+,r*CP
:Y1;
eW}:
Apk6.
DM~&8
>Le^jw
LM[5
z=1 na
]uo/L
{{.Z
+fW5
,^kp
90[{mI6
po?b
pSc!
,\q
9%P
?l#S
!<.p
IJj
Udzj
,6o'
QLL$
RPl[r
Y0Q:}
r9S)
"mZ&t
$NeBM8
h Ak
\ [J
--p]ZN
m /|rd4\
+[Bv;
;V2]
S^H?
J%XHwC
iIU\
^Bbi
GQBV*
W}vB
-4l!
_dyW
EkF~y
5(ZR
cT _
\~u ex
Z, T_n*
3Nb
QdP
XP%zf
;So$
2/$
6NA]2
`o$]
$@zcv
qF~k
D!Q
bmC`
X?,l
>-J*
7ew3
L20
Oja%4
"{q)
hY=>
Yl X
qe3
VT_Z444 444444
H<tN}\^
[Hgk
@W
/'iq
Da-(@5
~oQ)
&|&rG
TwC;
+z-#%
i}CQNy
4w(F~
pmFQI
+3n~p
4448444
ZC2od
=*D+
}HCxuf
L}k<>a
GRF
eV3A;
;7Re
p,z- @;
.|/J
Wd?$?
rRrk
L;'8
yabG_'
T[Sb
&_{E
dfu(05L
R~(n
6BAD5F*
u|RL3N+
;m>P N
w(3y
\ ;
r)v!
4sMC
u%+mO7
@j]
b"9V
bp ;
-kvI
)*UO
Yl_.
X-3
MNFj
A\Aj`>E8<;,
j^/t
s};
%8h
olcH|
'ci!
#W~BJ
BkN 6
NVlP
r#)>a
6EDf
`A;
0\9`
Wd5r
d;W9/6
:[Wj$
| O
T Mp
IJY'?$
R,IS
HH2T_q
}.!?
*bd&m
IG1`
-jsDQvA[
6O]WK
3shW
Jo7LA6J5psFrUuy9MqfuWvXpt92
d+Xm
QRpe
,TL2M
VxJ3
9csU5
2s x :
bP>+
U|zy
Z]i1444
kVqO
U;#
}gzf5CL
+5
;4!n
p(M(
=PJ<j5
a W!.
rGgpK7f
OK,
>IZm<
444 ^bs,=?V
gb8k
|' \Q
]`ZCyQ-v
444*444I444Y444C444+444
vfQ`sB[z
qa[G
OL`e
uC>S
N" F
7 "
aADN
Z-&o.
/&Gg
|bqn
&YYy
@ I9
'oM4
_z+b
d'MH^/y
QQ}
OCu9
>)Ck
Yz|;NW{
FJ5z
?Ttc
)4(D
v'E"
\??,
^>-R
`LA.yqt
mA)exV%tY|>
;\!.59
raA ]Cg
2T&('3=
kH5.C#y?
m0/r'
t2oZdmt
z9<
M1-FJ
E 4G
$!Rh
M!v5z
r9vC
h`qX
,Y<}
x>hn
TIsz
n6-`%Q
" yns
*F6_
T=T
7||
LgD`
s||Qy
]#xPg
wKST
^ F^
4C!NZR
V#Jl
OjJM
>7G=
;`DU
x nE
Q_3r\
c7I#
kF|`
Vs,Y
dbax-
R&I8pc\(
k!?~
RNo"L
-9c!
L{M6
O]pl
8yLk^!
y|x22
b&zS
f^LH
d'1
444 pprt
%|$U
K, 2on>
/I84gR
nKiaU
0]k/
!/T$
1|wEW
pg"i O
LSrg|
1a8n
~d)|
n>NT
1NH1
m%8
`u6/@<
mvL6
.7zv
%*|,
z dWz
w\yC
By .
].%
asVJ
2-5t;9:
Ah_`
oBzI
'`^l
hZ3w
fL6m
6JM
'`33
L](a)
q<Qq?
G;Jx
+L-u\
p~7j
MTd
msF5x
4HoX
SCka
)6F
BU'tb
.C"_
cf/v
:(-O
VQu)
/PEje
U`("
<yf=
I^Der
I~t6
(nP0(
<h:_e
dJN;
X"T[
Sh &
b?*k
SX=P
MsP
X3GtU
:rrb
(OUB
r$zW
!-?MK
^g>q4
(+p]
zJtcA3
~>l-Y
xaUK
%C]i
UkYL
{s nB
}0(`,
L4UD
/np`ery
H.`u
^L?9k=
(][$
^abE07
X[NZF
]{3b
JrvJU
L.w9
1cR"(
:$f[
dD!,
dkQX
zYTF
duhkP
E7rG\f
kn5:
]v-Kd
efnW444
&,wA5T
;Uw2
kk<E"
MoO#U
k>1S
\System.String[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PA
?itj
8"wG
EFMg
Show
2;w*
KfcY
<Y/?
; Lw
?2j
_/5i`h
r-\lU
M h
[O|
_w}Z
ZWEu
2JMt&
,QtE
iBU_
|e"U
5 02
qcGxT
#[y!
Kqt31
" gRFD
!}N,
hVbxm
v[|s
fdR?[
58dc
j"B<
EnSa:_P
vjwln6cFFPwUVYiGH08xBIyDxMZ
IJ1YZ
%Xjdu
(a,9
GZ n
#'#FB2
+0ej
1|u"
Y=M12
ta2{L
gw01
vuj
A^OW
F2>^l:
bs}\
444 444
AddRange
T bu&{Y
0F$ E
ueve
[)j9U
X7Dz?2+
i])e
O33p
ySBQc9
$B #
ppA|
ae:&fOK
OSd+QF9
bt~9
*1&
R*JB
it&`
f<Yz+
8Zu .3O
}] +
1FFt$
.*k(
Fv6D
h\P|:/
b|s;ZJG
K iRt
pgu
J@yN
[}o/*
6N6xo
/ HJ
Y1
Me(oM
c.uL
i|[E
p@:u
S.2Ug
-`~
(BN$
K+[kVi
O ],
'g`A
+ 7/
<|8n,B
}e#,
Hv*K
K R%
n\bA
@@w'CnB
(?tV
XNzv
<$YM
V`G:
!6HQ
444i444&444 444
d/h+dF
\=Ew
$XB%
Ou37
rFRj
444y444>444
Zxot
:8W+7
45D88:H
^]g2444
wF q
>/nI|'
'`A&
UrW)4A
DFV[444*444
!XiR
xTsH
u`*d
{Hx[D
I+;-
}N4O=L
8aS0
2#j6
}KD!
7uCIR8u
b\8zo'
|fv=
1|}(
%#e~j
pz"
'5)A
ZA1SR
p+CW
e*0q
X?2_'
aXa
XqJ%
IbkWX_
<<y:\
<.C8K
j"b}8,X#
Xh3a
|-,|A
0*[
p[I^
[]g`444 444 444
6kOjh\
_cwA
wSiM
vVCs
JNcY444
.zyi@
AMgT
7G<2
%[]@u
<7eU
6-50
kO6*u
x}?z
+hk5
ua?N
KCPQP
$zi
jcal
?L"X
/j )
(Z0kWT
+J3/Os
rekJ
\a)
c`87
,}!E
+'`D
YhfR
444Y444
]EpPI
)X`^Xe
Csx=kl
n9+{
|#5?
w%'^
5( p
&`k{
zDlA
1rB?
}R~)t
a],D
I[XO
]?=j.
k8SN+t;
<M.C
ky?H
4447444
i9R
J`5xt5Q_
*{:
%>;.P
gmk8`
\cR
*\lL:t,D
CWEC
b"zI
YB-o|
x~lBB
a^yrHC
8/&>
~0uC
4 2I
/ObJ&l
67cy
m<Erd
DgK6
3W
C#g>
"G\
yP<W
NekhCt
N~}=
4APj
v8L~
LO`/444
ES5n
qQ-
+XEY
]Z#_q
Q7Dc
<z>kS
O]5?
2/ITD
"5"M
B]Zp?;V
~c%Q
Vz`
H-hC
cf
2iYN
5:f1
$:3<
AhBa
/3F4 $;
3yF/l
0d:N
k`_O
'ms
yn 6
a = o
}v)
sAY?
HI1I
p<V>
dfL<
f=c>
^o_U
X{ o
Ak N
-d~U
[m|::
([_*=
\v#P
YK7|
AddMilliseconds
L>'svM
b*P~
$PwqPj0
Jm?j%
-44j
TU"%
~ l%1
\5s
? _"
odnXEc
s8-O\
4>r m
'ubZ
[9Ji
$e)
HJz{?
:.isAM+
8y~c
aOac
/#nJ3
7d}{
j=j#[i
AppDomain
4 Z.d
hR /
ogAt
/Q;Y
TmD7
uwAw
&B2x+
?1L"Q
f=cu
7EV{
7LlG^
Wfqz3
Y<v`sL
}hYk
DNNK8gnJ8VU2ElUXKqahHb
]XU|(
$t8yF)5
>-$N
Ds!z
99K.%
aP):
8,|o
lB-(N
t ,qh
[2V7hd"
N;uL#
b@,#
U[(w
VIxFa
OxkI^
ZROS
}cz:
-h4b
5svY
5 ]H
ompz
rZ>[
P9T?
=~t^
Fl7{
TTd?8:Ow::K
c=+[
ygm[h
ttf
5svv
\ Y!z
<\[K
9(0c5
LmIgZvvhyqAaWiN0fkXFw85oABV5Ie
8>cQ##4
Bw&7
Mk DV
%L~3.|K.
VpY,7*
I #O
]n/JZa2
:L(TX]
;u[~
Fp5}
TSpER
|g[
04o
E1yD
-R6O
]H(
y;'U
v t^ -}Y
A+?G
3,R
X^`.F
4dRM2
bt}B
xw{
HY5^&V
&8LU
63a|Cy
1us{
Ue>rO
NfMw4X
\r-Q
`#+V
;_7A
84/
Vw ,N
/Z$KI
444>444
;G22|
444 TXmR!&C
{|*`
z!
:O^y
v*!$
B>T=
69NV
yB?X
p Vl'
Yw7X
-a/E
xyi"V
).t}
444J444
%ij6
614?
]jq4
{D/Vt
AfwIc
yB?o
+T?
%^w`kD
"#{\2
op_LessThan
{AB-
DZAs
Ei r
(9&N;
[<P*~
8tq,
444@444
P%H>X
{e$iI2
==J+444
3y-n
)ot
H?e 3F
]O}5t
}~#q
)(w
1;Io.
ZsF4Osq
mbOl6nh
Db0@
(N7\
VX?:
-UVT
x`y0#
(H$
q7I]
]@ZRI
o;*`
qE}F
4~ b
4~^o
S`3h
{8d/
$"kr@S
RKVA
) 8B:
gy ZF_
> !z
lM+L
444m444(444 444
CF;[Q'
sFrV
e<ds
X/-XDx
$S|aWv
mo #
kR*-R
fDsX
^A.YXj
:b |
/"r7,
ET=x
nktgY
}aqLY
hRjE
V0<:
& 0[p
LynBf5HDgnDT9afcFWv2sbChC39
fy%K
ZzlQ
4KeR*&{
bPp\-]2Y
HvJ
ihqS
<E)z
:5t8
"1U`
^5,i
`SNo,
|9=kr
qz{Y
-Rn)
BhJA#
&|Xby
sy@E{
!g<";
Q+:9
5-D\
N,7f,
Fc]UL
z&'O
\G 9)I
P4T6
1 -:
#; |
c%",
=2uh
}JZB
fpBe
444d444#444 444
4d v
i(q
xi
u_z>
'&--
\ 8
"KZxg
t*kC
S6|j
/Xk&
List`1
Xo*CE;
TaVa
46 [
8? Q
|\h|H
(QuD
)U2r
hZ1.
^l@P
2|C`3
Dh5{
/20V
uqO}
8(Bz
\vy
'zJL
l8by
dlW
;QdJ
ddsuR
bs[JCQ
F_+%
d:*r
B.)p4
ok(i
VcA[
y$q*
Im.U`^.g
(&5
26E\ej
Q6uI
"GoQF(H
JU/#
.L/Z
U/M+y+
ok >`
}a;*
)]J *g
cs|o
#4&'
C/.|I
J0dp
^5Tv A
WRlL4
hRYpM}
=thY
!W3
SO.d
T!MM
H5X;?
L:Hy
,y=g#
SV;)
I9_FS
(|t4
Yf 6
wUayfC1mhckhOHNMfwCVLiB
444+444
[vC
s?74&
NLx :
q/M
,@)2u
b46(
y?0
7 e
HH+\=y
\@znC
wTcg
5.y
d.A!
YQ>
^C]{
Oj:<V8\
F4x
UHS%
;[a:u
Hj{E
&V*V\
m9gy8Z7o0gaPznnMxfooM
G vU
/$R F
X#^3[
7}Tj
0pX#
~U6
6.0n /
{=gt_*S
'q-YM
444b[Xn
`.rsrc
$] i
sdHA
%psKb}!
DX~
:.F
s+A'$
y3qg
_gF+
tOO$
-T;M
O?G/#
\\DD
13L|8
^\(Ho
z'
RC:w
444|444S4441444
Ye,1:}
G)Z
fifO_
r~+;%
-&O'
+l%
Ss3.
<mkJ
1^%su
jI>I?
p8m gqI
~*En
WW^u
w8"c
Jbq3E
IFBlc
*Zf#
.c=50
%^s G
8;#6tmh
< Y
}7jr
^QB/3/
[4?oS
O.!r
HFx:^
7j5t
25&'
8\u`HL
UhGU
p 'T
S!u*
b A7<
Na#*#
DialogResult
'0Oa
]}>#
' AO
yAI
= (
F^kY
`N9oO
39'fpI
3~5q
>-^"
S9d R
K(}
W'&{
r9o"
Load
kA9yS+
Gi2}
?l2tY]9
oD>,
YhF$1
\?Q$
vV}u
;Np
dc[H
Ou'B1
25dgqM
2/dp
}Z\z
5,o-}wO
xJO!
fY QV
b<]
aoQ9
yAnW
%<>8
rw[J
`8 6
dJ4>
set_Key
wJAL
%jW!
vag
)Swt
a\4*]&
KMV$ygo
'Yj
/F<e
D;/-
uK(A
){J&
Q\]I
*@}?FU]
rrra444
{Y_4
9l5E
`Ubz
?<nH
[iM$v
/K!
rq=x
MV%|
"L7
,[7|\r
*ka3b:
FhAh
(y!'
LRiB
444Z444
;3~ar
0w?
4<v2
W _%
YLgj
444+444=4449444,444
,/Ib
YkN
lC<v
im}?
i],:r
Xq), V
([H%
IM+
444v444=444
ehyo
$<=C5
g0KV
=45u
R<)3e
Qoo
;8we
Hx2L
ho{O
T*#
sODG
^WT1
=&1/
(Mtt
YdB2`
1=bX!8
`br'CFXxTS_
L&&g
I"IoJ0
CMrx
8|Df
f66/m@
jojPY9`('
iF
Y`_W#
r'wkJ
>?r(
B%^hh
eWrW
y85qsxOP9Sk6CSQC3i3V9SwKzMHhSVad
CyMs
(Gx
VNP6
\#@N
w! !
-=dH`
Gmc
# >7y
get_Now
=l^Y
,/6R
AqPc
O7-j:
k7 h
k|41
*!|Y
4sd?H
r`-k
hD>Y
444=444
zdjU
Nq$
(YIA*
YF,6
>V"ohd
_eFX
,&_
$w8
6}FheM
,@??
Q>~KF1
kpH(
ZnM)
%H#-
bm qU<
s&X
#~&ZGe
f|E.W
)IT?
sX@N
LW ||'
|(5+tW5
@`c]w
HLC?L
hV"Rp<
ZD\8m
wklB
%CDS
I CA(K
?mg%
bjG!{
bFbw
*"O f
y o
SA\%
i4]%
! mV
aOEkK
{PtR7
+"[h
kCP6"
N#&KO
Mv,[
ym~$g
DS ?
+gu[
{7{h
e1kU
-) ^Q
ANl7T
CpaD]k
zB~?#
= 5B
(ZAy~
A`9n
&%m:
} <(
JwMq^
*;Cy1
zjCc
60"~
pK$"0z
xH:
@xUQE
_!VM
bSWl
O3LvQ
;5yo
+AN[
b`Sq
[&zo+
<KHL>*8X
:v5O
/p=8J7
wiA8"r
AUFc~t
A`g"Y
DZcbA
9F0h
8PIP
:.x(
g(N@
W>Wu#T7
ECJ-
|_AAqAT
iGt
\+W#
-p?
\/O
#Strings
?*[>
z _~
WLkf
1_kF
. 5+
WLKft
B0|w
C R\H
2$[L4\/C
rB9}\"
F::~
e${w
IpPI
kiC5
'8Ef
emi
zJY]
^\#;
n#;X@
Ahc1
wiSt
XL<me
RRZ<
=@4,
:pb/
aDOw
g53;T
*Gc T
BvjI
`t(V
444%444);?T1MRhM18X
iHiLX
7K^[
zI}g
u%V,
jRPa
W Y%r
444)444444
Z_F2#
RZ*K^2
p42)^F
A4[c
*[8ANW
P3 ^
2P:`
fs4!N
#LSh
*?~C>
OrANs
j/@Z
M Zdlh
dm[FY-
<]}'yZ
Urk6M
5Ln^
9LNB
d^h'82
!wI'
Ceny
oEq)
x <M[i4
ln6iA
JCF'""-
6\wl
{Qv s
OG\[T,
"4-[{Ug|
W_Q9%
) OO
qP*h"
444k444%444
e.MI
Mn|q
{0R^
]yVH
})zK
<o9$R$
B ,R
Wxkb
8y$:
bj~v
t}!J\
KlQY
d%(7
) UO
I0)x
e!Yg
yxEnry
9|SH
VM%<c8
wa{/
QX,nsZ
MP [!
4qlyQI
~`)+
MGn
q\$?
AzH
R<Gm
.^u$
8<]{)
4QVe
F+@c
2iVT
M4n9X
444F444
J!Pu
5z~@
V=CB
:x+%"
p+hO
OA0]
3. fp
X J;,
9s x$H
c=])
Yfs!j
VD{/
Mj^>
Gb{HJy0/Y
g_ [`_
NP7:A
v3d=t
6pub
P;!$w
SK y
7!:W
Xs^"
ML8w|
p:7jxi
GW]1m
nnc]f]
L7 6
.?B-j
5N7|t
s]]>
&-R=u
?oVj
7ybr:
MPVQLj
_/ (
hux@D
!}W`H
n0A^
YLB\
~Qg(
#,?\t)
"i7
;N.Z
M6}
ZyQuY
d@0D=
+bx*|
XTcT
gUK,
U +*
fNN}.1
444f444 444
4E]8
NN&f
Uc[f%
R}g}
MJ`
9T]5V
'P=x
OpJ H
v0a
NcxK
3& "
]ncQ@D
x10h]Q
pX>`
M @ V
T~V
BZozF
!J E
B3%wk
CO]N
5w/i
1jU.
#](v
?Ho$
i*zqT8
p;5+
q"0LUp^1
Et12
3:%)
O(Vi<
$ofw
,~ ?r
8e{X
*bCK
s6m
xqk\$
g^GA
Ji"H
PEP6
aL2Y
G>l"
zG,*n
RUu<
QuX}_L
1Ow{)1
MvbE
^V#lQ
:\((qJ;!F
hpZR-
F@{Y
6T1 r
:&ENp
tyW}
NgbL
VJ1*>
ODdSf
b86J
sQf5
IO-9
?#Cb
j]_7
R"W
TpM{
t7;0
#AR/m
t6W
%[+?
Xoa=
uIM
kAA
;:S
_4
(>vB
OC~Or
h%pxM
Lz0ZO\
8nk[
e/c>
Z26&T!
HF?U
hyQ2
v <0
gJ%H
r^1z
J@I5
8R;q
[,lm
Uh b0
444,444
pe1t
f8>:
!2T*x
k%Ca`
dH04
UhAo
O@ D
(Q2
4V"s<
5uo;0
Yt__
z{L|[
IJ
\R`e
-CJ.
^C&z
wl`vk
%dw{
#Rn&
w9D4
qdc=t
rxke
pRlm?
,_(A
@i#:B,
r~Cr
444;444
@D$v
,QSO
dO#I
&VHuIHHnPAzSOGbhA5UetoM4kcb4GvauiU4gS1y
1y{S
?87z
wU.;
4U v;
cHJd
zWzQf"
WS*rq
?vV&U>
:<Q"B@Sq*,?
/3]bq
04SK
L'=,
0}SN
~Vp}]5
87Dw
sPr`
==G1
2W@b;
.1=!
&`lL
444/444 444
XN(nL
_UgDY
/g|R
L v@
M^^N
boU8
lhZh
<zMi
44-b
x'I;[
/)`%
4449444
"*P}
w6aO<
k*-=
]SeU~
A"Nu
I+%N
f?S
_qtKj
4444444444
OClU0
+|&2
o__8
Hfvh
,uh>
<[8V
_ Vr
"3XBq
@zhGM
`u_7
"Iq9jUmpnFgDqo648dTHin4gy0bstiiZdE3
aImR
!=H/
Q>js!
(!]`y:
sfl55
.@*|
JZt&_
ENduC8(v
ut:B
Yizj
&/l/Dhm
O &
b 4?[
RfC]
fhrs[Y\(&%(
QJPx
wD#
Y-fE V
~=G!
Lp1Z
`^fEqm^
r02^
e*LQ
I|$j
.bRr?
okI
@Ot4
#U K
U0^8
])?l
n{KDH
\Lpx^
M]TF
|1PO^
48
IL@Xp
sWe[R%
djlD
4*. E
|. 6S
T#x.
K~1G
S'{+q
He `
bR-z
8.hx
1w2
8+[&
iLkvOO
)zSo
4vy
b+$x
SVo/XT`YCG]
+X(}_
!-hj
GO*z w|G
$*+ `
%%nz
C0.8
!/r2
f`wr
[4/uo
@,lK
+1K,
*%Wy`^
0_[X
LMH<
'Iq
.Nod
Gm h
RLNS
`{wD/9Q
auT
7Kl:e
k(x
?\~v
E}XN
2;x_!p
Y :Y
;+*ZOi
,!R_
&)3O
,ZYb
cuF@
SBz5bB302Fq74TQZsvFtQ7kc9U
Nq(>a
0kdM
fJg5C\
UF^qe
SkipVerification
.L6,
ry*__#
}{A"
yf!*#
L@OWn
sg-;j
'+=e-->
\"]!
=aXS
1 FW4
Uf)?
VATS9
c*N
4&-i
\r;Am
F ,Y
)\+4
wcd!
+N#C
1X= cl
sSnGMnlSQHZW9hVkLxwfGCHcFbb3EHkN
)QOW
MFeQ
[Cyb
TR{[
1Bm95_
n,%R
wEJamC
)&/<OI
.nJ93
OD=
WAi7
^G5}
)BxJ}
=,_63
m7 4
U4BI
!,:i5
LZR.
J'}h
Xm$Q
i-_!
1n]Lg
\|FBtp\
/z>+
|J:b"
get_Message
{C_-E7
2.U`Tp
MyhX
6>FA7
`wQ5
yHsTE
-geP,Z
TH)K
< m[
y8%~
9BRe
d'H=
m][%
e(YI
N|C
hYl)q_
{>!O
W@yn
jVpF
[% 4|
@g A
`ce|
cqJ?
7f h
T)\[h
;OcS
v iTTR
i#0UO!
F\"d
j-^x
mO{^{
pom5#ArLnJ
7'K=
Bvl/
< N<
9l\9
c-zO
!J >
}zAS
y$$p
r3'!n
6Q8_
Vq/kb
sgQE
/\GNr
2L23
s5::
f7BdbJ
@.reloc
8]zz
u7`{O
+$Rg
pZRv
Jh Q
cZf`
444.444=444Q444H444.444
e1F
kbXg
vR7
jx]J
Y})C
WVa @BSw
trRNWb
rrNIf
A[$1
awaD -
'AV#
+4(Z
[m>'
K (@|
jbab:^=.J
BAL2444
,^w8(|
(zy1
TJT-
[~na
OsoV
d#R
U5NVI4dU8
givVB"
~9{j
444h444!444
@c^
#(3)u
v;wP
#Xc2
(e.w8/
6]H
2g1cY
=LZ1
"bg-'Y
$th8
ts/
)sQ }
RhfN
">4PV
)kR
444@444
#L3^R
4a8c
3NiK
\CnH
<9.,
&Az<
3H*?K
?5Y)(
5-(ecc
8wG\
uP
`"!'*JA
7U0]
gq`0
x&.k
TY
!kln_{
Bg?w
n$;?
WLY(
I9`:
bogV[@
444<444
hp
#aZK
|UJ
iWLa*
01BOA
JC~|w"
? [gV
%qVRX.
jT8^
Co1G]L5
EqC"
-_5b
Z0c 4JII
H|le9
/!x
qk0K
444*444>444McbdhWWZ
xMW
3;eo
,Dm
\aso
@VnN3
) DS
EI)5y
h/:_Uw|
8cS
eJO
ZY$N:
0Jx*F%
uPM
!6 e
?Y1 u
?c-
<hm;7
+ m\
`}*
2@.
}{bF
*G
!7D|
bmUI
UoOND
V?kJ
PC|0
&G;4
~+8{
csED
r+}x
KH+h
f.!V
<HX'
gJxa
zJ8U
yr^{'
> ,F
_2ZI
'p?;w
|E@}=
/)z`
?APv307*444
h\p(
R X3
-B 0
)ia$
%UV[^
fi'zF
a=i[
{i!w
\rat
|oDq
-2gDJ
_swT#
`2`T
]>}C
S1Tp]
UC \&!
yZ >ju
oLKP
S 88
8g E3.d
,C .
Nd+V
s`B^17
>P!
Ah-n
1aGG
5VWQ
yuowKj
x;zz
3BU0
s'/ZP
]oz
SlS=
:|@Y
e1D?
''v@
hj%A{
ve?l>BE
hnzb
PE99
h?NeI
U[nQ
H$&G
mVPw
Z(`)
}o9
;]-8$b
vw|G444
(."@
;Gr*@
%u DF
rhXn
whP[/
B1N@8(!^4
u `2%
@/-P
68J=
eVm
ZU
$n`r|
ZKSx{
|PnlPt}
d.+ 2
:lP'.
..v<
Hs.+P
O72=
+1PJ
mt*ZAQ
!- b
6c`9
X) 5DA
"Hb#W
oAvo
XJmW9i
/JkOCM
{]?W
`C^ ^
,d4Q
4o@|
O(`W
}[mR
Eeqa
IR>Zg
E`
FPs 9j&
|=nc
,!M[
G8\o
;BV
)e[x
ta]q!C9,
KQ@5
B]!#p
]W&|
lIs5
(jiV
239T
kR5#
cgW>J
I|`pF
{%-xn15=
5CX8
3Ql Ij
444+444 444
..R
s\ "
q'X>z!
6Y;X[l
eixQ$$2
c zT
-X{v_C6sSG
=ZHG
/;wnY
^r}rZ
66aj
go(
T%(S
b}]`
0FO{HV
huN:
1?w~v
4(gT
TR\O
@B8t
?(bd
0GQuR
:u^
Rv\HA
444-RPQLB:4
mkt$K?0
4$yi
Z&+]
s6.Pvs
"dJJ4
sE$r
XPh(
lG -
9|eL3
xN<O^
OS6sHUgEuZqa3yTuIkxyFVHmogtj
m;K&^
^v^1
:u %
,@hJv
5}"% g
Q*&E
$]5!
=|8C
!$wrS
4zT
MX R:
~u~J
2SP
THA)m
tQ R
\M,Z\
#:x)
:m\-
^S~L6
2]os
_u8;q
zixqfnMeB6BT4d5VRWDf
d@'1Nv
hhb)
#L_x
yq!o
Wxp
5jW1
^l=)h
,& Qb
_4]@
v4h!Q
m:.u
I$Dj
n=5
4t0#
Z:!3
xz>]
@<r(tJ
X'Z
@Ivw]
1)\_
5S1O[
MFH8O
*t;z
oB/d T
~V4q;
8F3v
OVWV
m.gt
hz_j
xAv0Q
vn-5
|<:DH
3 F[o;
ikz PMX
#^tC
`z3{_
`r9_
~JT?
tEI;
p^k{
]G#}
r&o\w_
444444
d#E
+_C
;/75
_~85A
H8MoN3
6^)^
lv[
/#!
,a4E
@~eK
444 ABM
VI3z}
/eMF
bpj2GQW
>y7f
iu6q
ZXQf
)I p
`:Sk
>+rh
|QGm
ic]\
@7_\
$-t
+7
aLRZ/
=? M>~
u"'o)z
[kvO
`&m I
o!1bX
~ywv
q.}S
]~z
e)3&zwt
FBJ$ytf
2qEAx
jKp J
T|Sm
E6dTV
S|kz
siHi 3
7!'2
. k5
FPAH
;&Y
X1E!ta:T
/SV}
c:zo
oaq&S'I
444S444
=CSO
+v2+
(O~y
>BI5
>bgk_
sFE?
(:-q
gSp<
8+]N
2 ]N
T!wz4
:&$(R
Fc45L
#"B
/UX:
% Ji,W
vERxp|
[q *
+}a)Sb
5g
di.y
; =
z~`1
R1ya
T3I
bz/^Uk
K)|R
~j3Es2
uqVvl0
b9Q'%
444C444
G]`
l>[[3:<
jhA=
!qhY\J^k@
<xN^W
%I:)
XD\r=
/"EA9
9rFJ>su
Z#]v
V:7
dE An
Kc$g
hI`#m
Y\nnJNa-444
U<t:
444q444'444 444
O"$T
kw*Tm
0)`z
e&r{J
_o`6
wL}V`?
rpkU
_h%{uC
:}zxk2
:#`A^
=G_Ss
uBR>t
:XB
b*d3N
$'$m
LS,^l
d5K &St#
wh*
gCpPP
=d%cL
#UcTxpHvpBHpMFBIW05hEQLldqevIXtcOD3W
R =
@ujr
V{l7a*
T)6
x i$
eN5;
NKh
S1Ut
QqPI
gV,[
]/}09
, c:
bc)j~=
'3!jG
WP.+
7Kmn
fv8y
444^444!444
nn(m
V1te
444X444
<,Ss
d'70
plJI
XOCk,w
fZ /
vCWPXL
R 9`
1p=n5
5J9;9
81Eb
yr;4e
~},$%
2NZ#
O)/~
A(qR
=@eR
S q[
\v%)
I7BQx0dvEBjirf11uDdYsXUBW7BN
[)8 =B
rBwC?e
0FR&n
1 G8A&&
*vNk
&g?I~
MU"Z)
/vD-
h;3jwq|K
Z2W.i
-H>C
Gh7*
16]
>XV\
z]8k
+; c
3D}5
2F}k0
ddc^
t_].
444b444#444
1kKr]B
Q 06
B,7|
Mkqu?
?eSbz 3(|
{f%m$
Qf]Q
2#ZWx
%n/ Z
|"C=
R8ntr
444 @DWR
%!g#
zEe-
zrj+
1[[J
d8_ nW8
Vy*^
]5bh'
.s6qZ j1
u0W5)
o\^jT
Jx9+L
=*ou
J)3KKk
}dWN**
{K}3.D[
s.-ht
CYo}
pq*7
C$];q
Zcrw
blr8\
$cF+
{K6q
)l^uf(
kS x
@qB.
j|($5
&V>
YN`4
uKAq
D&2'
f&,
?j'
8EF2T
UE~$
4444444
0';
p{s
XOUN
4U5T
87]Z
UYZ#
*(_q
5K5|
z\C5
p><N
iQw1g
>=OD
RDsG
_H"}
5Y=xu
<W[#
l{'Zg#
ZMtv3OTPEox9m12t5DXiPkho25f7
eI/e
S\Q
5b]G
mZ_#
%cf@
"20
PF#?$0
[#LE5O8,
Ls9{
XDHO
=M )A/
H;Nj
8]Ive1
J~dQ
dI2?b
444(>ASh.,6
b>Ji
XFr#
A<?*
V-?!
`->8
z.:w
;j$'
I}A`
4448444 444
i]|/
b5F?\K
)YTtf
444s4440444
`o
x:hS
UP2w
S3I
*aE6h`
Gcv@i
VnT&
^yy
K,"l{
444G444
Y{v+
$fchG
[WV"~#:
UnA$
TW^k
&_9Y
$ZZA,*
F6?W
{ ;k
qIF Tp
444 444 >?LV=>L
iq}~?
|f_\1K
7-Sp
$BdIU4
7o&`
60#->
2 -&
^W{C
T=8!
inL6?tDt
5AYNEm
COA"
%_/^
?MO8
FM%N
HWj v
2E"}
mscoree.dll
$=A?
KU~
*Szs!
I{WS
`I?<
`zH
&Q)s
J0J.
nZ=3
GNls
H)As
X>B'
#2 l*
\tyG
R'Y
N*x^
3eK&
W)* e
mwX=
l@eLJ
z.Cx"3T
%jNfTf%
s(a:
`:]]@
O.'d
.u,Z
g"g=OzS
aQF~u"
pbN
V ArT
y _0
4.S`7
444/444
tFK6rhrWPsLdNgfvNVjQriYIFyPi4nR
$v E
U3K gY
cv8
>(Tr
d_Bm
( <h;z
h.TJ
0TA:
&;d@n
M88u
XgLJ~
(c t
ul",0
444k444'444
QUM]
eq"
xF[P
)mcF@
UM&ot1
`E\=D
K]s/3Fhw
#GUID
8 v?
]g|3
$m`t+
B4XR
444%444;VUZfHGL
?-l/
&9X/
+uO>
Mynf
074A
?r;1
tmfL
ci|
msntk/
c3r*
[w4d5
8p+6
wx;d
-D1I
z&!#4
3t~d
Wnm,
QT8E
|~~
Xkm8
l#M)5
3x).
^']L
h{Ku
:/'
bcjL4;:
"%+
aa!0V3
YIsp
;xk9u
U(6f=
System.Security.Cryptography
KQ@W8
3h|dr
!V{e
%Z 5
?[[p
T%[d
@yh[}Y79Qp=
[MY[e
s@)SL
#&^$
k5J]
Gyf?A
&:>W
M`VmJ
:E_{
Me=
L;/:
h>kZ}
8\Tl
`Y8?'h
['k-
$%!}H
N**D
-Y+wd(
HVn1
t mr
!%S{
Jh#%J
x^#G
)SU:dr^t
9MOp
`h%5
&>Z6
gM?
8Kx}
+h"
>"3;
f`Q8
~qIo
Mn.O
y78U
"0S{)
7Mx]
d1a|
AC$8K8
+SiS3
.G T
444$4444444?4442444
i41;8
e+lB
H\XI
wR:bm_
J?F
+.W!
oB# J
m,h
_LfH
:|#
^kcl
)9s!
dU;'NI};
CEH=
gyw
Q_WV
r+#~
GR.H` @Y
9x55}
1d G
RijndaelManaged
.h|Z
xYQS
yQ)"2
6n7i
&U/;~
E;~u
d,}8(V
JxvqV
J6~1
1.\
!8YE.
2N?
S+q}
*5^O
gJ?z2n
no{K &B
vla(K
02K2if
?8;
2E3x
N7 0]f
444:444
SJe]4
.k\Wl
1TTK
@~6.
4l%WR
H|>
AVj/
n(Ops
R)= YT
)h\p
N /u
1?v:#
O9d=y
x4-K
9&iy[
QrUo
2:\'
s*bX
UClIh
444c]P
,xlz
444q444.444
bL/,f
aEd3
4S8PSdKtHFuxiqyMgElw6E
o ~+
|`B"H
0A"?
4kx"=
S-R^5@P|
Wc~(3{
g_+j
%B[{Z
aMD=
u>YR
FEH]ieM
m^!d
y$]D
r?{_|
8l"%
rh#]
dq.k41o
x0Q5
}(-f
5r?,
r[x`
Y&<a{\
2.00
=W0^
Dlw~
?3+R|+
444z444?444
Gg<>
uRFb
/'Uz<
rB6
$5H8(b
K!?G/S
[!Ilg
FG@
* Aa
\v&@_
D7:)
[bn|
4xc6
p<+)
5O3}
ctIc=f
#< z
$I6
"hOM
paE-%
_OO0<
y6L~
\({Y\ +g
O?N'
!6#(
E2SQ
(CNhh9
lRKo
{g&T
!Eme7C]
&JCK++Z
^wgb
{7v#.T
Q6j`
=F;
D'lN
XNacIpwy6ToDsu34tXLeKf
YTW
gg~
NV1r
Lz5m
(Lo
+z@
KoN
=J$^
K;`D7
h'u[
\8^`
5KNOe
q*Tk4
<\3N)C|
'O,+
([%N'
P:BV
L4Ad!
y\aL5)l
6YS(
<~6 ;
At l
*AuM
=Dyxq-F
NN]O}sK
Yy!t
R _4
g,NR
V|*q\
?ta7
9Vb[
{MF3
P%Se
T<Re
(#8W}y
g{a<YG
mn,u
f@6>j
#cvv0
oJ1JK
Tn+s
}@.-
(3g'|GA
0g&*
5~_Js
_%U>
cdl6
ule2~9i
G~s`cP
v:
y.b
Qy^Y
V+`
6-}uj
hz.jb+
.m)$_N
rM[<
wv6MlsdUaDv1Fn0nwyvi1UQj3PlyZXe
uF=
{[H
r}-
)"qP\F
D$M5
,&AfI
NFDdk$
WPD_@Q>
R"I
]!KD
ZHJ1
C=}2
iLbQ
t}34
kl[
/2am*
Raz1
ve~48W(
INR<x
@R|W
)Pe&
tyYv
}[T%
n#Z5
4: a
+P@,^d@B
r{tzoB
H?#g
p.|
ZO
JmyD
dC %
}}7%
jCug
`g@;
p^C#
icGC
VNOn
$b\0A
r;>;)~
0Ar[S
MJN)
5RG\
Cp7)
O:?1$
w_3,
Vfy&#Q
Et55,
_97Q
'R ;
e.W5
4?ON
{|Mi
p29;~
zS@4
5h]H
k_4T
7~
444^444
' [W
irgnd
RVh9444
}pAwT8
R/64.
_Zz
`X9]
C8zT
jzk_
:z"o
z -Re
&[q'_}Q
>h-A
>R 7G
wgNAN
4Se]
^ud|
D2qa
}9+A
YXa~444'444 444
YBRW
36GAHD?
^nb4
dhwx
:}50
fkFv
E?YSD
YL'H
46GMEH[
FcoPl
Q,xH
kF|9
t*sQ
c51Z
#A]G
UhW@
o'M
^.~
GFKo444$444
'`T1
Z~xI
}*4
lGUG_N
zMP)=
^ud@
"bU
u]7z;
`/,
W6M?
+`N[X
=.a1
#hb
AGj8
dU9=
w4AWR
#|G9c
!.[f
C&{%}'
ls0t
bIz[
.}F2
2q1!b
"[z M~
jip@
uC[ZTCgn
(eVa
u-S\V
3d^T
]QLs
ht-
2:9W
]4n1X
X+KQ
"mQ*w9
|`R9
5UXqT
T6jL
nOYF
"!@s;`
k)a
aUg.
;S+)
#qHO
F/xDs
tO 3
yhRO
ccdvOH1
gT|6e7
M1&_? W5
c26n
:2f0
ewrbB
~!awT
/o>*
vJLdF
`Et0
4 ${
, y]kQ
@]`V-
(PW{
nERJ
444=444
}C3CV
~:1
5fl~{
~>M'
@[s)
(fny
H*6mh
Z+~|
a2
VONRl
+G `v_6{/
ON>O
'OIg
Cm#KiN
*xY89
Xpcc_
K|g$D
g'7e
o+A>
jLn69
@ IRY:
V%vi};
mcf6
yjld
;DlX(
53!yz
Z0^s)
a5u=?
Z7]:8
"1?D
6A!&
[ r-
lx>g,
@RQr
ik0o
;[A
<;Jk444#444444
5'u,
olY$
F"F6x<vG9
0(g8
444H444
dE:*-
.3zb
[#eJ
t=Kx
XZ1
$G@%*
2J|
IP2N#t
d;Zx
"3v=
,RFl
_b0Ii
TX07
6:9"
\:H
jrH:
E3ps
yt97^
P/EZ
444y4441444
K* -J
"eh H
w^F
Xu0LA
py^;
XP?'`
{}o1
leTw
`b n
kG;&
5}q/dF~
]NU|
v9D`>
x~u0
.+IF
21@?444
{Un/
T`Ki
\& !g
j.d
V4c(6U
TGfv
im41d
eixG
JA];
56FOxfA
*cvo
D}K`
1#]i
d _Z6
,xn6|
]$9W8r<
-5Jex
EDMW
MC{X
L'30
Le~
.t(N0
E8QRQ
5N9c w
@\vAMF)
VAw :
!;a&3F
C@0A(
?A\S*
kUiT
H2RD5
yFFXa
)cKt
op~^
<5)y
_/o*
`EY`
q]o
jJ^bb
dZdaL
l?<[
X4M]#>EJ
r<J'b
,vL
p(|e
(SA
gj \
444G444$444
VU*@Y
k"{
*MAV5
spK)
ZD<R
vpv,
M9Zv
dd+D
*77-J
~"GS
aSd%
oXz5>
^:'ue
@ Su@
E.Z(
5I%_q
VLgt
3d9,
YV }2j
(fy?
q1Dz*j
{[8
_flYr
}h;pF&k
,AtG"
g: E
JB)u`
Q-\2
ZskN
ljs]
Zm70
"Asy
`7Lic
El'NvBtwnJ
ic5~-`%
-Ef
g|Ef
UgFW
z=Dyc^t
vdA,8
'&'Z
}v>6
<[62
*P*/
%szVQrr3OckZQplA634ya7tsqWWedEZDhMvonK
|"*.
YB f
jGd}
BS
8*_rjR.
O-@
\4}s
JKux
*(X
&ow6#
189I
JKZI/4H
oaP
\AWo
? 0J[
Rd*uZX
444@ALZ
O4a$3
#^pB
F1:N&
1#?nF
saD
}eUA;
pBDZ
#%48
& ;z7
dNu6
J(7XTA-
.wsE
`#aQ
GNVC
444q444:444
2Qk
3K7P
/KHJ|P^
>=dM
\]s'
eEW|yuZ
\Fcd
s:Fyi
IOc=
s2.
$&ZT
`.M[
E5[0
Zz.b
#`_%O
2{UA
ZuG+*
444O444
444O444*444
o-4:
|/f`:Z
TsmM
kodda<Wb
TQK(l
C"'b%
"U5x
<~CA
n oT
G%_}
~n;D#
|`3P
w^V `
=3u
8;fa~
"Rg1X
y_~c
\nkIu
0$+aj
pqRgs"
B%3a
444Q444
\h|r
#v.o
8.S5T
HOw$
!H9GBGEQ1W9mkvKPuTsl3SCHX1UnIMoQOs
o6Szaze.
6dVq
D;\W
t%"_
-{bVx
r+B'
0p_
&`(i
"VbZ
\5Bl
q#A;
lCD5
Z_ U|h2
)Uc\e$
Z#f
}J>J
ZQ4~t
b__%
(BT7S
HoZG4
$\0E
G)!*
qFU\I$
E9E45ByTkg1Yuqg7MXr9G6gPmzrti5tH
Dh*}
hF$ %>
/sVMs
}Ob5
/I`p
86w
F N`
;Yh_>
h?fj
m`mt
*9d.
my^
ofTy
lV:k
:hZ=
L4#Xwr
TpH
5|n~Zo
`2 5
#w;i
B?
vR 6h!W
Lh(
\'#<
Hh:4
bw7^
Z;YN
uWG'r
)>2h
M;%m
SQsl|
? ~
k0V
dZuY
4446444
W4^"
"Yfy
K@=s
ul{
d<gJx:"
f{X9`
Jn&
pUP-b
$r`R
6",|
!7_
gdl
3"
"1 M
~YW{
!$/`
^jG
HelaX
,'vI
h#|#1
KpJ,
rlj\
!n[j
+_{`
-nAu
y}"`[-S
fZ"h
.HCo
'w+/
T=!L
}+7A#d
).jO
v85b
444k444J444;444+444
#RNj{
u<2U
`)`Kh
%OHch
8[32
&0 E
N~Tw
X m\5H]-K
I{~P
7)Vk
w\NU
18To
8dD=
omM
#8LtfR8QyTBN11wIDKJMCDQc2DGkwMz8XOkf
\5_+
4447idY
V"qF
b94Y
jdz?
8g=2TV\4~9j
o<BK
i~)\
?xH `
82mBj
C+e=
GFNXC
aQkA
!O[j
mhr@
xjN77
U&C6
nn$"
J^-C
iLl^
(-{9
Ky*
$M6|
sK$z
f7.m
N6B
:'-8
Qs\{
D/L8
lBrL
@OTw
i,8*
GRV%I;
7n*-a
j9t=
do*3
z_*0
444 444
N3 .R9gP,+
at'$
&oWc
f W
bMhI9
6~P:
{-BK
?"\Ed
"?@rJ
AlOy
>]Lqt
{/ *
lw4A
098
,i>)
h.-Gq
c\8=
+ymeq
lFbd
hb<>3
/zoW
Man^k
K. y
}I)9,P
Wt7}
Vlr{
@NS~r
[~de
y*BJ PzK
)!Zf
AT"@
R|[i
Pc=+
v6?h
af8G
qF]E
fr @l!
Pr\g
O7^[
[^J
zFm
MrV
RI3
- WZ
4Q.&
|,9*
[uZ6
ofX <
x(sGS
Q`(.B
%A,$
?L30
CwAC
tm}o& +
SF!u
V\K".O
}L
c5/W
kPf5@
q-QxL (M:
1DI$oc
E69c&J
u.";
xOz$"-D'
(2~9`
m'uPx
2*;[
H]8m
^ ]5
S#X~
Hrn
:>Q8%&6
/`JOw
|+~n.
/. q
S?O
Q;M
xRc`
u@at
YD1U
444urri
ECH
T1S`wpg
tx=z
IGQS444
{u#)8
&m1T
%w890
F]KXb-
1'&qUju
>}A"
Lvwa
xw*:d
(~ o3l
eGCbbd
444I444
xB-K
`~@r
jigQBp7d9xNwj70wuSGlH9C1UoVVz2B
"b l
^6x
WRKba
` hL$
|.|-
dQz?O
aM#'G
j(dp
bD6(
&EdL
|`d9Z
<>8{
m:5L
lm70
>QJ1
8AeB
\47W
5Euwnk
{O@E
r!}84p
" N9
?a9v
PDfcB
Wo?%
pl~r
Xhwh
rl5 O=
8z_P
UF?K
=U4F
{]Xztb
[[rb
NY$
lUTE
& 1u
444g444#444
}"fM
sry(
>Ys<
9R7V
=>G><;D
k[}K
:d 3
kMJ(.
D90n:1
o)%P
>=3!,
Hat
*vor
)F:-
|mdS
3?D=
}1b
Jp^(
`H>
|T@yf
ZST0+dA
U\/,-
he(kH7
;|L4
6#M\
E<6z
q3 7T
1t2&
o+/
x Eor
>>h}Q\
"j}lO
01G2Q
+@{*
K>f=
B@P^UI8
|?38
zQ8*$
E&bu-
SVN
OF~/
E3rL
QFI"
0DJ;
m1Z1n
T5"I|k
39ZN
0=Fa
!;I`
g)U/
JmR@
Lb8}
>URR$
K9SX1
[A~^
:vkDq
=!A;
tKsWm
iZ_h3@`
z3""
X:bPP`
N?~jC
MN%Pn
TB{c< m^x
}+r_skB
Exception
[F%G
;&'"jp
}o:W
}PE^
zoV/&
?v$G
+8t0O
P\.T+
1OXq
FSgI~V
o53C
G EZ
NGk\
]<#?
EFSm444%444 444
!alj
W{R^
G[o(
:}]/P<:
*g=C
0&z[F\
~<D.
kH2V
T?")
'uN<
R~m 3
eVgZ
ssoL
tL,,
q}l
sR%v
fOvlw
nQ:D
N}G"N#
A.r_
V0G2
a\ Q
dp(:
$?PA~
=T)|fg8
o1EN]
+_
Ek9o
b\1A
<wXs
e\I/
k'6r^7
\m(v=X
0./[
}t
6\H4
Z8<B2A
0moK
4t?_
^6@g
444 7<W
N[ }
7o}Y
.BcA
s6/AG
O6='*<0|
,Y+
c*U,
hz v
Psuq
L0Z1
r1ek
M [{
@[!=
[&zBI
!j/K
K&4\
&0t18Bicw12js5B021UwlltzbYRnAWgQjLq1eOv
*jxL,Y
V d]
-% (
kM$yDCBQ
c&13
%'W"
TNjvUZ
vC%==
r`s^
k:j~
a\O,C
wMSk
;eWt
@'Q;
GHCcX7
UvU@Z&
,:^T
|]gn
#ihz
sP.R
kbVr
B_\M
^2aM[P
Y;3}
rs*_
!E0p
q+lbb%
I/x5
4iUz
9XqY
LNM{
|l-L
ZO)R
NRld
xk82|v
@yzD
e K1x
'l*X
i>XH
&Jm3
|pu_
'TNK P/
Mi S
4*J
6J)6
3vB*
8g5
r~,,
ojuC
&YAP|l
Axh BD3
}_'H
hSSs
@?.*
{=S*M2U{
'V_x
cjW9
g&i;
ga'~
PpSS
F/Ot
GL7
"4>'M
^oA
qsb9
Z8BUpu
Iy 6
*`';
-wZP
xEr 2
ZZuf}
#3aQ
zp|e
32&EL
0y;
T4*I
hM!"
\%8Tv=
`SzI
h;A9
n%#(
SCPEN8
Y&}B
y-Ll
n1Nqrj
Sp;P:
rStD
^%lb
[3l>l
tk|7
4ZeE\
7s,u
![L8E
B@fg
5wf
G{D
\]q~
5cHy8dQtKZquU6gecooAVPzG
`.>p
f!:A
Luki]
/p}V
*jrXNC
fy`
3)v6
OPo]
s" %
(Wt9
3u"/
YwsN
W1dM
YcinXO
;$ C
WTc]e
yw5N
3L>j
-TmV
EBXV P
8UZP
T|Y:
Jsjj
}uV`
#cZXp
F7!o
Fw2G 4
^>#/
~'Ilw@dJ
!IQ
@) Y
x/{A
E` Q
MePU
qJ?M
Vj>bC
wxo7
m(6)
dnp;
)s6P
)nj$
6Z5BHC
!2n0
#fekth
v:"Q
:3Wt
dBW-X,e
8@R>=
Ssay4
:j9%
Lu'G
aIf
kGig
M9EV
444 444 444 444
wijL cA yqe
=D
fUQKB{
E]pO10Sj
fC8%
4446444444
@pG74
k1
HJYVWz
a~@)
/+gI
= 7\
kIGn
WmBS
foI}K
dk '
mnfbd
a]\j
:>|v
2D~.p~\L
FY=+s
ig,}
>V &a
OrYxM
%WTP1
T8^xB
pKZ?
HS0 >V
}=gm#
hl1<
S<KR<
%H]X
2y\q
AW2WU
K-z.%E
^M\&
/QxG
$P\{ c
tMD4%EVq
.,4g
pEk3?
~}4YT_
?|B{
Y~*n
EaLV
3xB
bpXL
DKix
W-#1
K^;Y
GyYC
m~+U
!l8)
VYiv444#444 444
K[2D
k3*~
In5zQ
tPZ'
pKZ~
qt[1(
)k$#9t
ey49
eNRv
Q,_i*
2PKt
-Z)-VIrH
DQB4Ok
P-YyU
16^<
/Z)_"n
M|C@
7kLH
-U7,~
$|WX
K$9
#2#~B
5D+[s?
wDsJ
`S2D
?L^`
cACiH
>Vb<(
yeFPq
nV6)
D?8*
3QTt
~1h9M
# O
a(Z/
atZB
/ z6
ATH}
ymN!
>HV0:H
sK"Z
aeH
6!}2
*Um+
67:&
7avE
aa=D
+]aD
Ymgr
i7Kp
H4lH.
RF:yIu)8E
FpH
L{7>
MEhb
C Q5x
IZ,*<
"Y<Le
[P#j
Yl@ (f [
s'+O
%u`_)
x[=|
#il'sk
<=JJ#"1
n@Om
:(o,I
CZMcOCdXIFPORfgBptXFSqY2BuNE
/H\m
uYv0s
BHSE
"H8'=
ZS{l
JD3\
=juS
9BER~]^
P^\:u
i ^U
|/c
ictD
[4\
aa=
&/I!
{vgR
5yRe
-]]L
k%Ii
IBCQD?7
q k#
wQRjL
mX
30T
&9C/
yii!noz
j!*n
X*Yi
"} _
yV@4
H"Sk
-bC[
)Hg"/-
=>+">]3
;4!(
wU&%8
JtkR
iA]7
z!
jBk7
9)tlD
U,I%
#n%
u;}
y7a0>
LU vjD
`2F2
Jk:Q
X-}N
=+R#
Jm}nC
Xknpi
J?V[L
lh2Y9wL
g"_?h
,K8l7
+/j&!;5
g })R
-d}ARq
3~u`
444c444&444 444
'vWB
!m)S
kCEh
F#D I
q.9*>
_dn
9smX
l1M/;
dT3"
x;x%d<
f35<c
A`$=mR
QSxTo&}
UKFJ
RvL
~Q9rI
5rLf
'uAyd\
oy*o
[{TwS
].vC
+E+}N
JrNe/
s Kq
ORky
Nv0BD4
Y\*d'
u}j76p
@w:E
$ Oy
G8v77
yI$"
K3^zv4
jFgJ
=5 (G
/Qk`:
:$dC
RXLOoO5icgJbOO13CxA6Pk
!2QoqgnYmJOGaGXSfPqy53OqNq1Le8WRGk
k)e"
{>qb
3 aI5
_1`\
(5AHR
K"gpQ
TG.J;
B.+<\
4\1Ww
WCd'
;$|;P
G&F^
x#/d
&[1?g
wcq_+
xmJT:
PG~g(
OC h
3y=Ir-
G
,wFa
7CQw
c1j?o
zh$D
';Z3
, Eb
xH )
bgPI
System.Windows.Forms
kMpN
S4}^
pg(Y
ID\<
zufG_
MyX<
444_444
ZF"h
t2>3
bO6'
wvtp
j[6*nj
u\[11(
o I
WMz3
t5~Xv$c
Q F`/
L6!`3
X\Kx
Iy y
gZpl
ZV|x
=*w
MY.^
1ou+Z
v)db(a
aty[
m> $)e
eeOcZ
k+ .
9_P(
(`+^
,McSC
J bt
}(st
k%
ob7d^8
`,F`
>Z50
Bak?
D=+ U
eiE
IAni
g(<pn
v'kp
zYgM
ov=}
FkzA6
*0yh)h
[W5S
0~Ls
91b'
:DZ9nS%o
fRq]
}r}u
T8 eZ
s*8bl
GFLM
9Cku?fW
uj -
Q[h
-F~
Ik:;
r#b px
s |O
>+~c D
Id"Yw
W#{
T05S=
1562}
\ilg]&
@xfp
+~\?N
XOoJ
0V0
z=(,
?xru
Tv_
p`DR
yt`8"G
g,.6Sc
PdG7
J(~/s8
pAA"
3@#M
ajB;
ftU&[v
Aqrq
20RQ
'y3PFrqUIir7fwYYwpvUXumogeuQg0ErlmbklaLb
wO:N
@#h&
&:OL
c_Un
i~~HE
65K71
e2 _
1fUL
1"+{
e6"Y:
DateTime
4g|s&
LEK+KDA
5s K
|zVn,
8E,3
O3]8
3"OY@
2nZ}
|#lO
NC%+
{v5Z;
w@5}
.u}Yp#
8g#*1/
^$m:
!qB?p
+6m!
FCO5444
Jq|U
deq
q MZu
QpVkI
SP%a
H8Aw
X*"
a%^6
,>/\
Vv,J
qguz
,jW1
pl][
B .|
'f*O
oFSa
bT"
m 7
nIY6[*
U#pR
:bER
JL\x,/C;444
?2%
K$m'
{k" L*r$F
w2@D
Hf2}oV
HuePv
=`\)q
r3 ";
NI
w{9T
^a2i
<@5
`d7
h[l(
2.bm;
@|{
X:@o
?@Ol444
t+_8
*+f
5PD0u
e|1/
L^CC=
2m{Ul
/.\^>
6L.S
QGTK3
F{~2s
444 444'ie\
K(qu`
4~2=
/KDe i
BtC3
q"&od^\}Y
.Oz?2
b?bs
)quah
System.Security
O_p aR
/ rz
JRdG
=AbVR
2\}dP
AK,C
:Zpcl
Y\g(toa
Ujb-K
kv6\
-ieqS
iN[+
Md6_
E3QC
Q>&
+vX>3
Z",
E>FM
`o46
P7d)=B
Rg`|
.Ql3
f (2C}
7:L&41>
[u]]e
R:'~
>t"f5
@ =\
H_hJ"
!='^-
~ 6)
{}/W2
hsN9O
/<A%
zqRq
E;.D*
]$0e
h[.
<,gTS
, 0z'
Uhn%
4Wx-
}q9f
"JM{
A\gD,U
u*;6-
yX*:
eV@/
7_<Y
xlZe
Q<xi/
~z]~M
FEvi
ZnYU
iybU
bJ9M
+. :2
`[,
h ,<
^E^K
4442444
HKE:
C[3"L
+Rw6
HKd=T
8GT
V[r 79M
,Sol
\WyO
=5>A
Z)$\W
%oZ?6
L,h5
w9cB
iTE8
SmIA
z}l88
444#@?JQ::D
Mjl<"
l"A/
`d?+
G ;%6<>D:Q
% C$^
444T444
|J]]C
L/b2
8xDX
WOuD
PK_eJ
;gcb
<sYHq8
0{X /F
(HZ-
J-4c8
S)pg
mF`8
}M@
get_CurrentDomain
GP/;7
sF(|
|9:{
/l2V!J
444xOQ`
G0w}
Fw[+
MQVl
1l@1"
1JI4
Dhl%A4
ADQf444#444 444
L~.fT
mSEm
4BCL
->`/
(q{c
7(@y
t#H7
*_d[@r
k&R&
i]<b
!4&
:LT]
bA3G
G=
XiXmD
k VD
mJ_{
g e{
UW2p`a
UCH*
Ok# }
M?o"XrjY
koN-
D|23c 7
U*).
[PNI
%6Cwx
><0;}
|:]P
{<Y:
v\o{z
<\I"
<x~$kmIB
rdLwkz
.XX0
Tr4k
eckk
rp+{9y
,P_ExS7
<m(RXaN
L "v
Qf?,J
z)fQ
L(lS
oenM}$
vdIO
y$>i
'bG;
444>YY\
cNYX
Co/M
+-.e
444h444
HMfi
N[K
jmTSl]
"e9:
=l2^
fJ+y
@j#%
9;#E
H.f<@GN ?)
``NR
5^R
Fblw3
bV]?
icnN2
+w[pXZ
4Z%)
EpBS
P7,d
*/"z
/.r4$
fd`-
n%@3
`4^a
,W#_
[!dI,
jP?
N#9{
a:{-h
z&`1
o+9,|
KkDU
u&c<
p.4K
ebu-
f`^U
N7OE
v'M
P]Qu
GH7aKh
~eA^
b}&U
L-1hz
&;8l
p{uT
>8.6
Q9 Ow
CrkyRr
>r o
5g-[n
P.@uDI\
(h;9
-EO@
$P=,vf8
NX=/Z
u0DUK
n]?M
H7\]
u9K$D
fm\h
]Oobt!
4{sc
Ah^?
)8Ab
7^V
`aQq
)qzm
SoL+Gs|
!`Ep9D
St;$[
aeHYV
,'=JC
Y.
ZWUC
Rsh
whi=Yq
2{~]<8
N-^HX
?5,p
HTg
Crz{kF
8]p9
(E!#0y
Cp6%
*`%
c@N"
#A.}
Zoe*
z(;0
gC_(jrDcN
Jb0k4
@@33@9H
A<ZP
FpOr
e`8u
@Lp,
v!wv/
i (n
t{]f
3N$y
z,ptX
?A!Wy$
^1xcx
n$B\k
digW
tS\;
T|im
Lf&
)lN
JM9L
#*U)
zV3X(
:^#a
).3
KZGYw
_l'\
JKX>b
H2M t
!+u
[_w0J
ePaEL/|
S,se&D
444g444$444 444
g6@
={s29A
_k<K
<=
{|X%Z
EC~S
bI-{
jZ[&LrP
. J:
P=uT
444H444)QUj
_p&Q
E:&Jc,
IPz~
444 NP_z
*${Z:
\8sR
-M-vG
444 ROW
%PCF
~)"wC
$9T#'
W92TR
dF]oQ
DKS^
6Ky;>
GJ]O
l N%
5.0}
wO_f
"Tij
p*Pj
fnoc
0OCjUq*
_UKd
Bf4#
1Kpp
HH@4
C?pJP
#y<5T
^V7F
eXA
"/YF#
5 v[|V
9a5P
\^kB444!444 444
,{$\
MNE
xS$d#
V5yEww
_^AZPF
CL+7x.{
4:c~
@tdj
eSLg
tET]uV
wb#)
RNc#PHB
>K^|E
!y'<
b~4L{
,%}s
rKNS
y~/mO
-1E?+*8
-K7vK
VNFS
HRjp
^OU+S
>^`
M#b/D
D(A2
5-kA
a6Qz
b*Nd
7"&k
;P"~
FX:@;
S2nR
[[|CV
16%P
4443444
4443444
3=|<+h
PM/H
5gC?}V
4443444
K7\?
D%r%7
'<pr
bu0i^
q8z:
m(@2
jpt
kVD<aG
8d%Y
CG2S
x{v
{ SwIM
HDdr
>U5?~
6XgpKjOumrgSkoULYSuNMSnBJeQTO
<C%*;e
} RR
[ynU0
i1<R
{1uj
p|z
pmd
Rtx
JJ OB=
OW5g\
2=]/
GF+-
( _Kt9
0[]
{8,%
&l|s
swgD
]RJB
E!*{N)*g
"" ~
ST'w
os,@Z
)){<
#LOD
\1\X
(\wm
Y3q~
_YO
}=WR_}z
yxw^
.\b]
),IT
u(VC
px<r
ZmfU
|9%?
Em}
JLQ
&FmR
2lN(
@:(GX
&B)>q
Ih?K7@
,x,Y
* kbO
;rP*k
z$NU2
s#?.
[`ez
r`!6
j 9L
\TVk
2eF7
3WjofEvSeyPyUmIevtlG3DDyxx
444'444,444#444
F."fS
8{ qt
qw@j
Xb\(Q
askU
]dv
C2ACMY
yc9
>g{b`w
%Dyw
QWO`
vD~.
GVeeP6ynNFSrG0w0DMijjd
=TEn%]1
Y`Q>;
lh/2d
j#k
uXEm
/he)H[
VS,e
Eh^%
`/iwX
*yIv
ry|:O
XNQJ
dqcy=
ig^5
w9Uu v
I*S7
$0%xq*
o[m6
]Acn p"
#a1>
lYz@
9z)-Kd
qB@X
bvS||
)-gl
VWE#
!S~9
WAFCAH
b_:9
w!'
ZTzDw)
e-zc
ag<qg_
22 }~
S]C\a
qxLt
M\\_
r./ux
g-/lL=^%R
3R}2
J{%y
WCR
/`>}n
2!Q
pjQI
eB_9
$yk@
Xy;b2
SYK:
5<2C&
Z,j^
zf@
xjDO
m,sS
I E)
~,3B
,&G?
+od>.ic
33$U
yb,Kx
sXD{j
w=)A
9/j (7
<Pj~
#@6
e]|
b z[x0
U}Oc
r)`m
U|9+
.!j
:|E#,
J-D=q
O N/
svZ
=(4.j
LR'`:u
Invoke
Z?gB
%1 D
#8IJ
7a!?
q9i'
Y_flE
mmRg
WrapNonExceptionThrows
r>uP
{ TI
&qOj
f,xp,1
]U
+ti D
n@;
!~6\{
e55p
x{U
jvgi
J;/GS
"Q\{
Q'`:!
OmqA
>@)H
'Y".
rG6aU
ZXs8
J14
VQ8Y
|4x3
~G_^
A` )wdG
LxDO7^q~
]3Sn
7. [
b}`v
:h7G
7o}X{
m%Or0
<Wv(
Siwc
C&Kajpr`
{>Ax
OeA9
L\%T
`!A'
7C:il
HwsTq
mp=s
tb2\
o(+J
2~c5){_
nhk$
o yP
>$'(T
ObC,
.i_Hu
9B6Z:{im
n]#*_
nmuY.*+
i(4d
w5It
e0Mi
(~cI
"V|)$/.
YF3eDO
d'j
oV0
i=$#
)_H).
z{9/
Lu!{
P~ry
x=q[i
v(.%[
FUR
\dFA
4Nw4(
flVk
R~GU
K6,}
l@%1yC4
6SVqvqATKb2zJQrf6QOGF
W7)Ae
<}|we12H
AR~5
msJiS
xD~p
.J4G
iWrF
.]jk
@9gy7=K
"~ #
<&zH
)9#/M
*H i
Ahqz
}UH
6;%<
U&S\J
`OZt
5Y@?W
@zww
v0~&
o_$L
>lgT
#El<
EFS CIe
XI;P
Ehn '
?Pzcs*xn
7I4]
axr.^
Ca\Ll3
:?Q6
i]"-
T7K_
r$+d
*~x3
\" 2
T1dZhS
Keb{
UlK:
*~3^]SL
}+g W+
?#Er%
8*'I
R+]u
DhER
tp6A
CHo!Lj{
SzC,
Byy!
[S0_
4Rf[
V%B\
N=Mb
f125
u.)oy)
Fy{)
?6]-J
yoGm
7|<El
G8Kw
i,
i"FY7b
a0LDxcWEGMtInFSS6Rpr
%X>aB
eyH?<
ZtOU|
28ca
ZF9G
`; t
N~.4
c1aU
OUvY
v652
%8~p(
ktYo
8_^j
a#ot
! c@|
/-':N
[r=yB
QCYg{
yqXU
rKc/E
cer?F@D
% [a
?bz$V
"z:-
<uLG*
W1Xb
h#qO
EjF K
<*VO
GPNw
lowW
$4B.
']ns
RP)
$T>^(
*4#H
#S_.N
z9gw
aoL>
m`Nv
9ymd]
"sNcp| @
81CK
Ev m
Xx}S
pW2J
Y%Aw
TPE]
.mM b?
a?*!
JTB2
xE+e
R8>_
A6Y>
_8:tZEr
%:mih:B
R k!
;5GK
uY<()D
n6O;
_guwg*s]
KNt/d
A+k
8ZX/m<=
_jx&
cS
}bga7
j +oI
rxXH
y%r2
Bo^(
rs{:444
(.f`
}=Xt
Yq!InO
PK=nJ
-~(+5
w: o
4444444 444
BTca
m3Z
n,C2
p n
hy@o
S*Fjc
:#uT
^lFk7
[Ldu
M1NEy!
d{>^
NM["
!I?)
#ZqS
Dc)X
!/g)wt
444 444444 444
fU~p-<
q>KZ
5WKF
BA=}Z
YgGs
Q,{
.e#
ZX:e2pi
;|VS
+y0I
-(G]
F@m\
O[4
444PBG]
>aS
{aS?
444 444 444444
/B+R
deq+N
=Xrb
H$@I'
slMm
2Ho;
M,S
&\P/
4|]R
w/["
#M|*X(
z_a :
gz7:
!iiS
BLs5
yJ7fB
7_B
tJ\b
F5s)
?|a"
nY069~J
8O^(<
%te[
OZhvp
f}lO
444<4444PPYmnld
qa~s.
q[=F
]{MR
T!}5
Rd(U6
444"444<SU`
6yB/
lwb#
}i.E
4443DEPwC>A
-2ndA
)~^U
4urYf
GioVwazzTAglTOOjQuFqVsViaJ8mj
9NNS~
Bt'u
U@$|
@Db:
M-DkT
Y`0n
O$Db
GH<y
SPy8!Kw
BEZh
')te
)`k,
3FNOn
")n
T!(2
C< ])u~@
!%k@
6yvi:
F]kx,
?&p:
fuOWQ
SKgL
m)gt
h,Rq^
is wt
0@<GS_z
oMg,
rH$6
!l|O@
444HB>
D-?)
Mu1+/C
.lFc
:X'cp>Ix
3*w;
g8O"9QDo}
[7Iw
c!w
/'q
:a)O
T#K
dtbv
n ?sBX
x?b~
[yhD>q
-]vBlX^
`Y4#
F1$'\
]LhU
Z~xX;
.{|i
tBO(;
f[^-0 .
XJ${4
$CUI
tutg
bt7h
@3~z
.1"*Us
t7I.
/Mwr
& R6,
uPNcm
Jq t
cQPab
0}_7XS
,dHT0
hk%-
Yn5`;
vj%s
i&Xj
.Ge9>
u!A2
< z~
|\D#W
~(GZ
(+W\
Rqm `
yf]p.t
sHg0o
BF:
(7KPe
Qu8$
G/-,j=N
YjFI
{x1Y
@G!~
oxvU
#8V!}o
Q6(\
+]!f T
@oiR{d`#(
]2<`x
ZvA'h
nQ k
Wf7 V
]Bn
MUA
{:
]J)}
I/ ?
ZuteMZ
b;?:
^Lk4I
YHP
jAns
H,g/O
"AZbn=
2.~|_z
]G2^
u:XD
+zo>
)Q\O
ckY7
aF6P
<W09
jm&a
58b=W
Od:
c+P7e
s+=E
an-X
o];&
18~OV
{58Z
*H2;
M_Al>'
"{m{
6kv<j
IsJb
)LSJ Ih)
YfNIM/
E?}c0
/@>U
41\
+%Ec
T5/XS
8D@ts
1P=Uz
xGg{o
fM(\
?PYt
@1
Z9W=
15q>&?
:VMs"
k`:y
tCe
YX.}
@j4\>
x e3h
0bo&T
NjVO
xQ^kR
,<1A
?8Zi
444w444.444
*4S5
R*|N;
:s{&
444^`oC
f5` T
m]H;
64Bj
FJa>%
X/j-
JtHP
S&cI+
EyNz
an-!
~lo>
3Uau
A7BFn
p0D(
xCf~^>bJ
PW%Ev|
9 T)/D&
%%76
zERs
5@94dV
e[] F
F% ;'U
]"P:gCv
\i|
UWaY444,444
#Ff0l8wU6dbsW0sjhxN9WByQy9vJKWgzq23u
~+,&SE
7gq
937 p
[UP:
5kU^%V
{l*n
GJ\|ADW'444
|t g
0 GuP
4443444 444
=!dv
~3W#
|%#Gf
0S].VEDh
@V`[;
mS Q
\D3|-
iyu2
Ca}[
`S k
4W)J
$R6w
j0K>
:d){
bwX?
444 444444444 444
1NAY
S~G
*|O}
0%+ <
CFl7bch
acs.KI`b
'FDo
qL+
L9T
L-@;
+qsP
`:A
O+yf
k.dD
I5r1N
`am,444
-+Dh
bS,J
a/M3
0{?3
vQTT
\57(
8'XH
?/Y]
',_m
n){*
rpW2
{*6+
=DkxT
w'K Z
;Q.J
JsVR
Lh[V#
lh`1
Invoice_tr2018
I5)-"
H"HZ
z%%_t
kBYG
#vhXzywIHkahEvLRWx2qqSuAvjJXUSnbsmi4
ICryptoTransform
GaWR
CddJ/,
:8g8
NUDQO/
vV%/
`?)Dhd
Y^f
LtHdT\g
ukZm}
T~Mm
qO,~
Y;#V
kT3x
0)22w
^)q&
/<6S,
tbe8
~]to
yuDQ
$o'i
ZY+"
'^!6
Tsd"
|&=U
/2I
_o;;
mRo-+
Jokh?
pG|T
46EN*-B
&Vz6
U .4R
ZtP:
f?eS3
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
yw^ok#
]v `G
UH3R
%77#
B4F*
W'gu=
PnKT.
.J6F
ig*_
fijP
]CpJ
DWui5H2'
iR
4.-elG
L\pg=
i.{~
9:Kn90.
,>\
r6==_:(A
:t7,
nZcx
x}N9}
^ =5
<K
jQ"8P
:R_r<
hF;g7
{|Z_m
D fo
Wr a
YBYT`87
$f
]`\{W
)/1Ik
6t8C9Y
P]FKu
n* Q
F>{
kUF[
??Y
4<e%M
og _v
Y`UU
rD)$u#
of;|p
Z$=2r
2[v9
Ej=y
0RV;
{X"^
c<<Y
J3kU
NNTM5
9&>.
HKv"S^
ep*}
kscq
XoGLSaS2eix4oaXCayIj
Nsd$
>jr
UN@
+ 7]X!=
\;'
>h[t
W: ^hs-s
{;c+n
>-U5
OR/p
444 miW
-6:
I5<o
OKYN
*ZI i[
Q=,X
a(tx
q|{+N
Q'H{
5jq/ZM
MG7T
bDSL
Tmb/
fc9YL
dp(f.
v%,0
H:?o
}'K9M
TOE3
\a|<
el $
?4Q+
]]cu444'444 444
H7XO
*w|G
r*`A
l:=Oq
wt_?
2V<
QJO)3}
b!$S,B
p\JBK<
Vktq
-5c^
U<X|
c`^D
&{;Cz
HQSxh
d0n{"
hWl#QCE-
%!4E
EIYy
%ROC
dcUJF
.kE>{"\
rqB y
l b4
u(SlT
RD z
Y~b-$
!~K`
p;rC
e&^ywTzN
" "+
VW/$"g
vTSw
g`'N
3;wr
jIu2
:&'>
444]444
nq k
WL:G:
wqbKDOo(
]py5
aYo`
a[aC
'tt"
i97= 0
8 $Q
0rQ=Pg,
$.G
p{IcX
XQTt
-A7E
.bt :
C2-h
Wze7
1MbQ
zY
u X*
8A&OH
v:n5
[.ZiX
8^Z&
hAxg630W1EQ5UXwMrRwT5GL6
\21((
HC`W[
Wu/|
5kEtb
U+U@mgB
#ga0,
kyx*W,
MessageBox
9]g*
rE&q
L^6f
D:Om
JBi,w<
h$JE*
E@MW
?@FV}
klx 3s
jUiWKo
YRX5tI&
&i5V
_Jb
"w&h4T
I<]~
QS!
f<Tp[a
!J,~1
Ch(9
?'PV
c^| GC
H0 I
VT[j
h!5_
>1TFm
444~444(444
NI"
g+.["
L]mCB
g?PX
,pn,S
G@lrr
eT LF
H& T
Q#?k
:b,_
vaMF|a
{6o
zX&|W
I+/w
qw)[
}]*
.nNFP"D
1JZ
qw)R
1* m
er8i
Assembly
m0+K
."$9
HMiCl
]$~Z
wXun
< kq
w+5*
T1 g
wVXK.
Z[-
Q,]q
4e&#
c?ES
{'O%
R6]T
rD;*
1)Pfs
Ljphf
E9Kif
~M0iQ
58P\K
jfc
444=444rCBE
)GT
3~'X
ISn|
w\&&
glQy
ya"zF
U^^
wa0
I'qs
YBh3@
e7Yy
GY1uM5`
%#Zh
N9UF
"-xPU
Lxcngr+
E_;(
;J+
Q6[,
"?)Z
zC~y
L'MQ
&njA*
Y:.h
2:S_V
444w444(444
7g"M
+CMC m\
P>q4
yWjz
10C%s
QrQL7
ix.]
WX]G
rJ$gQ
h8\z}
,d6wi
T6I
^(3YXk1
ffne444#444444
&rpSq=F
/=9?
Kny
U"P0
)k1J
K)hJ3
'L}
s`/\!
+&!-
^DOo
yVrT
.9gf_G
OYhy
S2 _
1x}V
bhY4
a)Q
c___
. +n,!
Z1a
U;YI
l67Qg
9oGP
qx9m|
c<Jc
!aZ
fWiu
$|eX
7A3x
M;0``
s>E
F@Li
.w_A+
&00`
zBK
%|/J
cg$&
e%(kQ
qwN!@
8FR]
`hl
s|Mq
ZKc(/
1& ^
444j4448444
s#D
HE46
wF.QF2
^y }e
UyO
+0AQ
;-\{
mX@4
qc?
}KU`&
*];5
HZ"
y]@M
k6vM
kpF
rTM*
7qfT
fHvz
ENL+X:
a_1 nE
a^TO
sW 0
IeM;
-<U
1/*
FcG?i?: (
Vto)
-W[K
O~qU-
~7yL
rx{C
wz9}
p-*I
SxFV
xbsCI
\ mU
$H_6m
|Y{V
$FBX
'KvD!F!
cY<j
k "}
Hwyu
91Q1
Lj+4
.~+T
Hx S
"V#|%i[
eWD;
:%lf
g>z9
V/eh
m=Ps
W,I^D
~|ME
&t`M
>dT(c
Z^@6
_puzb
sO{
RXw3!
rFD*
1CA=
pvVC
Z/0Q
E)~R
- .F),
=71
Pp-n
*r_p2
>8V,
P x
[mfJ
5pWq
4{1t
bG`8
-XaM.
F v
*<:<
IO8rp
x0PYQyOmtNMWz8mnibWg
iF0@
^2&]E
7C_lZ~o
[e %
w,`y}
Ra"b"
k 6~:
gk<3
2t1d
7~~
!f#i
d;4=
iH*v
3K=
shQ8-
BtV..Hoq
k56
o 7V
#>aP
G5>C7
, WI
&K
7 yO&kc
GD*AJ
+wt5Rb
1S/b
IE^l
P%Fv
ep%+
wUy
>0Pj"l
O"o
6y?
s^g"XR
E(YC
M'q{(
`08
Y,)
ak%g
deq?
t<7!
QTgJ-1H
czj^
4NweS
l}ux
A+~>
b%mB
Pm8b
!nuW
(^kTL)
Jd-K1
U*xb
k<\q
T6(zw
v4]v
H"FC
8M1^
>"5S
LnF5
c*%C
i{Gb
\&_lh
#mDU
svxW
"1fr6
&[)?
Gu7F
s!b4X
ORYyc
CwIh
_8 /r
z2\
U4G
"dNyC
:=PFH@7
uaO'
e)?h
w ZBG+
O}*g
eFZ
KchG
<m|7`
} 2_
444)444
Ab~\
8\m,
*. 3
>FVc
@ d
\lj
1R
{ V,
:.<!
QZ"]
MethodInfo
444,444444
B*&tn
C?I@
3)g@
kFS&qP!
#, s
;^"umo
l07aHB@
bFvy
^_jG
^}v?
= <]
9G3U
$0J(
{g2.
dV\)
`OVk
asvGE
pqjXs7y[
*,2X
0[rte
CsN-
4<%@
mg*B\
904
Mx k^
o)Zv
.?w(
SA_+SEZ
zP/!
<1&$
m'l
}SsQ|
bp`}
VWlu
<s:Eah^
kg!
0Meu
19v9
mRYX
444k444#
:G[AT
444k444%
|;IQ
ik[~
2)?
9*N?
7Nzy
[:&d
Eg*0
444m444$444
GsLw
ohjc
i#d-%G^
,5Ft
2{Y~:
`.bvq"
mvf
5-po
o7g
#_( I
69w9G
U=HH
9Xz S|%\N%uG'
rmbW
pym#D,K
T =h
9+t(
p2<y
[~~d
2?Ut
p)"&"B
$wRZ9
yl7"
f8:
'n"_
f88
<$e=_
;XG7
.6'7
sk@B2
!rr;UU
>sg,o
]zd
^7i^
OgX
-YnL
xA`@y
',-L
]&s{
2oEpJ
$6
5UjVM~z
LqKq
#.gx
p?+
\G7]
a FW?5
6^G*
n /c
LF}o
^Ia&
`Wg(
p4wT
SKe^
l8^~
h|"
j`T 1
R[3P
05t\
*Bti)
b\"l
eekL
kS wBA
NqD5
EWJW
|8q J
h'!*
kJkkA
}}8)
rq^'
iEJ20g
Ng(
e7xx
TdvJmJrycDeM3J7HauSxg9ExdGkX
boRYr
5"90
k'KZ
z2q]
N2tjH NT
h=gb
tbD=
omF
rGS-
M^@RxO
\9pR
U)RZu
)qt5
$ 3%
yY:6O
Z'VT
r)je
k%!x
ZY}L
Qc
f(*(
uE*5)
y ?%
4445444 444
x\H )Mr
R'%=
q\6i
hHuH>Y
;H9
XOV2w
xrv)
%5{]
2j>]
Zm$+
F%Xd
DLK)
SnVp
`<n>
#7HpSil
?)F=
`'C]
#COPv
)y m
dPOP
jg0
^&&0=
b|/Qr0D0g
uS9
X==CY
lAP-
tZT%
/9zA
vou.u
6|0@
?2HU
4442444a444}TTW
N@{@
ELB#
Xr4L
<~_#D
5F<i-
^{ B
H}j@
^24/
&.=n
2* {E
}s&m
$t-1
"[?S
'zb?m
Rue`
%Sh2
444j444#444
ncke
ptFS)
Wo5I
wM&~T
j2#!
|WW3
[OfD
F8L+
mS{+
zB}A_rwx
9gQq
CEym
=kg._
)yPO
f^ScDU
3b`r
F?ria
4k]f
ae&^H
`(Q i!hj
L@'[e
mK{
vC*X
zS|p
Z.=/.M
!/pO
za-[
2x[V
[X6&
,6Oi
Q]?3
h%)TPD
(ZYR
\#,Nwr
(5ZA
oZA
q|Zq
M62|i2
`g c
oWio
*Kio
?;6(Q#
#]F"m><
@:8F
%W7y
fMlt
6q(V
_pR7
C$~lh58<
P :}e9
t4AW
$IY]H
<;FL444
cz\e
,#>
B]XL9
Wlu6
I(8C
ygrE
XJ}s^
7aF:
PD Qr;b
LS9x
$^A=
Z=P5
hj g
9jpw6]
_k[[
tQ~Jp
$%Xw
@jD7r
444y444,444444
Ce@
idlJJ
~D=P
DkD(|
,SPr
5r/
: 4I
S^FT/
MN6a
v/QmRu(
T"g]#
m5rwWwmoCnJnAhI7XMtzBIZCI99roEoJfWPyj7r.resources
9b,=
lnQSB
lMS7W
|`~c
z}an
`<}t
ZF/x@6Af
h70b
\%fbUH
XqF4
X0r
:.a`
l=~R-
xl`p
uO$k1
;/)`Q
47;R
444x444^444<444
$4c9
DDHI
X;ukYD
#OfzW
0l{(
rmAP
b%Ng
JLGZN \
OrO{
EztO
C2 {
[oB#
Mdvk
& >
444P444
Yaks
!r2?+
f-K]
W]D"YBb5
NzOf
n`M=
]X^+4B
|,Pj
_ +e/
5rF
0"I0
V'0r
EWIn
;\[?
&uI!
YW>H
,CJg
KN!WK
Av?S$
-VH)
r<xC
99\z
cz4"
)@Ko
oX<%'}=
so23
%4h"
RO;za4
7.G&
S<0G
eO`
9i\,{
QdOabhtT
4X:F
U\sQOR
I=yA
[M9&
'50o
c-6gB
XC$a
5 C9P
^P*i
)~}f
+iGL
S410
CJd_$:
444e444$444
QKyJ
VKp;
{x}<o
l /D
;|57
71E^
*m"j&
QwAGF
! $N
pgxJ
4440444
k&0'a
Dt/
|/X=
`Ia)
cA ~
rzEnh
>-=iBW
ia7@
OaK9
2Vo 2
kh>x
S<!4
,tA
(7O#
'KR~
{GL%
:`j(l=
w oj
\JF!+e
<B?X
x(x
1-`[
O7lr*
7P/A
|b4NHu
j%]x
DmVE3Ux
st1=
b/y}
$qa+>
[tki
Zv60s
pxmM
u09t
f.3C
|=+
G o$
$]gL}
bJt&
0Yy;22z`GL3
[G3/
,Jl/
4447HJR
.yeM
O`uVP
c*4;n:+
aXhN
a"@bg?
p9n?
fo4+
U|?a
,2`N
BGwx_GQ
L:R>
uklw
o.7
tCaWB58 ;
atI:
50L8/
AN^!
C,Ag
2Ux|k
#:3F=>
Nn*:k
_~ 4
'94&
!LlZ
%H"IQ
#)Vw
ZneJL}
=WY
-K,f
&2)!drJ2
22# a
m>2J
LD49
:LfL
a:"u
v'O#
F[6
;gk/
b(\w
I,z
65MI
SH5p13VFlQMCwm6t2O2AkMC68bjPiK
c >,
m\@;6l
L'M8
EWpa}
vd}=0
:xgG
6hc]
zn7|
444 OKM
Q+#1
qHie
k]
;}$8
XJf4D
Nr{CnY
NeS.x
l/$i
8tv?$UWR
e)mK_
*%t~
1rCDpk
=Dat
sxI|X
R8<=%
D!`/
0mdb
vvrM/
;$9>e
#%Ob
gx0)
i*C=
1pV>'
kfTK
HfT{8
]eqYF5
dYtZ_[
2k2 .
!T\@8Lq>
}&Co
u32X
=)
lS:y
m&oa
Lbh[^
M$@Z
_c|P
9cN
`oll
Q=cH
]jk]
'Zf8`
to13
cYLAs
a~r~
_v5V|7
n*6|f
:J=j
ICE8B=9
Yn&@
m`m|
/W*
Fi7P
^Y^ 73?
-d`8 Ug
JM]Z444
e6Qg
5t I
z\")5e
lh.Q1P^
le0J
.L.F*
x{@0
H$b{
g56$
#&k0
9d.@X
iW#v
#/:
B|#3
&ZeB
:+'h
* }~
*lq
BABw
f6__
wI.Y
5b$,
`W``
]jk<
TVbj444!444 444
woTt
|av,c;
P;p@
SIn0KE
"6|{q
fB^T
lhw"
]-A
?E5N
-4S1
a<pI
N4Te
Q)Bf}<
fPh
+AkC1`
5II
;Iw9,
3-Mk
1$S{
84$\>
4442444 444
MAt[E
0fR1
43$7Qq
MSDe
uwk16
^g1;
>p|H=M
t};*>
M+E
$|89P)
mUUY
uzU 2'O
ikxk$)C
BK!
yPq
y3oR9r
AH#L
9@Imu
dApu
0 &E
-or@
)0,x
ji_
ACG0
n|[T
^?.-(
(suP
Bi_Y
444r444$444
H:1tg
,R7(
2EBs7
5O7Ur
MDR(-2}
BEz&
ubLJ
s8v:
444b
@$6I
l;u6K
tT;(
EQ|^^N
zwse
1kwV
57MKWS
T~jU
LM3
Et[B"YA
~Suv
8,t6
%-d<
6 LA
6T;5\
Cv=T4z
j[v*
( wcr
gQCn
p(m`
W\hA
m\}/
u1\8C5
BjzK
^EuK
R]s&
R=ewH
tCNGB
tw@[s
&KO"/
O.U0
[K(t
444$
5nvf
b-~j
@aD
n\Y@
./-;
;`4H
1B6 h2
@X?:
UNW,@
hha^#
tAPr
a639v
$1 H 2iDb
444
o/,p
%w4"67
nh/0Vm
8}<"
D "P
ALC]
|XZh
(62t
QGB'
'`FU
444W444
`v+@
oLt
6lR:
&d<u
rU= ^Uua
b :7
v+s%
j/@E
ObQm
VgSi
/)TGfjY
fH:\
xLb
t$ 8s
C^Kre-
oo<g
6QID
b4)^>
Ae$5
kxHs
KD0o
1Xe3
y,ot5
N`!
(Q_h
H\ 0"
-?qUwB
]rK9T)Af
o=/u}k\;'_
uwi|Rr
isUi
53hL
xw$"
}b{m
U7q-
( Nr\
woyh
p; o
System.Resources
C?W>
x>j]
wacTl
inq7
7C_$
`x\_
u]KAtDi
G 1n
yG|cd,<
_=N=
"2mVuKPqeJQ88BXIUJlV6seQo7jNTfc1fCe
oo2u2xRDjcn6Bihvb8I00j5
3@w^/:
`2^A
4443`[O
4443444
-zY
ACd`
K_!\
!Hak?W
rUw1
t9{01
-mml
\ "L
18Z)YC
mKE0
*r"
(cIl7
W=;6jLN%
7cfWK[
s:,I3
o~-+#q
q29l
,8D\
=U: 9
NSt~
HIKl]
1K\
P\;x{
a9.R
vj) C
B-#dB
'cjz
9~v34h
Yy722ar8
|SI=
O&\~
+y[M
0]Q
^EV*
@~U"*&
p/xS
K{76
A*/d
='Ya
0's#
6?>^
!m/xB
.!2y
2AF(
?zASo
NJ1Y
#W^ v5t_
nJ@vT
7h?VL8P$S68
4mF
\&)hwc
Lq,B
_g}<
L<dB
W^yW
N"xb
WmQ7
v )zLMMO
GT>f>1
yt,KXd
v _
,>:PU
`R1n
7.2d
?hb6<
s vt
mjNc(
^SG2
gzEX
xC= Z
s5i$
/ uD
k7pB
R/9c
'\W$'!
>k~P
P =
hG{kY
LRnkS
$(7>
~t<e
(:$_Q(
pRf
%474
93>t=8G
w&4{
2SHX
=n)![
n:g-
OZnk
O&vL
B18C
\xmn
-hTSB
u3SP,i
9m))
e.|f
.axL
T+q|
`&b>
?Q[5
I4d!&
@2 +I
siS+R
.p[[
$wTs8
E)u-
RXq& "5
$Pw8lsxWSu63sXZVRLlR52UPZ5GCmgHe8p4Gg
+omu
,ATP
4a 7
6+/U
yE8RJNcb
2*nf.
x*D+)K
*$E|
3c8^
m~~28B
}(zg(
[B]
kNcp
qSk@
{x+4
D>TuCO
& X1
J=& C
):Jw
KT>
]o`2k
)J@
`f 8m
^@^}
<*/6?0
ihT=P
a^tG
IL]D444
H-%k
~z-;5
f+WU
oXo2
%F"OA
F-]n
k86PtB(
xznn
Ul1M
yc^D
7v\Eh
\$j=
5\+Bu
A~ \
+&-m
n1ey}X
m."h
_@Px
P&|1I
8IV5
.hLH
EJ&J
u{H^
Mn5g
1s%p
mB^t
F^ E
h&N/
#7s3
J)[p
dTb5U
N]o$9
)%#l
u8}/+?U`
WJ|V
qmKH..
Nz/\
%J+H(
U uY
Kz'Of
2IU9
+}C{TD
\R1D
7[eJ$q(s5
EJLDmT_B&
-TYJ
FX_6
t:^u
pXOx
QhVk
yXi
I;p
*(&
=qSC
#qc@
?DR)
VVzQ
F" }
-P_F
( tGh
dxUr
g_ne
m^=E
xpB%
/.$vx
`DkF
H7$5w
dft#
l]esnXBR
plE%
I%\F`gjl
n4Bs
9^[AC
/c9A
~Z<u
-W=
e# d
vN,2 +
n,E-
4Ids~
)=O8
2?nW
/!Lq
!bdz25
X;|[
>)S)
)2!`8D
ijdw
\0o:
JDrU
u#<e
Rhi&
lj>d
+t"L
VYK33
Lfa
l{ga
{7aL>
(p,;*
9w67S_o9
|OGCo
}AN
}_*
\o|j,
ys=v
m9?Y
5*Vf<k
3e%.
ENmV
pb.m
rq{A
Emtn
iJEv
w|%9?
0;<&R
jyEr&
/7gv
%>3D;
A3~
}Ax41k
&7c
Q{|S
aIZT
_(=_
BxNg
JI+O
xHM*@
4444[WN
XDEn
X\y|
n96`D]_Sk
|%'<H
K:.+
sk|`|l>
7:=_N+G
tFWX
)zgs
s}R"
p9wE;
n+O^
^pc
FW5
*H";D;
Jv`(
svAe#
VS.u
/xqi
\:zlYi
&|1v %b
,;({%
>B882
a+{Bu
x>Takr
k78?
3FVS
Hs<I
i oN"
t`MR
wJq^b,
%mzl
yR
}]y
d' 5
g,"pj
G p
{[j
K'bF
:Zd9
<*{aU
x;pBV
}*P f{
nq`k
8?H>
1v#?
p^Zt
JGDh_T
*u;=x
rjzd6
yLn<
}2%NF
BZ(vZ<
id_p
'>-T
STaP444
H &h[
(IIU
ryAS:'
`v9oX=
^$AB_
|JEO
AD9H
f"%2
e;K
y,u*
3Q2
y~5J
_e3C!
f~}Z
m! :
_'8X\
F~m'
;KYx
h =vl
K"A{
W3G2
b6J&K>
EvIR
(SJ_N
c2T9
O<,
&W vEi
`@o B
Y%w}%
)M'q
$HRz5QpNYw7YYUKrow7vWWpz6HE1dpH7BaWBV
s.7`F
zCh
]'mv
K0zU
444R444&444
SymmetricAlgorithm
_xF;|
t'hkw
XW|<
-v*
|Z:4
v0oVq
Y4b}
@*&i
Ia"
UAa )Y1K;H
KTvx
!U4+
sL!n
M` +zE
.>X&
@tyP
.T8_
s'4o
.e~+
%93K1Ftu5DaGb7vYnVxP6mGQO3zfxchLs1ic61
OKCG
vWVg
~4[Q`
gECk
444 444
Ala.e
Lt>O
;PA
rq/)
NI`{
btZf
Uibu]
@U<a
cpc.
uNzn
bIoV
x##<
}8z\pc
@1w|
&AZr
||D
O|~^
qZM|[0
,gDS8
?T U
'7NOk
rT ~
r(n _
'>Cu
MrH-
_o;op
B{bu
2YaE6
6>h!
!m%:
@Ih!x
oxKn
UwFq]
dX?(?
F [:O
Chgi
tn{&
b iO
OcmQ
jIw=Zfh
pAR
CDor
h~'*
lxyP
~*nouL
^<o
$.Ai
m*Q,P
E \oX
.*x5Q
U$_/
444q444*444
x4|IS
_oF3
444 IDF
|#*pHPM
'>6P
&/J,/&
7,]Y
1)YB
EZ
<mPC
Vb-4
D<!
%kQ=o.
\Rn6<
ybyX
J?!
Wk>x
2fi
)!9I
- .#
:p m
]J>R
F""=
;<PP
WsSe
.m" \
`'}V
.Na
jm W;yw
mSwc
P"G]
idBR
noF\Mb
-8&&t
LH>wY
a(T )
C-#
P\'3
anRD
aA?n
$#n.
2mO
*]!
Y|\G
|xe-
J(Y
>Z`W
`k( yZ
qoly
WL03
6Ct6
UR:
8$>v
67E HDQm
Z.MPA
{gSt
+qn o"
_] )
4%f,
T25
8z1E
66 #pl
)"uHJ
ke.X
CZIRX
_5`Q
D2aJ
CLoE
DuwU-
{Y65t
3X&jw^
L+o3
z?@h<9
'BEithi
eHHfC
V5#8@
`Bf:
+CR@,1
LP>b
-4SaJE8
S5dB
.PsZ
,=uT
N|k
Lyp`
{z83
["s,
k.Y
<=Vz
bjb6
3Tc
$Z-K
:W&%
obU*
c+K
CuYi
p2FN=
|nm
aXq5
_bm[444
h]Zn
|ya
J01Xk
gh]
#%vI
_sJx
yX;_
p7e
'|5N
alLf
Vaz?
zB!o
_J5\
PQ^y
&U 5
=q3^<E
7tNvU*o
.buQYB
_8KK
W%Zbu
9aio
B&/>
4Bvar
o>&c
KG[{^
FE&D\
|%_C'
4445ied
R,H3
jqbO
.<I"
Tl_d
Wa?S
<&Gg
R Hu5
n+WEb-P)
r;M
knNFP
v2.0.50727
NtWP6tvpo9XfxRRtveMPUDtqo413GZY5
&4^u
wu2B
UERyc
x9$/Pt{
DOPDkw /+
CQh.
5R*(
vD}fi
^^`SN
>4%f
=BTu
F EsD=
Q6U_
n*:_/
"Hk~
84SH
-"sL
;4X\
s|!(
"Fvf
*U\O)
n :x
8`cY
cyBz,
T1E
cBrr
HQp
JLX4
}<-P<PO
.Q}8
TeMj
.K0c
JqV
BQ!*
b1]Gm
i/6/
H)[J{
dcN&
N1F
{PowpP
<msc
$, ENaA
jk;k
?jX
V'W:
F-0:
e9sQd
OGXT
wz+1
\bg=6
o-'{
tTZ)
/bcbU
rV5 hK
hykH
-7Gt
u^Bq
~?"G/3
R\S9
r<EN
/RFQy
=>M.'(:
CQc
gl#x
zO/+vU
Y2: 4
/8qD
d!!x
J=0[
/Qd
5]!&
444!4446444I444H4448444#444
_ `gG
OFcM
q?8^K
;^,B
jBi] [
?I3_^"
AdhK=
{."V
|hxm/2
f* @E
%BgWTEFsriDJqxe2lRxRp7I1VPvEEU0qBU5UxZ
UP`$+@
|-=%
)uA$`
fTD.
DrfY
N*z`
Ac-/
>W 2
;q#u2
[ORG
Jzg:UHd,
%DR`
444)444 444
wh[RK
*@gd=
vDd%
&Z!(
ZK#28o
'T;`
Y]0?
/gNHc
SDJL
y#j*Y
&wi3
HEP FFSH
]@"NL
\akcSv
>"pW
]9cl&rk
Y?Zd56
)FX8
7p)
W )
z']1d
fgxX%%3
[h{
O83]c
Fyf>
UeDK
PiVE
gJ`J/YN
#8-yC
~_rM
K
'm~Sox
\0im
yWO)
y[ZcNw+Ll[
Y=I
2s(_M
f_fW
lbI*e
1a$\i
GW]
g1yc
Z'R#0
6I3-
zNz*
:n3J9B
6!:
N:?|q
~~V&6
sk2d
_Zd5
,dES
Wwj`#I
xh`q
z:&sd
>`qB
;f!x
fa~u
_lq`
5kr+
k^E6'
EiVJ
Y]pi
`)xH
h^KI
Qn+QM
{s&={
ki1j<
U8YL
nq:H
X,X:_
GdqM
Zk5{
tttb444 444
MP7F
z4+MV
;|1~
W%ie
E76nzE5b7i0fkYpsG1P56yFTXRmG
=62*S
cdG82W
}(N,-p
}[
[Zc-444
jcOK
FB7X
6.S@BM
aICrG
d
Vl9zc
eVU1t
fblH
B8(`
[F1
~9 [
Jj`%!
%/g
xsY@
8&I8(
MqFo1n
A2bZz
2^s*O*
2a
pZ[#
QD=f
TransformFinalBlock
#}8/h &
U6 $A
&b\
ybVV)
G, '
Dk!y
;e}E
gsWH
/&&
mrr~h
!_K[:
Sgn
&YAhPr5c9k0Hv6Sq9Nn851bU64plYJ6UsLNRg8F
mjI8
bAk]Qs E
T e9
q+CT[
A O[
lOel
U'*
u[1JU
5s3
p)CU
%bRq
zOdz
OF1xo
=c 4C
vc;9G
t vs
nrJP
]C5&UT
z?hV&
Sia
2;t
444t444!
T$M^
~o%5t
!#tY
>_wN
sI y
NR2M
<,!
I<Z
nd'oq
=sxU
`<w"
@O[xS
(rM/
D5lW6
l;F/
gr_:
;Dm"
e1I
$9$*D
HJm?|
@Bi>
Q]Cg
9djh
#Blob
[P^K3
FM2w
A 1e=
)&CeknIA
"4lT
f@E::u
XzPS
={xW
{L\M
7U[."
tE-Q-A
l2G<
)%nW
rK9
\<J@
3nG6
J5,M
.6T=D
kLW
4dl;?P
1o6<v
,vwB
mD9cHvGiQZQaVqTtSX8u
u4)V
0a0
`3:
IY9b(
{T}_
tg8
v#~J
[H/THa+
_1n=q
2;']L
"@>a
]'o{
N|&+
xjQ})
Du:
:"sF
rCI.
D.$n
7vH]
{cbI\'!E
|?$F
GYh/
~+j_
)=SoP
+R,@#>I%A
jilO444
pqf72:C
9 J.
@j"v9
444p444+444444
Lb.,
(E>
vk'Q
p$mu
roFe
&_23
|b .A
5Qsd
B4Sf
Ss{?
lC+
t02J;
sq7YR
setJ
u-El
~QU#a
V<NR{|3b
C-8!
N\+ ]
nU3P
XZJT
IJ24@O
;||'A
5MH
|?$"
uXbL
8=&2
~Jej
{6p^
S-^[
vl
I4NE
>v]d
6[{y
4440444
lkUC
&r>@h
{:\8=
-b <
6(c
Ip8d&;
#aMZ
EN;3
yXE1
TTGH
TbZ,
VS$/R
"$@<
.6Ze
#Y=6
OS2s
{sj2
:e .dABa
444p444J444+444
mL0#
y1l"
Ap3;
wl}u
.\'k#e2f%
^%BO
%dB
q/Ub{g
1?;s
6HCx
Vq^\
@9i
!/ibZ
gWn$
wBB5
v6.f-i(
^E*:O
a9RH
,PG.b
qh1f
6o>>9
7ww,-
0jbI
?C3or
PkwZ
_aJl
;|<
YW=B
RwwZ
LleA
\g@u,
d~@
t!zme
.30-
Un06
e!}Q
B&ib
2RAP`
w&6fU
h#L}s
XTeRxy3
bcZ
McaM
NQy&%za
QH<{
F]=mV
pj@U
.k5~
`'Iu
HiXL
0.26
.M}w
WK0W
9ljQ\<(
n*n[
me=#
"j0q
NK_H
2"-y
DCo1-0;
HYEL
YUYH444
Mq `
s<2q
h@r
sho
YG !-:'UH
DGT?<;C
KXiBB
nn 4-F0
444s444)444 444
~)4GF
=+]e1
kHan
Q?z:
hai8
kY<b
/j!f
4445444
O=$N1
/o^
q~4_1
7WWWu
444s444$444
`/4!
{oAi:_
l$kU
tY#h
:qmO*
<)y=
aA\,(nS
>gb
bxw|
"bUa{
SB!6
5ywUH
2f`Cc^
%zd4a+
27wq
V%q]|
a^0_
}+AHl
2'*!
?Z:y
YVUP
}S"-
zo4eS
HJ(Q}
Egj?
%>]9@
\O?P
\w?'
[ *"<
\Sd4
DO-
mQ\/
eGBv
<#8Xf
vF~x_
O^Lv&8a
ZJC7fKNZ2tP5qA4zTINpYj8m
Y[6/
'R)R
r5*Oc
)+;y10A(444
u;a"
`aON?
A@O
gUCf
ry\z
]]qo:x)
1^.J
MrhW
HX}bb
t_:i
# u1HMxJ
[PuG
eJ[:
aDr/H
AI"s
# .-Z
%#(
J7Q{Vd
g"{;}[
}@S?
7*68
Fq?.x]
D*2MS
b|S!
F] >,
snm(
gms
=<"3
dhJv)6
</tIJ,
A$- >
0rb^
I!p+:
G7P.
vv\
rIL8
UUXW
QGe 0
q$bG
B!R&
7pE2
h)E{
W>'Z
/7eNU
2XTD/[
R8@a>
{Wrl
*.~
1pY>e
HT3.
cWW3
WkY
gx'w
) rB
<LZ*
/V i
444H444!444 444
3xF
F^Q;
4+J
BFZr``[
DS=
M(gloz?
kowedj
8`e<
U45e@
-] dN
C\ps
JlG
Ia77/r
XBF*C
tm%du
|,_:
@lCw
O 1k
o:<!
K\:
*D"C9/
OePo
J0K1
444+444?444T444h444p444s444w444x444|FHT
vcVd
`=80
N9&e
o*i:
x#.D@
Zs R
3w53Cj7
Ze7^6
9'3
' F
,>!b
':cq4k
M3T:
IK)^
Ddki
>lVm
$O=a
\4OQ
FOj/
:e"
* V9
u+7pr
uYeW4
J:TS]
$7sM
d>T1^
."%&
444e444
5+,
1Lj C
<oXfQ1
VM+;x
oM(&p0
[E m
."9
444g444;444!444
G>L2
G0
Ul- )
/7+\
t8U]rXc
444E444
^P{M
ugxS
P/~q]Q
c~hl
r8Jo
>Pwa!TA
7/wAGR
&{U_
3",g
#/Jz
;z 8
zZ
o5, 6
^c<|
&H=`
!>`o]
r?G\
4441444
zz{Ex
k3PY
G>ycuaN-^^
P G
ctF%
6|W5
{33@
1LQ}
"R]w
7mn}
>{32
.)~h
[{a3
yPOU
bBEU!
.0Tw+T*
)b>(
F^zsI
v-NU
y[ZB
fzSl/
&;2
k}N`
NPnz
o_7G
6i49
u;F9
A\`5
?>T
H=CV%w
'Z=P5
S'A^
bT;JwU
R|& ;
$Djwt3BtrhNcMZtlwvL4nTa2rl1DRn7GEg9dQ
P3,d
S3%|)
]^T@a~
m6\UO
A:)
b-eGJ
NUECk
uOB9Cs5G
Lt_Ao
}^^]z
AKu;
\$!r_
?]!}
m!qhs
6L-K<
qTY
x*91
GX=')
l/*H
<&f}S`KM
"#\2
:OeIG
ng.i
\^jCC</
n[R@
{vpt
8O'S
FI[C444
-qUzL/nV(d\vZ
klJ
coOn
0Md{O
Z/Sy
5M h
O#\u/
&dBbM7AGc5HyPFqRK4hbG4usLIkS2RnUIVOoJVi
,#E
X%jy
'Q|(6
5CkG
a<6D
[~3$]
c3H]
PQa{
k?<Q
AKKq
%v|*
Ax1+?,
xsq[
hdeN\
i2"5
xidj
%^ R
QI6R
BJ(ef
{%l3Si
=Qpa
|zMP\F<
Q)X3q
&[q2
Yy*"rz
o JU}
$&u5
T1t
;LD\<
njM4
f]qkCe
*PV@o
(,u\
6jZ~
N'C
v"CN
axn=
Ph*+oBv^,
esh?l
l)kK
z{X<
Jvll{
kCuR
G:8 h
f'Mu_
qqxD5&
=l B
Ee!]S
VIZT.
,|tJ
2sJ5
XUnp
p"p^
cCUg
;B
UE08
}<#Ft
|Lt8
GVhN
8FwX
]C0R
yA=
61e3l=
j Yx
hCVF
(<bOKax
/\`R
lpM
` @x
MJRq
wGa/
I90G
uKJe
e8p@ #_
I" ~
{0E z
lWQeH,
cSy
:I h
2,\a5
lc_`
"Y"s
A( 9`
^d$~
6FJW
tUW
K[\3
|pL,
|moA
7Qe^
~Bw!
kT.
\Nb.
q4>=;
k*- ]
,V57NZ
72"Z
Z:lQ
-W ^7%
I-_OR"
bF]}.]
+s<QE
'/6b
U PC
_|cP
p2"K
DorL
G9_$;vU
=S_@
.2`6
%(hP
;@D'
}[`O
Prjj
/sd5
68H"$u~
e58.
9 gTFI
5P:~A
444#ZUY
M. "C
EYb
?BTD444
/c3-
G ~
@]N
5'&nL
hA=*{
444c444!444
|Xn6W
H _t
&J]jV
%3Xm
H6U e
Ya)y
%g-co
ZQ9<a
(cx(
%Yi;
-F,.L
mH0r
<jpa=
#3(G(mw
l%6)
G8Q)
Q.~n
- .%
^!B1kK
Pi,D
*~Ij!y
%DF
=U!k
.2kv
ORz?&r
=Xcs
V3L@G
FI0'
qU8cQ
wl\ v+
E-
5k"3
n_aYC
4sv%
tPn(v
nCql'
yLOdM
+(d?2b
YZb2444
zMS\
z@ W
X Hph
BYUC
/}jJ
kZvz
xwgas
444}SUdy
(u<|
7x&}
dJ+}
=4 4
?9(oJ!
]bx$!#:
'+ G
s1dg
A;RS
r,B?N
n!`$r3
}Aw_L"
Ifs
' 1[
DJ{!L
4!Vm
,G q3*
rF-@a'
Wmjb
vPb
444 444444444444 444
!!k'
?%i(
UNjs
vz&'_
z:HMLe
d+ q
2CfhW
'vg*
EK/
jV t
KPvn!
2u= s
_m l
X&$x?
MS-S
`.kv
Sg$L
O.8&,
444t444$444
U{D
T7 F)
_z!:k
sUf
j?q(A
Y2g5
}W'a R
,eJ;
(Q#$@
[)0
g
o"v"
5w6bUFv
444t444l444k444c444A444"444 444
sI``{:
eRs C
.%xyn
jGmJ
@tn!%
}_Q_
)vb/
Bp+0MQi
A}{
ui<9
&D%XI
I>>c
b.QB
6F>%b
^_:n
%e04H
ML8W
xo ??
.4f-
@+q`T
!YGi7
&Q>`
nPf9
GAo7
@U gzv
N3vunmNv3reKnLW2HBoIbdSNKnRnMtlP
cVjN
.2#4
kHf2L6
FnnY
D5`U
+8f
b5u{<
}`:D
444O444+444
B soR
#!f#
XmQ`
h+O7
lllm444'
+Iuh
;CM8
Cmp~
!]/]S
[W(0+
Wbpid
Q:t
L=Q3
k{f
iM<
boPZ
l>K
D7Yh
9^G{Y
% /D
+"X_
%*!C
"yH4
.$3&?^
aVo)nX
Hz1E0
Y^ X
%EV(
$Rjb
>j&B
vK,$<
444W444!444
,A\fZm
Mw4h
]d$F7
4443PNJtYVQ
`?b
,._:]/
c ZG
,O\_
|\gVj]R+( $
4lCI(
_|+"
%r{?
\h :
(#\'
raiV
\J4E
,7Xe
$PU.p
gX?Bzq3Q\
#@Ek
g|1l
)48#
YM&A
IB^!
6$@vY
/and
!a\o
Ri^o
(~(qu
&N6N06tmpuKhFCe9bTLyr94f3TNU4AcYUPIPq7a
jglY
rN(G/
.o?1|T
>'dm
ca A
-w/
.Et
p0sK
*2Y
_t~q
]to-
Rs:g
0F]
?_7{
Bw%b
1>Q3
QO-c
kv~^
m=BB
\k:qQ
@,a9
M2]a
ZWr{!
olnM
/ln VY
?wl
rpf'
To:
RcrD
12-D
Ec?+e
pef_
B*lO
zzb_3
dQo
6EA&
C2_1
&* .
>MH
Iw8
b?WU
;$-8-
n,pFL
o~-R
RuntimeTypeHandle
:lV
}h%sx
2Y{1R2j
dc%+
Z2B,<S
DL\vz
@&BW
DG \
G9x
BDpv
J@w%
jsp]?2
^w[]
6EAr
z(p.'u,3
1Qw"A]
%b{`
1uaP{4
Y ?#
7u"F
O`.*
ba2G
ERkG
=O_#
#;,I
H')>
WZJ;q`
xT\6
sd9%
(hMf;
444G4441<A]
1&#ZW
3:Tj
Ve
$#I7
*am 3E6
OU~n
,`(#
L(4Y
k-5IaV
w@zWJ
g-K2
-M:*
HY0X
&=J7
=?'V&y
GetTypeFromHandle
>d$r
r=qp+
7z^'F0
FaJ*
:Z*>
?Q"K
>Hk
MVlZo
3 [?
ix8w
MO3C
@=Dv444&444
w#m
ChKa
KdR{mz-?
]_s;^
8S8'
C6&,
%aK\
My!2q
uUH
UXkk444#444444
UrhQr
}^-NIaq
(BhS
(rDH]
|rJXe
~LdU
j _e
HIxr
(55h
H\MOx
!ae3
1LSO
It=X @Z(
+yi#
hijh
jUX\QS
*T"Q&
`E6
3c_'
(R2Q
H gaiO
(#kWa
9JmpS
XXbV444
e>.R
C]=^Y
<foK
S-uX
zng;
X!u
h"d4
;m,,
a!2;
l|b
&HmU
!^hWF
sEC
N'p-
SD1@V]IOH
**>"
p,.J?x
'l b
Zdc=
hS&A
oMra
RI
5Ayv
Y\iT444%
<ZeRd
444)444B444_444g444C444'444
a?;H
N! D
#/0k
X]PG#;
1UFow
v X,-
3Nlq
T/L7m
q{65+jf
m#Qg
UYQt
kvh0
*xY3i~
m/}
0xgpm
;{b8Q
FsD}2K
o}n
jchS4
UT_
iy^F
[-Ll
R@`D#
}FVS5n
=<Vd
V1-/
?xPS#
Nv[&
-'3.
i'gI
XDo+
{}Xf
8|}P+
6HZp
w{kN
ENOfX
HI>.-+Sp,
oQM
(%A'
:gU:)/
A1_VY
j& c
!<mC
xB#/
y1G5
6:OqKNa::>P
KH!d
6r1v
3Nl
Q{r
!|X:2?
$5b
+3w^
Wm26
bz|B
,hM
.|o D
kVA
CUOGJ
5<nc
\l!{_RY
\sUC
\[mH
4=c^Q
f3S
r@*?
l."C?|&i
Lmr,
mOl
*3&gG
4"R;Z
%)h3
4Y:m
\>0
cgHsg
0f9|_
*qBV
T[&\
RuP,
fl8av
XVgGr
u7|
| ?&
vYw:
YWa#_
N|QI
444mo{/$(>
e~G
&c_
|% M%
A$&B
u]aq
'XufW
_5yB
Jn S
L'bM
M &;6
Dk
Z\hV16P
Me;c
h(KZ"L
47oNPKn2vbyGBCxICmlU08Go
M)|`u
twr
BDp>
( .*
|TGl
^~>l
z7vMt
vRt8
LM"4
,E-\c
S>R~!
}Gf@
o^z
i"A[
?t8b1
9fxi
hZhX#(
^lA[
<Qvx
RY-0
p3HZ
'/x^
{c#=
iNn_
P@)f
L5$
O7Sld.
q",6
?, -
,suIudT,U
#>31
flSg1NH1
O Zj
O_az
)sHGEN
||/TH
vt%Q
$5NByYvfD98OSPFuGzzXoJhDlInq5mINCE3E4
S9q,}$
Cb%
[/3vJUt
)w`<N6
,@N.
EY^E+
]x?|@
WyG#
w $Q
`}\yZF
#6nQ
K7vO,4
MX~%S
*N-&
MRXG
pUxy78
n%P
gUjC
}-*s
444-^[Ynxuf
EKit
u Xq
Z^r`
YdgP93Z
O?R-"
) ay0A
H2\J
uVst
v.~$
-^b
N !F3v3
n>nj
(: _
bso;_
A7Vx
W&P+
52\Q
>;Rr
GS;w
>^XQ
tb Q
8C_-m
M@c f3
<!tu
{6cCw
!q-;*-
mCk 7
OM[.
w; hQ
p@.
qs~E
=]9Ibev
hu6_
({}2
5Hx8F
p@;0k
S)1w
:@Tt<
39Q.
c#cG
. c_W
FUVrJ
:+SJ?
y2=OA
O@eg
DX21\
HA1c
dNx)
M:FC6_M
%LC4
/}7~
vhh%@
/4_Pp
SRH}CG
!M~UK
}OS#
444-444
2p-}
\ iA
4+l%$
]FW2q6X
{}`W
h\I
5 Q%
{ RDg
''$L$
Z8|p
DIe
6EC$b
"1kv
$D#A
W\2 Sb
_EE#
"A p
98C
c+j
R }H
Xw^`
5=0TqJ
QQF`
p-;:
wG]D`'
#^IM]Bh
(OjG
_`!@
RTH(
vdV\&;
4Myq
0o}ml
Lc[]
>Jd
B2Jqf
p v6D
LT@K
mE->
g+w)A
&A Vt
H}`~
-Pw)b
UnoK
5| @0\
Pbm5
1++l
vl"3<R
.;$E
tM^%
g}oHe
I'wd
m $
e~"[
\V0
sc[4
BD|]
(}WZF
O4,I
5CyM,D
444g444
G#P*[
k G}
4442414{BBH
#04}
Hi7-
zV`Sb
/dbH
VF
8Z@?8
7yVU
?W/;
"c{
r,?$
.w g
wVc}
m&tn\
Sy-+.
#I#
Dd77
$ik0eotHE2lS2sWwgRhmh0X0m3eiq9wuWffF0
*WT(
}DW(a
MKVi
aSk"<
eH:A
/9l^F
HFP:444
3y7^$
d3@b
t:eu
0gW
n+Z2x
o 4?8
7d
Z\}[
vjRo
lWS:
jDc"
o7N
qhL
6`> &O
=L|$
2aZp
{<kU\
Q]5u
0gQ`|
}Cw
M\MH
HGA
QT*G'!
kUSEB
mvn6&
z5 9:P
gMv|
e`:>y6
o;ad
>y '
e$-P2
HyF~
6Iq:
9R"SO
c3?'+
mQK~
>=P_.%
~ )o
444`444
G7T-p
|62i\
p{S5
444EOJA
rkQ}
V]
u8L"
R}Zz
IypKxS2bqwIsi3j90NgqLUUVWPZP
?])
nZ%I4T
)><.\)
JD*7D"
cWK
p)z)
>Y|7F
;2x;
<$^'6
)s=^
|1%L
Xo`!Q
4gon
VK;&
V3K
bLEH
{f4\
vV64
Z&oK
WU] ;
L#ytw
q\o&
~D)H3
4/Ng
y@[H>
S~XN
.L\_
2}0
>-yW
l"ZE
g;ohO
y`LLX
m(NI{
oj8O;
,&N"@
8"\aQ'
HDh 1
}|tb
z5A"
e=!:/
3EZL3
+g/O
uHu
M/`i
D#m~
mX#_
ZA=/h09tw
#hq+=>
* SA
E{r~
>>M)
O>gn
ISxV
WNv+<l3
uBL z
e\G}p
e6j"<|
%Z2
!#I(
/(Je
:Xm8
&#eKJ
6$`hj
9?\B:
M{$N
u4"b
zWuQ<
h?y]
75;E2
s\,(
_C&
%+Ci!jhf
F#HP
JV,3'T
@ /y
u]JO
&Y3#
C9O+
wJgO
O!ah
u@0{
&y)L$Z
x=]Ca
7]N#
3|`(
3+\$)
F+Dj
BM<W
j7h \'
qN:
"-r5
.$\
s59~
(2WAa
<MQz
Yh9!e
z%z;
444+444444
]`h{
|yN#
z0;Z }
a= A
ErMJ
!o*L
o({e,
;JBnF
=!vq
a4: L%leeI
>(tq
jO>2\7
k%=(-
eu=B
]rW]*d a
fb]kAr(
g|o^
I:c
]Yj
VX:T
8,Yt
W(VO
\P3l
GQA5
,)kX
yDR4$
0c ea
8{}d"
(gJ{^
h[,-
QdzLAbfdp3d1P0LV7XNslCXdm9T
nyM_
&*ac%
s5 w[|
N->/
yE:
lb V
)D:!
[G9D
z_ B}
!1l^
]y} )V
a6y(
T5Cs
VUbdADSN444A4444444*444!444
(#'32
8B*1
F__N=
1}rg
Zj"!
IubKL
NaS;S
8-UY
<v 0
`oTK!
E5j4q
_B:k
'D3z
4^dg
m",
=A"&
R 1_
U bCy
tfQ<`
C'1\
|sxl
;3!@
TObF
P
3 ,%
Re9r
iO%M'0
0mNpo
M}o[
#)m&o\
2|P2,
4KY (
N_ 0a
c$F!
X)RP
xW2
&FUR
*1;%!
ZSk
'7T&
*I]z
9Jzv
g##~
-_Vg(
)2N@Zh
Q+=F
@vEq
85{P
444?444
Q?~uS
#_3
~A=
@spR
L!}F X
Q.c)
on0=
X3e<U4Ib3
((j:9
N,7
Q oq
h*r2
-`/^
~'U~
2f)&
],%+
jbf>{a4
! %'k
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
~I=9
fpS_w
V%*
OSH-a
jigz
-3;j
&J 9
L6
EatN
19<x
Ve{
B(b:
Hjf|
eywr
ZeOD
2X<kS
`ow?f
&0i
j|8yy
xzkKf
a,Tm.K
}*3R
vQy_
:H,A-!::
AYi`E
MVbW
"j_
v)Y;X9Q-
h&^@
sh~H
,N^H
mAs]/fYp
1,.2
%,]h
FZb;
'/!4<
*?'*h{
{)?t
X]-jG
;KQn
;x w2$
#U|B
LQUE
$0~Y
v#-j
nLjd
^6q}
XPq~
)0xP9
R}=H9 LL
444+444W444
xmL:
VxSzof
e~c_
'cFoyYYYpzfBj1H8hkR8KP7UC2TMYhbcadXXvzFu
A~W[
Unr{
c0jZ
e-RF
s=$Y
gL s{
gisL444
J a&{
6|%
ei|!
j(V,=q
`D@Q
$p|Cf
4441444 444
>:Nx
uVrh
EF=n
"[Y1
b\oh
j(6G
PBLo^LO!R#
_e|Y
/d2S?
3,Lf
LX~~
vpRi,
WC*uu
L/swn
@@Q
@DWC444
HX@t
6A"Mkz
u&qx
m 4m
R<iU
A^J&
|*Y5
"0i?
$Y d
@<v(0
L^pY
'RJ1
@ pl
,{6*
]ilEZy
zwb?
8n[P
wCJ2
wSlt@
=)cL
<|<L
(Q}0
&C`X
jeOO
xB-Z
z-PMp
C*w9:
444 444 444
9S+8
Z(X+7w
i|cR-
G.k~Li
YIP#Z
bsj4
@7"/
9 Jl
B{`Ki
&`2I
vjE?
<!oc
K5E
jU9Vm
?QxE`u@
v=-
D9is
./K?
sA 7C
? 1k"o
3^lr
2YR3Za
/x"
i?J6
R*%XL`
-=Eg
HU on.
4FU~
` N}.l
JN]ja H
Lu4O8
q_p
$}/Cv
2Xi|86
O&!d
"w]D
PjHa
aBd]
T`yk
FcQFe}
_ek o
x+7
>WDBp
upA6
}+u>
U6+
3x},|
+BTN
r K$
liut
$`#6
m[ s
a_r5m8=
Xx[cVFJ
?+r!
hFf%
XJ[j
t QW
5RtGV?
xD.z
a.+d/
^YD$
n_,5
fL[L_jf
GDs|
j ~|
Z+;$
<O'C0E
+U H
/kf
3RpU
P,yX
TfL
79)xY
e{4|kS}
CKF/
aM^]\
v.\ Z
d.!C
hk[B
~=U
c,N@
M.wI
g}6S
.sL%
+'A0"Z
=ng:HH
^EoK
{Chc
eQ4;(
+wK8m
i.%)
( HlA
r8tW
M#[+
%RxE
&jh
7A< ml].
4440a^aTWX`
0/.
{MfJ
Zu)%{
D VN
8kXH
V)=u
n|.&
G>
444;79Fl9<K
+ oF
'@ %Xy
)|X0
:).
n*/uRQ
!5B/U
`(v
.'.]
PUF%<
k6<k
9UK2
R#-8^
&C74
g:]~
&^>7
vPQ^
`,RQ
444*444
tB1>
I3sQU
X;Ks
Stlf
%iz7m
m','
t2O
pIia]
1wfU
n]l/
Bu: t
6 jN;
I!i9W
p-&yp
r0dg
(|)I
'P,Jo
IX9r
34.n
Ye*%b
Xj"a
fm|
es~
POQSQP[
~M<9
f20!-
Abe<
/6YN-4S
KR&~
c6_
p>IG
N^1M
Qc>N
rV ;
W$-K
t{we
*%8W
DBNGyD
;$/9Y
e[Q
K?1f
|@ f1`
a@yB
Q*Z;)
W`) (
).Z/
%K\i
D{7>1C
*%F!+
x$Xu
^Rg?
jN,8Gh
oAJF
cLs
5 m
T9y^
A43$
qUz.
@s:;
Y$eMM
Wpcp
\`GO
3blH
x6/
S__)"
NH(
TCz2
M'Gu
[<q
Z7;d^
M5na
cjc,aV
B ry
4!52
444&444
H< %)Q
3.nP
#1R2
4448444444
w5)q
lU]Z*w
t}eV
I3>T
hzsS
a@(~
,LUi%
@;#
zu'5
f)Cn
<P"!y
rQA}
* ]L
E@+
gH%V
y]e*~
444_]Y
Nq 9%
2Kq\
L @1
IQ]8UXlaZ4E3(M"
?j<&
\~2?
w"_&
ZaH50MH
A %QaC
l!,L
R{N|
/hda
*AE.R
EG)^
@~sY
Y BC
'YaqS
IvG
q^Fp,
F:co
6sC%O
^th4
'hwYxJ5WyJCWH20HGrMF7EBsBtfTYwRXmlxuSyTd
o'eo&
RO6
vbe6
WoaG
BqvWP
T2E(
sE:m
$4>fo
:+Mo
x0,#F
o^ `
vcRgH
Q!hl
F&F9
4f["
D`ve'
.w1YZ
1=!hZ"E
-_K*
hJ,EL
WS%"
9jY
+qM\
Uxp~g
1$5
dPk@
.5?Z
^TLr
1f M_@
lsXC
?EtE
GXT>
.Er_
QF.f
Y c|
@(!?
4A~
/$/A
/c(Y
&*$
8C<L
RP[s
>shW
gskM
y,{maC
I|@
[q1b
76=762,}EC?
z*yoB
cOLS
I.`"
X\%Yo
w4v
|Mq/
qdM\
W?Q=$
MSX3
8{t
=Fv_2
R5R=
N9 h
4K)R
L [o
`ZY\
O+^du
nou4851
u}906
XZQK
7@4V
444\`o46;T
TZPr1
kN[1]'o
KTwtol
1D rtT
%fA5
<zM3
%&eS
_R7{
{)'6g
hs L
BxDh
x@:9
?^CJ
maY'
IW+
_2R\b
@`S]O
Q ?l
RT<
HE-IZ
SF6N
g}!C
|tn`
D *N
li+q
jXi`H
g3{
<5Rl,
bcS%
OD BS
-R@&o
}m_
>LuA
Y!Cr
5RzQ
h;R^
J>U8t
444V444
[>0
qr~_
(kw
Y<Af
"w|pz=z$
*r8.LE}
%#^>
z03Sb
5EJj
dq+
_>m:.D
1e@J
` y%t
NQ\- dT
j/p}
!Ei"7
85G'
ZamQ
Pbu?Q
FO"r
WFp-[NSu
md1v
"c9L
8Y7zy"
l# l
cV(9
tI&;V
+6i4:oQ
R|O$%
.R`4
Z+ae
VAl86
Mk16
g_ =
grXI
W:,f
xZv7
444O
`aly444.
(gb!
JK@b
nngy
BG<W
(i;Y
86Bl
|,c5
A_Xed
"w8{
%'<[G
Rc2{8
[?If
<9m6
444 FFS
WZl1&,K
"m t
7o)T
|N`X
Tf*,2
Nj.6
444&38QgAAT
95o$
5@EN
J$W&
.<*W
De3P
iP 1*4
f40o
|e+\
0!)
&VK}3pvV7
gibq
=/+ w
444b444
41}H
vgMf
T8a9C
+U*,
:N}2w%
~I?Y
1qe=
z!Bx
YR^L
S b^<
5*eYaz
Tw<+
tGGMQ
',\8H
xVA
bZBb0
VI :
-;XtV
X DL\U
ijM8
>p9Pk
444 444 444 444
W1JM
JeSo
Gm R
.mp S
Nrx6)F
<lh1
BiSH
m71 [>
(4G4
8Xn[z
E(dDt(
%P+s
[P>vl+
wd=py
R|>d6
MMnP
Apxc.
0NT1x
%d%'
N}/{x
G `
XU6YXR
yd5u
$x;LD
"_HIqkEm
^nD
%|xB
RITPH?-
(-0_[
<t>7
f j2-Y
]:iBR
+ja
O$"GTc
8LC_
D>H6t
da(1
7 V{
*c
4zOQ1,
?c9ra0
vJ_Y
oddr
.3[F
d+X
/|.C
$Vt
[BKj
$d))
'l@@Y
0h\?-
*y6 o
( qF
Lg|9>
jEsqQDfl
/nmE
e|cM]
>G+.~
$Ah9
zUufNt1
)Qi`
p f Qf
h^I'
:0DW
9/Vc
BDIO
q&Y;
l4(C
;-@H
g%}P
6p8Z
TY; f
(Nl!b7
W35x
)@\o>/
YSM~
k]!%~
&Ft~
q}<!
0o.5
ZF+S
l\Xa
<GQ
9$G`
<_AK
f4*~Z
L*(_P
Z>VF
W'j1X
rwd%r
W!j=
2b0R
C</H
.QH}
o&zP~"
Pa
Rx(k
r E4
]kj78
@v$j
5U/B
wGL:
lDg1
ga*D
^PN7
rf@p
QyBLH
U~=/
_uE~U
KK+v
=Usj
C*HP/?+?
"p4KC7LBnwsJMFhS3DcmD2IR5TW9Bj1XyDi
@3Ww
hYq(
fx52
2H[B
Vm2Y
:$CK I
($7\
zv@7
b#tY
1"C|S
AfKG
7M 3
',_
wvN?
VQ "
;v\)d
#\y
s!Y)
R@`7
U ~~
LOn|H
|gjrU9m
gun
r7gC
<_ah
N XnZ
\CQ
c }i
2eOR
Cf~B<
!4Q.
PDv`
?1a
7Vy:
dr[0?
)%^m
/z$o
sZ~AU
H"r:"i^
f,Z#
1#Zv
/;HHH
7j OAV.
8bJJ
rT6g
6~kj6
cDKX
n4f3
ciE m
d-%M
N38!Q
[8@v[,
D7~ a
&j>b
^2{]>
'`G;
VXQKH
I*}%Z
ezRP
ZMsS
4447SRU
3DYr
US_ K
z#;mp
]iH$[
CNn/|
`|^W
l5tT
PP BH
xN%p
u,FKYFr m^
NrhH
O|Gv
e]'a<
aM&
K;UH
uNY,
}Csw
w<oAb
l-{C
Dd+u
c-=^
X_U
%l0!
e`wG
kA:Kz
p[
rPRXkH4bhnpkTssguCjbt
CG}X
-71b
/\g2
n~kC
MM&+
J|%d
%gVD
Ph%Aurty+
+ I*U\x/
TXhV4F
*{@*
p?d{t
K~$KP
BADEpot
> gX7
]g#
u6R~
KxU\
)WOa
Hr0 i
WR@8!
v;<(
%c_d
l"^R
x-}_G
w`W
Pz_!y
q`$h
_>BY
jAXv
FAK
}rhS
=M@U
kdt)k
y>7t
9S mpa
444444444444 444
I: >
Ot|i3
Tt)}
uU;"
Zz31
hLk-d
==gT
%i7+
2 .W
|5UE
@ki;
<{?_7
EL{T
-$ mCPs
#ZbBKcljj8lGdXgcwwdRyA3e3l0fA6T8cIB7
Peoe
#Mt/
qf0p<
x;xkKH
LNei1
u"f-
O=AJ
$ZL/
usG)
}y@4=
te>P
PIl=
f%.%D
;PIT
u'D\<
O.)Z
$S*+{|
[,@9)
QFq7
A(M^
zf@Aa
SYm
]Z~Y
! m
TE Q`
6)8 ,7
nh?]
0wu&
&y46ot3wlO1zlGqDY3F9gZkAPwdvSwGkB8pjPNp
p>'6
><KLfG
}JlL
|9bIK
~)NFY
H*T!6
&$'!DPl
8gIt
VQ]!Tg6&
?HGa
or \f
]X/q
-H9N
} n)!u
;\ y@1
|vo<*
66Bu444#444
C [etK"
ByUB
jjv!+*@
1$|D
WSY?YVO
6L0-
RB/d;
qJ)SJu
E&@x
Lp^l
tj5N
Jv$H
D # >
zK#{
VTYx444(444 444
'#tG
?EaGr
BcMO
!.g.i
%38k:
-+rO| *>
,V9;
_(yX
\paS
-iyTS
hTo:F
4$L
U'mA
v\2=T
4vYq
toAnt
= o
- >
d0$X5
hi jm^(
pcTt
XU."
T/eu
Gw(6
S=&i
y@T,h
n#[s
(@H=
(cEb
GZ!;
8X9a
BMp2
]c(Vy
+"=[
Fu`
t~kE
9u4^2
M#O=1
F `?y
rMX1
G=Hs
x=U
im`P
gK* }A
2Jq/x
r. [
2U&
444T
94BQ
Duad
)xY
TXRu
[0A
N6Gr
BO.K
z s'U
x7ck
^}D
1hH6
-D<.
gMWe
vl9#
`4Al
@$Eg?g
@p<P
.Oe_
tX0V
/_\R
P`Z
S@bt
x2W#
;#k:2
:D@V
Eux3
4D =
,Xv_
(M1/yG5
444;`^c
2V\/
>75Xvv
e3"'
LM9X
CBj.
}Iaop
[.l&
[]=
.g>x
2Z5H0
6n)Dfj /
f9GkmkUO
?,|
@{E]
2hk,
_*X<A
$c(
-bH[
&WhK4
'69
q j$
"G4`[
' !i
F(TY)
OOvO
d00)
11<~|k@
p)Ym
Is3'
oLgI
46$=
(*;959P
')`Y
{ew#jL
Ea| J6(
x-JY
kx2n c
TeR9<0I
hgV>
lglV
$5FDSfThKvBtO5nqXzyYgZoKQPVckWOl1frsg
U!|!^
S@? tj
YTN[
:crd
X[l\
q=uU
{""G
3D|k
-wrW
J#NG6
|^vmc
M^#f
&-X6
T|qi
g*z1
bnrXhH
6\I6
4445444
,$q}
{7g}Pi
->>t
BgWH
,b!o
\ 2/
fGpo5
444X4440444
L\^G
GkqK`
BOfV
U%I
5=n }
qaer
2H 0
qCXK
'1Nz
qELT
,|LS
8jWJ
lxuB
0) m
6nS+
GZ8C
M:p]Hh
444]
t%K]
{TQe
NY#6
444{444-444444
3'E&T.
fu"
4J*QW
~DA@M;
I{1dm
+Fd'
_dR(}
F&$
ny[ `<
Mu>u8
)>AQ
)-C9
:*M}qg
mS3*
jFbbt
&s15W^":0
S7F=$
xR}EOYj/
T4 ~
mEC.h
E2`*Vj9
^s5H
a;->
_]d>
mi8E
+ h;
Z^x?
vZ
&q~F
d?=td*G
*t~
SiYb
\`G
FM6V#+QRi
yf ;
s' |
_I]_
0 }
444v444<444
vR+I
|{-]`ze
?`??
<JaS
>-wwo
DR>b
`>CC
DBcpf
hG=<Ch8 0
jZZF9
$%-t
17vQ
y {wr
*2L%
Wy&w\
7.|\
VZiM
nm(~!
u}v%Z
+]u7
9MSC
&b.9
1m.U
z3J|
x/x9!d
%m L##
BMHG
^9CC
) q
G4}`
>-OO
D ]
b"/+
{7 0p
I\to
WWc1(
0y<Lv{
2R]y
?2 p
g+W
Uu)5
z55F
kSCg:
L?|m
jrAW|'
C[_!
tuY6kv
eCHB
AAGb
444 444444444 444
C 35
qdh(D
ZS9<
dBY[M
Vak-
D,!t
i//J)
W<~giS
<z bx
-\Jh
|w6j`
]aFc
R/Ek
z1 Q)+
>]+*s65x
P(j(
Y6wPy
L7gN
'K)o
Y8;A
rL&%F
2+`
444A444
(9W
V% hk
=q-p=
@iM
O@r'C
fY`]
@AI>USS
DHKOy
3FNTy
8voe
6\U6
8{66W
f gb.
rAq
p-%;
qacf9
==-
V1Jl
^l$E
I/}s
:\#
rnvhD
ajtR2_*
>[]dk4
@% .N"k@
J-[g
QygI
= &Px
EFS/
O`n4
ZUqK
yx%X
Ut0A
@_M
3? N
Hg,[
xk I<
t /Pe
@~G-@
SEcE
?CX1444
L[Os
,Gil
^+8N
?Drmx
As&7
*:A,
~V2
,M4
5~@6
! \-
Uva7
=. 6
^yQr8E
t1$
F~G3
{UzW t
f4|=F
v#'y
lKjm
DR(+X
qiVG
n_}m
1~Zc
69f >
Ok'r
Nzj~ s
444'444
{[d
6"qy
).3d
AS+m
Mf}qr
[J(6]
/"S}`
{}i0R
:<wK
16@
)}xb
1[Q[
h$nn^
ZA ]o
BG1M
)<&Z%Fa
TR!+49
RLXC "2
!zU{
Wb(4
rR.%
g I{!
k (<?
@-SM
)|!Xp
t/]r
+95h
Y+gyjo@2r
^FyI
0U]M
HH=
1P6{
dpZR|
Of]-ux
FX *s
< fW
@(ms
l=I)!
*r0r
444 <;F
{.3B
{|i#
5~D<
"3/f
P[IH
C~*?
or<kc
4P;zk
Q`/{
Sf={
444R444$444 444
be~p
7<N!
444Z444!nnx]
**Q/
)I_1
!HpO~
+YrHH
iZ!y
9aG3
ZBqy
Sgyn
$6it
}eEQ
@SX9B
z$ K
hFG~
$QE]
:)FJL
"eM2+
8]R5
_nX:
&AR|
xB<m
x{\5
,YTk
gT$~f
Gp@j
`&lT
^%YFP
<[Eau
4441
"FBS
*P"
Az20!
@W(t
*$L
OJ*c
;K1;'f
x9K
I3Zr]$
lkr;
YT%d
t~!X
~,}s
`sN
qjpj#<
SB^D
kkuk%"0
'}0s
^LSf
,B4d
YU ki!
jgk]
",m6|O
5\yI
R46
r*7R
0&uw
gde
^bwpe
OlR[
gLBR
IBVc
|OC`
x4%E=
{,@1f
x;+X
]%w
QJni5
xTM t
~\AXer
^NLA~`
=Ys_P
9f8S
$HJ5
`@]$
@$#9?h
(2@C
MqQm%6
22cI
Z^ )
)t,c
H(xq{
4445
S(&1
$%O4A
%b]uS
Ab.
[ HTu
5ABb
gWY
h SXu
aAKt
QUZH
7^L{Q&
u7<u
Ukm_?
N| <xJ
C#GO
zs15
TLL1
B\K _;
8u<K
A4Fb
V~oG
5yrS
]/Ye
=B`;
taX(
'lsO7z22rVJe08VJQcp4LiQxe5VPN7m7OWbxWqtW
B vO
nDtx
7D!S
H-W5
3M}k
h/)p
W{$
+5K6),
)|W7H"b
ORb.444
EvxB
kXU #>
:WV1
c!Ky
+"hB
PXj4
$q+7
nA$&
WUO)
.vR>N
c+71w
D">N
! *;d
vn '
2+||
444l444%444
pn"P
A2t/
u(tG
_4=t
Tf"e
8jS8if%
);4m?
6MI"b
F4cC_
=Aix
enB*
{rKs
tZ8O
r,q
6[aiCZ{
\Zn6
Aa#
"6^M
2WFG
^%IW
(U
n~a
-({Pp
`Fw6
:5k :
Yr%6
_ ^8
JBE+
KB2y#
`> ]
!gax
1V|:
z@<\5
P2wGS
Ew19<
4JB,
CZ)
SFj
10cAL
e:w'
8j6d
j7)BF
VM-D
}s NHP
OSg>a?KE
5lDH% _:
:jdX
5Ru:b
1*~*
\y|'
444444#77=S)(,
f %
!(0
0mh
uu$
uu&
444]444@444'444
i7H"
V856
L2T
=}b^
B#
!VUi
j;^C
&hxY
S$?E
Tk+2
:^I0
jw_n#
8-o"
IjbP
5C]
I i
L ?d"E
j ;pI
#w'<
g+~x
?(fl
.W$S
Y -yJ
`=Q/
s y~2
5108F65
ee8(
_S`:
SdHtR@W
P7!{
TTc3
8@7ND '
ukVp
]'~c
2[}d
P3ZpF>
mHx'?
nN)2g
+d[zXL (`
swdB%
k@ T
190 6{
gg|7YH`K
p jwvo
>efi
yQAwH2tnjRyeydhjnvUboj7lDA
*~9h
Q/W\p
jWBd
OC-}
^E-Y
v=XD
7$i*
0 yv
Lfv@
m~1_
';2[
3 _8#%!d
F:C.
w&a|]@)SZ
L\3
:+7s
F0|Wo
z2N(
bso
4<74
! P4
I:a"FjR
Object
3:dN
l?d!F
WX7
-alV
<35z
&5{z
Nv8z
444@BDQ
d4@!
2_<
444L444
:B@~nf
We
Ru?+
z`1[
q$K^
05Dat
),zk
cm+b
IToM9 U
2=9b
#lDke!
`.o
Y;
)LX
nIb'
s1&z
0?4J
~x crh
Cr*AbRL
FI
! K
/1w#
>!e*
~_k!
<7M['QW
yT]\
8"<]
nxn
L;[V
NJ$K
Uen;w
eL^*
"r&
lIn*T
444
O=3\
O,N
.!'
{]oR
9E?B
UI?[H-
I Q`
A\Rw
rUxH
:k)$'
&Xe71OElnNHs9HBFmoXghWeYT6H5L33wQPQiSQ8
]~Iy`
*J!~p
]L %P>
wq!,}W
:XP$
BJU^
)>1n
sZ..
)0i#
v"'#
?W<Ro}
XY<z
\OYX
oarc
h]I>
@b^e
Jbyh
:*y
Z2>}N
2)4[Eh}
BR?X$
34kc
$P0k%
T[E
`7VFa
*HoKP`
Wv#Mw
*rj2
T@ZxM
Q:+
]|14
(n'G
Ie1@
GIB)#
B6uB
(a9x
X<kM
yOl)
A8i#
"CV]e#
g|5
vtX2
s aN
&mx:8
"_mcd
e>D}q
Di~=
X$Bxv
XK/uq2
.vuP
=*O>
I!qC
1z)x
e7%]
np`vhgk
sRy,
FtoYM
4:i6
@_zc6
3SL[
=?SE444
tz~]08
'`(
YOpZtNV9Kj4V7nl7r7rEEvIPwvW34
RzKGm
T_"R
444t444(444 444
$ia:
44488I
S0(!
O l9
a}`k
!1H%bN<
# kQ
@dW,
spRv
Qu1'
J. ^*$4
b")d
*|B+
r6cY
d ,H
<0r&
Xz d
Qi=q'
j <?
Z$F|$
NM&?
cEOD
"3i=
U>z
fYE'l
-RvDq
ud s
444s444"444
vJ'
"E3;
*NU~
w52t
5iZ
wN|J
M(Cr
o%*g
d(q3
UZc%
b<OnE
<,3<
vuU
SH9@P3
X0M0QP
444sqwE
[K{X
Th)c
UD-Rp6
W^fn0
BQo/
ANwt
.?P=b
K'V1,
[w ?Us
?]AU
<TI^
&^\=y
BUv
! `K
|Cby
"+~x
BUx
\lY|
wWJ`5
,CYk
A4m3
9 X
4qX>
C<+d
C4Ze^
p!!vP
`-?)bC
ULh;1
]:eh
^%X{
-c3
N`f=
7QWw
MC.T
klzNZQ@
Ku~Bm
%F'kb.B
"haE
w \-
9#E =
.+ic$\
*Bnm
^J3TtIM
^1];
\ec%
gjwI
89Lm34D
|}gF
@whJr&
|$sL
c|TjF
SX-m
SI@b
]8sZl
#CkO^
HWh
<&I)
0zFHw
aEMj
z|&!
Rjn<
y$kO
hiuN
48 y
#D>6
G*b
ol`m
QOr}*
TP+La
f]Y S~
v{Av
g:
.$K2
i f>
#s|\
!?;!xF
di8>
qU!#
Z<AH
tc}E
hz5'}
5JC7i%
+<E&3+
S0] l
qE9H$
5xZI
_bq **:
` L1
RG '
/(B'eV
"U0^J
ewh9BgQ
u$HSN
9 H$
444D444
yL8+*M~'
k=T6
c|Q`
ljpSPE
Ky[SK
bblw
N_o`
=Yau
[xG*g
H5Bq
p]*."
444e444"444
4 r:V2
Pk+.
me^1K
@r2L
QOGQ
YVt/
CjO[d
S`#%
a&n}
%-<6
EY K6cT
C{!
^ H|j
a}Cj;*
8bvyc
Hadl`
a#"
!X k
s,uP
OHMA444
&LXA@
a gr
=3W>{
9Afx
.r7Iy@
B*x,5fL
Dk0r
5rjIv)
U7bmp
7n|,
rQs7
zgYtdX
|X2o
7;o
7~}
fKL=
m}?z
)LgLey
-.[G
pkp\k0
=3y9jX
k7/4
muA>;
cZpa
s0Qe
T,Oh
nM`
r8<J5K
ssSn
%o?V
=%SY
aqOP;sBs
3y#
ENGK)
y|ss
33%i
>mO1
lafI
G#Ky
9=tn
Pc)v
444 QJSg
dL3HC
zQ#
<.$zQ
VH\0=
xp3.
*/d`>/
444;444
!)'p
7Wn6
3+@M#N
rx:7
xWnB
1$y&"
_OpU3,H5n
I[sN
5pRtL
"ItucU
n jCA
t"N#
W^6
VZXJ
53@7
]Eo
s/NV{g
aN8q
<emT
}EY'
{2wo
nW$
QeTc3!
'QUv
n_ <
C6|,
2sLL6
boi
<^;/
AK,
%!e@
9/6|*5
[gE]"e
Up&"1
zF^ %Q
rQ.A
'S"A
O#cv
M`5
~7cCq
@km~
s\vP
rdKS
C8n
+9O3
]%}< ]
Pv
*e~e
ZS|O
Fbik>
2U:R
Y!>M_$x(m
_ rp
g>w
W[hV&,
b8YW
5TN&
59:=
W$}r^
o| l
{z -
;~b(`%
2`JM
-xrQ
t_:"N
9b&,(
dK3h
9&@N
S$\In
u(
JL >
GHR@EC?
?[s
Sxh
? !dl
5b3j\/
a%)m
TQUMm
u+vu
j]K>
2;H?W_
4vUR
N0ef
L.zG!
4443444444
>%)uV
y4@b$
*Kg4x
IkN+o
(XM8
V|$b
lfDZL
F#o6=
,nSK0_
{/!0
<xF
N6'\
\fMs+
@ifZ
B<>:DA=
b$u
FNm
.oE5
:(^w
pC5[RR
+wX$
yYpk
i%s_
\9/F
&oV!
$6N38LR3UOoQxrWiCNuccddKyKRcwScsHNHFQ
-qsC|
W~d|
O*THI
t k?
estTv{l?
/:)"?
#J'1
%pau W
g$ ^C Qn
[:YM
|`Ut
4V:TB
=x>{
z+R*
+}L!
hPKS
n"LdL{
&//EE
Y}0e
Elq e
_DLH
>D Q
A:BTV
vieV
xXj5
!Aja*
u#Yb
Sjw!A
<srJq
2}E9X!p
Y8>JD
]:is
p}7yL
X y F"LC
QTF~G
9Yi82
ejfD
2N2n7e
5;{I!
@IB
O+2
s)e`h<
T}y-
(jG*U6
TG4:p
_8&
wMtD
<Sz|
lKRn
fFuUV
u>n>
X[ (3
fi d5)
EV&Y?
=Hw8
c3Z
2sk9~
^Fu*nP
E<B2
4:UD
e qmF
444O444&444 444
E^T(]
TnT0r
EWm ia
ycke
'oc=
`jU<
ZK|\
U$@O(Q
}W<&
-|'~;
hR'l#&
`I`
IF>/
Jf_p
'qn0
m oY
8{k&|(p
uUGX
s< ;
$IVT>
cOiMoj
yWQ?hP
:S;x1
'JM\
gZjw8
|~4 z
{FIAk
UW=d#
-`b)
qiqp
,&lj+I
%Sg
(M$FR
7AwW#
Et8*
6F1k
$&CY;
Z* @3
_3Em
34 e
P4&5ha!
q?[U
Hi/?&-`
fd~a
/gJGA
s K;
kSvzR])'
Jlm-
Fm@)
#X$A
iP&P
32d+k
vOQ
Uhoesc2i0tNLlaK44Y5coOTP
rt| `
$-qtI
!P1M
` =-Z
i4$i
B|aj'
x+sS
qXvz
Z*Rn}
r7X2M
m?F
mHS:
444->=Fk857
<1$d
-.dQ
r]z^
==H~"%8lDJkOFFS&.4M
-~pn_o
@!IZ8
R)>>
6iv'-
269\X
yZXLd5
9dRL{"
=^9g8
f`%lQrl`
v4YA$
l|P
I?D3I
0?xE#
(-7oR
OH4F
2:=&
Yind
l .I.;
O"#
N|_o
5hV
-SoMY
Z[_'
XB<*
N7ne
bZ U
.p3RG
jm#[
]$y6
d{)l>A
s6 d{
txvV
&u3-k
,7Ld
r<'.
_.zN
&*F
)MX6
({PH
O?pz
!j.u
1GF^
*[cW
1`D+
E@C~444(444 444
d%T-"h
|\Rfs
y[iY,
6}^p-
cwe=
444K444+444
ID}hey
444a444
$\hN
=JD2#-
yb7x
5-lr
eCT.
$!5i
k [f%
&EnxI
7 ,^
r\A/Tg
b[ [=
P'+e$
+.[T
`5qA
4tY ctm
C w1
m/FwU
zdO0&r
8F<v
7MgS[
'E%O
lQ'
K:}D
-od
:Uv?q
hw*]
wTB#;
[=~%
KR#Ra
376f
DG&(j
7Qqq|
5V|k
?Ln]e
m3B>
I'~xP
+6b2
: V
sMlGDk2
c}W7
@ 3#
/|y`i
X^NZ
J88!
PlmS
t|R
=8['
Pp,kKi4
444 444444444 444
Lbo
s6^:
OXo78
3(Dv
\phF:'
} \
u cPB=
OND
lFS-
H0]R
,z;^
2pGG
8.+
6gM"
36\s'
o1IJ
~[em
zLQ
444
KKX5`\B
FKO
?wWj
Ry1[^
E};bmw
.1q|
twDAST
K*^EV
s:z@
i 'BM=5'
Zf.I
2QI0h
/ard
IEnumerable`1
_w 9n
4?;|
$794
Iod@
=6Dihoy
VRao
d#~TV
xbbf
S3z1
*4V<
nyXa
GhQ'zM+
3p;2
-m=dJ
OvP*L
)A$i
V@yM
$#[ 0S
J+-*
z_YX
B=x>
x\sA
=Tp,9
D1vp
Fq#,_
VZZ?
V*m>V
"T5ZN
j' W
yt=r
rTY~{
i,xt
OJA<
#8D;
Xq~t
4 u@ <9
&i+w
#6S>\
aL j
f{F6
=g:r
/@,6/ce4
l- >
444n4448444
5omN
b!x6
'sy3
SB/"
*,3u
> :x
X8Gm
A}I1
=f9
[ Y
B;@"
DJju
(\,=(
]L{!
6w\%
%%g0
V:C$
3T=#
~s/}
Fx6r
% ,.
^J_x
<s"R
B9^d
7}N.
464:
LC H
Ge~0
Br\{
_ )FC
u`JTA
(e>}
3K2K
Z8A^*
Xad
O=Gk
rpR/
`Rk=
Tkou
QQ VP
|hjo
YY6W
System.Collections.Generic
444Y
p)-O
rElmzZzRLnQCZZKT8AhvA18
b il!%(
lE`s
<.~vh
naXn
bzC)
wOK|
SuLWZ
+Smr\w
"X*g
O2)qr
DY^V
`Fc[;:
N,v>glb
sOu
MLj}LP
m?lg
xi.]
ixl7N
)WMn:o
D]b}
,FC@
4gU$
8y S
0 pVv
op:[
14ZXX/
#l\ZN
]?s.s
l#BE
,*Wv
Qu]zEo
b}a>
[p?!
KJ<WH
PlUi
`c)K
gr-
R?Dk
.J\d
ot 0D
ytT
444 NSlS!'F
v?W=
<8/}%/
IEo[
\I:Rp
CqjuP
~@ p.Ex
5?s_S,d
g'_p
7= he
%?
if\w
wDCT;
lp:BS|M
\Yd[
'<_c
{C51
6~DE>
NS#2K7\Z
p2>O,/l
8jL
444QLZ/7;O
tqt&!$:
(gwT
}rbp
?&U3wn
n)_~.aR
Xf$$4
$e53
3Myt
Behavior analysis details | |||||
---|---|---|---|---|---|
Machine name | Machine label | Machine manager | Started | Ended | Duration |
Seven05b_64 | Seven05b_64 | VirtualBox | 2018-05-18 15:56:36 | 2018-05-18 15:59:28 | 172 |
21 Behaviors detected by system signatures
Collects information to fingerprint the system
Severity: High
Confidence: High
Installs itself for autorun at Windows startup
Severity: High
Confidence: Very High
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Cummins Inc
- data: C:\Users\Seven01\AppData\Roaming\Cummins Inc\Cummins Inc.exe
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\dreamcdd
- data: cmd /c type C:\Users\Seven01\AppData\Local\Temp\dreamcdd.txt | cmd
- file: C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.exe
Creates a hidden or system file
Severity: High
Confidence: Medium
- file: C:\Users\Seven01\AppData\Roaming\Cummins Inc\Cummins Inc.exe
Retrieves Windows ProductID, probably to fingerprint the sandbox
Severity: High
Confidence: Very High
Checks the CPU name from registry, possibly for anti-virtualization
Severity: High
Confidence: Very High
Checks the system manufacturer, likely for anti-virtualization
Severity: High
Confidence: Very High
Harvests credentials from local FTP client softwares
Severity: High
Confidence: Very High
- file: C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml
- file: C:\Users\Seven01\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\
- file: C:\Users\Seven01\AppData\Roaming\Ipswitch\WS_FTP\Sites\ws_ftp.ini
- key: HKEY_CURRENT_USER\Software\FTPWare\COREFTP\Sites
Harvests information related to installed instant messenger clients
Severity: High
Confidence: Very High
- file: C:\Users\Seven01\AppData\Roaming\.purple\accounts.xml
- key: HKEY_CURRENT_USER\Software\Paltalk
Harvests information related to installed mail clients
Severity: High
Confidence: Very High
- file: C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password
- key: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
- key: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
A process attempted to delay the analysis task by a long amount of time.
Severity: High
Confidence: Very High
- Process: avanger.exe tried to sleep 2139 seconds, actually delayed analysis time by 0 seconds
Attempts to remove evidence of file being downloaded from the Internet
Severity: High
Confidence: Very High
- file: C:\Users\Seven01\AppData\Roaming\Cummins Inc\Cummins Inc.exe:Zone.Identifier
Sniffs keystrokes
Severity: High
Confidence: Very High
- SetWindowsHookExW: Process: avanger.exe(3056)
Executed a process and injected code into it, probably while unpacking
Severity: High
Confidence: Very High
- Injection: avanger.exe(2660) -> avanger.exe(2908)
Creates RWX memory
Severity: Medium
Confidence: Medium
Reads data out of its own binary image
Severity: Medium
Confidence: Low
- self_read: process: I8j.exe, pid: 2900, offset: 0x00000000, length: 0x00001000
- self_read: process: I8j.exe, pid: 2900, offset: 0x00000080, length: 0x00000200
- self_read: process: I8j.exe, pid: 2900, offset: 0x00000178, length: 0x00000200
- self_read: process: I8j.exe, pid: 2900, offset: 0x00001fb8, length: 0x00000200
- self_read: process: I8j.exe, pid: 2900, offset: 0x00001fd4, length: 0x00000200
- self_read: process: I8j.exe, pid: 2244, offset: 0x00000000, length: 0x00001000
- self_read: process: I8j.exe, pid: 2244, offset: 0x00000080, length: 0x00000200
- self_read: process: I8j.exe, pid: 2244, offset: 0x00000178, length: 0x00000200
- self_read: process: I8j.exe, pid: 2244, offset: 0x00001fb8, length: 0x00000200
- self_read: process: I8j.exe, pid: 2244, offset: 0x00001fd4, length: 0x00000200
- self_read: process: I8j.exe, pid: 2308, offset: 0x00000000, length: 0x00001000
- self_read: process: I8j.exe, pid: 2308, offset: 0x00000080, length: 0x00000200
- self_read: process: I8j.exe, pid: 2308, offset: 0x00000178, length: 0x00000200
- self_read: process: I8j.exe, pid: 2308, offset: 0x00001fb8, length: 0x00000200
- self_read: process: I8j.exe, pid: 2308, offset: 0x00001fd4, length: 0x00000200
- self_read: process: I8j.exe, pid: 3040, offset: 0x00000000, length: 0x00001000
- self_read: process: I8j.exe, pid: 3040, offset: 0x00000080, length: 0x00000200
- self_read: process: I8j.exe, pid: 3040, offset: 0x00000178, length: 0x00000200
- self_read: process: I8j.exe, pid: 3040, offset: 0x00001fb8, length: 0x00000200
- self_read: process: I8j.exe, pid: 3040, offset: 0x00001fd4, length: 0x00000200
- self_read: process: I8j.exe, pid: 1972, offset: 0x00000000, length: 0x00001000
- self_read: process: I8j.exe, pid: 1972, offset: 0x00000080, length: 0x00000200
- self_read: process: I8j.exe, pid: 1972, offset: 0x00000178, length: 0x00000200
- self_read: process: I8j.exe, pid: 1972, offset: 0x00001fb8, length: 0x00000200
- self_read: process: I8j.exe, pid: 1972, offset: 0x00001fd4, length: 0x00000200
- self_read: process: I8j.exe, pid: 1968, offset: 0x00000000, length: 0x00001000
- self_read: process: I8j.exe, pid: 1968, offset: 0x00000080, length: 0x00000200
- self_read: process: I8j.exe, pid: 1968, offset: 0x00000178, length: 0x00000200
- self_read: process: I8j.exe, pid: 1968, offset: 0x00001fb8, length: 0x00000200
- self_read: process: I8j.exe, pid: 1968, offset: 0x00001fd4, length: 0x00000200
- self_read: process: I8j.exe, pid: 2732, offset: 0x00000000, length: 0x00001000
- self_read: process: I8j.exe, pid: 2732, offset: 0x00000080, length: 0x00000200
- self_read: process: I8j.exe, pid: 2732, offset: 0x00000178, length: 0x00000200
- self_read: process: I8j.exe, pid: 2732, offset: 0x00001fb8, length: 0x00000200
- self_read: process: I8j.exe, pid: 2732, offset: 0x00001fd4, length: 0x00000200
A process created a hidden window
Severity: Medium
Confidence: Very High
- Process: Invoice_tr2018.exe -> "cmd"
- Process: avanger.exe -> "cmd"
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Severity: Medium
Confidence: Low
- get_no_useragent: HTTP traffic contains a GET request with no user-agent header
- suspicious_request: http://checkip.dyndns.org/
The binary likely contains encrypted or compressed data.
Severity: Medium
Confidence: Very High
- section: name: .text, entropy: 8.00, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x000efa00, virtual_size: 0x000ef894
Attempts to connect to a dead IP:Port (1 unique times)
Severity: Low
Confidence: Very High
- IP: 192.168.56.1:80
Behavior analysis details | |||||
---|---|---|---|---|---|
Machine name | Machine label | Machine manager | Started | Ended | Duration |
Seven05b_64 | Seven05b_64 | VirtualBox | 2018-05-18 15:56:36 | 2018-05-18 15:59:28 | 172 |
11 Summary items with data
Files
C:\Windows\System32\MSCOREE.DLL.local C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll C:\Windows\Microsoft.NET\Framework\* C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll C:\Users\Seven01\AppData\Local\Temp\Invoice_tr2018.exe.config C:\Users\Seven01\AppData\Local\Temp\Invoice_tr2018.exe C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Users\Seven01\AppData\Local\Temp\Invoice_tr2018.exe.Local\ C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll C:\Windows C:\Windows\winsxs C:\Windows\Microsoft.NET\Framework\v4.0.30319 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI C:\Users C:\Users\Seven01 C:\Users\Seven01\AppData C:\Users\Seven01\AppData\Local C:\Users\Seven01\AppData\Local\Temp C:\Windows\System32\l_intl.nls C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll \Device\KsecDD C:\Users\Seven01\AppData\Local\Temp\Invoice_tr2018.INI C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll C:\Windows\assembly\pubpol23.dat C:\Windows\assembly\GAC\PublisherPolicy.tme C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI C:\Windows\System32\tzres.dll C:\Windows\Globalization\it-it.nlp C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp C:\Users\Seven01\AppData\Local\Temp\it-IT\Invoice_tr2018.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\Invoice_tr2018.resources\Invoice_tr2018.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\Invoice_tr2018.resources.exe C:\Users\Seven01\AppData\Local\Temp\it-IT\Invoice_tr2018.resources\Invoice_tr2018.resources.exe C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll C:\Windows\Globalization\it.nlp C:\Users\Seven01\AppData\Local\Temp\it\Invoice_tr2018.resources.dll C:\Users\Seven01\AppData\Local\Temp\it\Invoice_tr2018.resources\Invoice_tr2018.resources.dll C:\Users\Seven01\AppData\Local\Temp\it\Invoice_tr2018.resources.exe C:\Users\Seven01\AppData\Local\Temp\it\Invoice_tr2018.resources\Invoice_tr2018.resources.exe C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll C:\Windows\Globalization\en-us.nlp C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089 C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089 C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089 C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089 C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089 C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll C:\Users\Seven01\AppData\Local\Temp\RunPEDll.dll C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.dll C:\Users\Seven01\AppData\Local\Temp\RunPEDll.exe C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.exe C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.dll C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.exe C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.exe C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.dll C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.dll C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.exe C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.exe \Device\NamedPipe\ \Device\NamedPipe C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2428.21671750 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2428.21671750 C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2428.21671796 C:\Windows\System32\Branding\Basebrd\Basebrd.dll C:\Windows\Branding\Basebrd\basebrd.dll C:\Windows\Globalization\Sorting\sortdefault.nls C:\Users\Seven01\AppData\Local\Temp\"C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.exe" C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.exe.config C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\api-ms-win-appmodel-runtime-l1-1-0.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.exe.Local\ C:\Users\Seven01\AppData\Roaming C:\Users\Seven01\AppData\Roaming\Microsoft\Windows C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs C:\Users\Seven01\AppData\Roaming\Microsoft C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.INI C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\Invoice_tr2018.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\Invoice_tr2018.resources\Invoice_tr2018.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\Invoice_tr2018.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\Invoice_tr2018.resources\Invoice_tr2018.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\Invoice_tr2018.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\Invoice_tr2018.resources\Invoice_tr2018.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\Invoice_tr2018.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\Invoice_tr2018.resources\Invoice_tr2018.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\mscorlib.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\mscorlib.resources\mscorlib.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\mscorlib.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\mscorlib.resources\mscorlib.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RunPEDll.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RunPEDll\RunPEDll.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RunPEDll.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RunPEDll\RunPEDll.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\stub.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\stub.resources\stub.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\stub.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\stub.resources\stub.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\stub.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\stub.resources\stub.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\stub.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\stub.resources\stub.resources.exe C:\Users\Seven01\AppData\Local\Temp\dreamcdd.txt C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.INI C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2660.21673484 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2660.21673484 C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2660.21673484 C:\Users\Seven01\AppData\Local\Temp\reg.* C:\Users\Seven01\AppData\Local\Temp\reg C:\ProgramData\Oracle\Java\javapath\reg.* C:\ProgramData\Oracle\Java\javapath\reg C:\Windows\System32\reg.* C:\Windows\System32\reg.COM C:\Windows\System32\reg.exe C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\9TH99.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\9TH99.resources\9TH99.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\9TH99.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\9TH99.resources\9TH99.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\9TH99.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\9TH99.resources\9TH99.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\9TH99.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\9TH99.resources\9TH99.resources.exe C:\Users\Seven01\AppData\Roaming\Cummins Inc\ C:\Users\Seven01\AppData\Roaming\Cummins Inc C:\Users\Seven01\AppData\Roaming\Cummins Inc\Cummins Inc.exe C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2908.21674953 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2908.21674953 C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2908.21674968 C:\Windows\System32\wbem\wbemdisp.tlb C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bf7e7494e75e32979c7824a07570a8a9\CustomMarshalers.ni.dll C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.INI C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\oleaut32.DLL C:\Windows\SysWOW64\stdole2.tlb C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\System.Management.ni.dll C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.INI C:\Windows\Microsoft.NET\Framework\v2.0.50727\wminet_utils.dll C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.INI C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\rasapi32.dll C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll C:\Windows\Globalization\en.nlp C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\winhttp.dll C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\iphlpapi.dll C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll C:\Users\Seven01\AppData\Roaming\Cummins Inc\Cummins Inc.exe:Zone.Identifier C:\Users\Seven01\AppData\Local\Temp\tmpG453.tmp C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources\L1J5OK7O51JQ4UJ41GKW4CWLESCDS1P81MGX16BZ.resources.exe C:\Users\Seven01\AppData\Local\Temp\I8j.exe C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll C:\Users\Seven01\AppData\Local\Google\Chrome\User Data\* C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\profiles.ini C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\logins.json C:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a C:\Windows\assembly\GAC\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\Microsoft.VisualBasic.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\Microsoft.VisualBasic.resources\Microsoft.VisualBasic.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\Microsoft.VisualBasic.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\Microsoft.VisualBasic.resources\Microsoft.VisualBasic.resources.exe C:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.INI C:\Users\Seven01\AppData\Roaming\Opera Software\Opera Stable\Login Data C:\Users\Seven01\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies C:\Users\Seven01\AppData\Local\Microsoft\Windows\History C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\desktop.ini C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5 \??\MountPointManager C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\ C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\ C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\ C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\d9a485330ec2708456134e4a9712a4ab\System.Security.ni.dll C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.INI C:\Users\Seven01\AppData\Local\Temp\log.tmp C:\Program Files (x86)\Common Files\Apple\Apple Application Support\plutil.exe C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\logins.json C:\Users\Seven01\AppData\Local\Comodo\Dragon\User Data\Default\Login Data C:\Users\Seven01\AppData\Roaming\Flock\Browser\profiles.ini C:\Program Files (x86)\Mozilla Firefox\nss3.dll C:\Program Files (x86)\Postbox\nss3.dll C:\Program Files (x86)\Mozilla Thunderbird\nss3.dll C:\Program Files (x86)\SeaMonkey\nss3.dll C:\Program Files (x86)\Flock\nss3.dll C:\Users\Seven01\AppData\Roaming\Flock\Browser\signons3.txt C:\Users\Seven01\AppData\Local\MapleStudio\ChromePlus\User Data\Default\Login Data C:\Users\Seven01\AppData\Local\Chromium\User Data\Default\Login Data C:\Users\Seven01\AppData\Local\Torch\User Data\Default\Login Data C:\Users\Seven01\AppData\Local\UCBrowser\* C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini C:\Users\Seven01\AppData\Roaming\Thunderbird\signons.sqlite C:\Users\Seven01\AppData\Roaming\Thunderbird\logins.json C:\Storage\* C:\Users\Seven01\AppData\Roaming\Opera Mail\Opera Mail\wand.dat C:\Users\Seven01\AppData\Roaming\Pocomail\accounts.ini C:\Users\Seven01\AppData\Roaming\The Bat! C:\Users\Seven01\AppData\Roaming\Postbox\profiles.ini C:\Users\Seven01\AppData\Roaming\Postbox\signons.sqlite C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml C:\Users\Seven01\AppData\Roaming\Ipswitch\WS_FTP\Sites\ws_ftp.ini C:\Users\Seven01\AppData\Roaming\CoreFTP\sites.idx C:\Windows\SysWOW64\wshom.ocx C:\ProgramData\DynDNS\Updater\config.dyndns C:\Users\All Users\AppData\Roaming\FlashFXP\3quick.dat C:\ C:\Users\Seven01\AppData\Roaming\.purple\accounts.xml C:\Users\Seven01\AppData\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml C:\Users\Seven01\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\ C:\Users\Seven01\AppData\Local\Temp\Ftplist.txt C:\Program Files (x86)\jDownloader\config\database.script C:\Windows\assembly\GAC_32\System.resources\2.0.0.0_it-IT_b77a5c561934e089 C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it-IT_b77a5c561934e089 C:\Windows\assembly\GAC\System.resources\2.0.0.0_it-IT_b77a5c561934e089 C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\System.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\System.resources\System.resources.dll C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\System.resources.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\it-IT\System.resources\System.resources.exe C:\Windows\assembly\GAC_32\System.resources\2.0.0.0_it_b77a5c561934e089 C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089 C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.dll C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.INI C:\Windows\sysnative\wbem\WmiPrvSE.exe C:\Windows\inf\display.inf C:\Windows\sysnative\DriverStore\it-IT\display.inf_loc C:\Windows\inf\display.PNF C:\Windows\inf\hdaudio.inf C:\Windows\sysnative\DriverStore\it-IT\hdaudio.inf_loc C:\Windows\inf\hdaudio.PNF \??\PIPE\samr C:\Windows\sysnative\wbem\repository C:\Windows\sysnative\wbem\Logs C:\Windows\sysnative\wbem\AutoRecover C:\Windows\sysnative\wbem\MOF C:\Windows\sysnative\wbem\repository\INDEX.BTR C:\Windows\sysnative\wbem\repository\WRITABLE.TST C:\Windows\sysnative\wbem\repository\MAPPING1.MAP C:\Windows\sysnative\wbem\repository\MAPPING2.MAP C:\Windows\sysnative\wbem\repository\MAPPING3.MAP C:\Windows\sysnative\wbem\repository\OBJECTS.DATA C:\Windows\sysnative\wbem\repository\WBEM9xUpgd.dat \??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER \??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM \??\WMIDataDevice C:\Windows\sysnative\Branding\basebrd\basebrd.dll C: C:\Windows\sysnative\tzres.dll \??\PIPE\wkssvc C:\DosDevices\pipe\ \??\PIPE\srvsvc C:\Users\Seven01\AppData\Local\Temp\I8j.exe.config C:\Users\Seven01\AppData\Local\Temp\I8j.exe.Local\ C:\Users\Seven01\AppData\Local\Temp\I8j.config C:\Users\Seven01\AppData\Local\Temp\I8j.INI C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start.* C:\Windows\SysWOW64\shell32.dll C:\Users\Seven01\AppData\Local\Microsoft\Windows\Caches C:\Users\Seven01\AppData\Local\Microsoft\Windows\Caches\cversions.1.db C:\Users\Seven01\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db C:\Users\desktop.ini C:\Users\Seven01\AppData\Roaming\Microsoft\desktop.ini C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start C:\Windows\Microsoft.NET\Framework\v2.0.50727\VERSION.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.pdb C:\Windows\symbols\dll\System.pdb C:\Windows\dll\System.pdb C:\Windows\System.pdb C:\Users\Seven01\AppData\Local\Temp\I8j.PDB C:\Users\Seven01\AppData\Local\Temp\ConsoleApp1.pdb C:\Windows\symbols\exe\ConsoleApp1.pdb C:\Windows\exe\ConsoleApp1.pdb C:\Windows\ConsoleApp1.pdb C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.pdb C:\Windows\symbols\dll\mscorlib.pdb C:\Windows\dll\mscorlib.pdb C:\Windows\mscorlib.pdb C:\Windows\System32\it-IT\werui.dll.mui C:\Windows\System32\werui.dll C:\Windows\System32\it-IT\DUser.dll.mui C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe.Local\ C:\Windows\winsxs\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_it-it_e4c79be92250cb6e C:\Windows\winsxs\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_it-it_e4c79be92250cb6e\Comctl32.dll.mui C:\Windows\Fonts\staticcache.dat C:\Windows\win.ini C:\Windows\System32\uxtheme.dll.Config C:\Windows\System32\uxtheme.dll C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2 C:\Windows\System32\it-IT\erofflps.txt C:\Users\Seven01\AppData\Local\Temp\ C:\Users\Seven01\AppData\Local\Temp\WERCE57.tmp C:\Users\Seven01\AppData\Local\Temp\WERCE57.tmp.WERInternalMetadata.xml C:\Windows\System32\drivers\*.mrk C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\*_*_*_* C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0beb695e C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0beb695e\Report.wer C:\Users\Seven01\AppData\Local\Temp\WERE72E.tmp C:\Users\Seven01\AppData\Local\Temp\WERE72E.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_09577f28 C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_09577f28\Report.wer C:\Users\Seven01\AppData\Local\Temp\WER1CB.tmp C:\Users\Seven01\AppData\Local\Temp\WER1CB.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0be39967 C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0be39967\Report.wer C:\Users\Seven01\AppData\Local\Temp\WER1BDB.tmp C:\Users\Seven01\AppData\Local\Temp\WER1BDB.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_07f7b452 C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_07f7b452\Report.wer C:\Users\Seven01\AppData\Local\Temp\WER3677.tmp C:\Users\Seven01\AppData\Local\Temp\WER3677.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0bcbceb0 C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0bcbceb0\Report.wer C:\Users\Seven01\AppData\Local\Temp\WER548E.tmp C:\Users\Seven01\AppData\Local\Temp\WER548E.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0673ed34 C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0673ed34\Report.wer C:\Users\Seven01\AppData\Local\Temp\WER743C.tmp C:\Users\Seven01\AppData\Local\Temp\WER743C.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_08d40deb C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_08d40deb\Report.wer
Read Files
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll C:\Users\Seven01\AppData\Local\Temp\Invoice_tr2018.exe.config C:\Users\Seven01\AppData\Local\Temp\Invoice_tr2018.exe C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll C:\Windows\System32\l_intl.nls \Device\KsecDD C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll C:\Windows\assembly\pubpol23.dat C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll C:\Windows\System32\tzres.dll C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll \Device\NamedPipe\ C:\Windows\Branding\Basebrd\basebrd.dll C:\Windows\Globalization\Sorting\sortdefault.nls C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.exe.config C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.exe C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll C:\Windows\System32\wbem\wbemdisp.tlb C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bf7e7494e75e32979c7824a07570a8a9\CustomMarshalers.ni.dll C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll C:\Windows\SysWOW64\stdole2.tlb C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\System.Management.ni.dll C:\Windows\Microsoft.NET\Framework\v2.0.50727\wminet_utils.dll C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\profiles.ini C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\d9a485330ec2708456134e4a9712a4ab\System.Security.ni.dll C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini C:\Users\Seven01\AppData\Roaming\Flock\Browser\profiles.ini C:\Users\Seven01\AppData\Roaming\Flock\Browser\signons3.txt C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini C:\Users\Seven01\AppData\Roaming\Postbox\profiles.ini C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml C:\Users\Seven01\AppData\Roaming\CoreFTP\sites.idx C:\Windows\SysWOW64\wshom.ocx C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.dll C:\Windows\sysnative\wbem\WmiPrvSE.exe C:\Windows\inf\display.PNF C:\Windows\inf\hdaudio.PNF \??\PIPE\samr C:\Windows\sysnative\wbem\repository\MAPPING1.MAP C:\Windows\sysnative\wbem\repository\MAPPING2.MAP C:\Windows\sysnative\wbem\repository\MAPPING3.MAP C:\Windows\sysnative\wbem\repository\OBJECTS.DATA C:\Windows\sysnative\wbem\repository\INDEX.BTR \??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER \??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM \??\WMIDataDevice C: C:\Windows\sysnative\tzres.dll \??\PIPE\wkssvc \??\PIPE\srvsvc C:\Users\Seven01\AppData\Local\Temp\I8j.exe.config C:\Users\Seven01\AppData\Local\Temp\I8j.exe C:\Windows\SysWOW64\shell32.dll C:\ C:\Users\Seven01\AppData\Local\Microsoft\Windows\Caches\cversions.1.db C:\Users\Seven01\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db C:\Users\desktop.ini C:\Users C:\Users\Seven01 C:\Users\Seven01\AppData C:\Users\Seven01\AppData\Roaming C:\Users\Seven01\AppData\Roaming\Microsoft\desktop.ini C:\Users\Seven01\AppData\Roaming\Microsoft C:\Users\Seven01\AppData\Roaming\Microsoft\Windows C:\Windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.pdb C:\Windows\symbols\dll\System.pdb C:\Windows\dll\System.pdb C:\Windows\System.pdb C:\Users\Seven01\AppData\Local\Temp\ConsoleApp1.pdb C:\Windows\symbols\exe\ConsoleApp1.pdb C:\Windows\exe\ConsoleApp1.pdb C:\Windows\ConsoleApp1.pdb C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.pdb C:\Windows\symbols\dll\mscorlib.pdb C:\Windows\dll\mscorlib.pdb C:\Windows\mscorlib.pdb C:\Windows\System32\it-IT\werui.dll.mui C:\Windows\System32\werui.dll C:\Windows\System32\it-IT\DUser.dll.mui C:\Windows\winsxs\x86_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_it-it_e4c79be92250cb6e\Comctl32.dll.mui C:\Windows\Fonts\staticcache.dat C:\Windows\win.ini C:\Windows\System32\uxtheme.dll.Config C:\Windows\System32\uxtheme.dll C:\Windows\System32\it-IT\erofflps.txt C:\Users\Seven01\AppData\Local\Temp\WERCE57.tmp C:\Users\Seven01\AppData\Local\Temp\WERCE57.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WERE72E.tmp C:\Users\Seven01\AppData\Local\Temp\WERE72E.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WER1CB.tmp C:\Users\Seven01\AppData\Local\Temp\WER1CB.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WER1BDB.tmp C:\Users\Seven01\AppData\Local\Temp\WER1BDB.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WER3677.tmp C:\Users\Seven01\AppData\Local\Temp\WER3677.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WER548E.tmp C:\Users\Seven01\AppData\Local\Temp\WER548E.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WER743C.tmp C:\Users\Seven01\AppData\Local\Temp\WER743C.tmp.WERInternalMetadata.xml
Write Files
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.exe \Device\NamedPipe C:\Users\Seven01\AppData\Local\Temp\dreamcdd.txt C:\Users\Seven01\AppData\Roaming\Cummins Inc\Cummins Inc.exe C:\Users\Seven01\AppData\Local\Temp\tmpG453.tmp C:\Users\Seven01\AppData\Local\Temp\I8j.exe C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat \??\PIPE\samr C:\Windows\sysnative\wbem\repository\WRITABLE.TST C:\Windows\sysnative\wbem\repository\MAPPING1.MAP C:\Windows\sysnative\wbem\repository\MAPPING2.MAP C:\Windows\sysnative\wbem\repository\MAPPING3.MAP C:\Windows\sysnative\wbem\repository\OBJECTS.DATA C:\Windows\sysnative\wbem\repository\INDEX.BTR \??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER \??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM \??\WMIDataDevice \??\PIPE\wkssvc \??\PIPE\srvsvc C:\Users\Seven01\AppData\Local\Temp\WERCE57.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0beb695e\Report.wer C:\Users\Seven01\AppData\Local\Temp\WERE72E.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_09577f28\Report.wer C:\Users\Seven01\AppData\Local\Temp\WER1CB.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0be39967\Report.wer C:\Users\Seven01\AppData\Local\Temp\WER1BDB.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_07f7b452\Report.wer C:\Users\Seven01\AppData\Local\Temp\WER3677.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0bcbceb0\Report.wer C:\Users\Seven01\AppData\Local\Temp\WER548E.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_0673ed34\Report.wer C:\Users\Seven01\AppData\Local\Temp\WER743C.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_i8j.exe_c1cbcb8b1c27e932bd40698c21b13bce6efb8176_08d40deb\Report.wer
Delete Files
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2428.21671750 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2428.21671750 C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2428.21671796 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2660.21673484 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2660.21673484 C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2660.21673484 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2908.21674953 C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2908.21674953 C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2908.21674968 C:\Users\Seven01\AppData\Roaming\Cummins Inc\Cummins Inc.exe:Zone.Identifier C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.exe C:\Users\Seven01\AppData\Local\Temp\WERCE57.tmp C:\Users\Seven01\AppData\Local\Temp\WERCE57.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WERE72E.tmp C:\Users\Seven01\AppData\Local\Temp\WERE72E.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WER1CB.tmp C:\Users\Seven01\AppData\Local\Temp\WER1CB.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WER1BDB.tmp C:\Users\Seven01\AppData\Local\Temp\WER1BDB.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WER3677.tmp C:\Users\Seven01\AppData\Local\Temp\WER3677.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WER548E.tmp C:\Users\Seven01\AppData\Local\Temp\WER548E.tmp.WERInternalMetadata.xml C:\Users\Seven01\AppData\Local\Temp\WER743C.tmp C:\Users\Seven01\AppData\Local\Temp\WER743C.tmp.WERInternalMetadata.xml
Keys
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\ HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0 HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir HKEY_CURRENT_USER\Software\Microsoft\.NETFramework HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR Policy\Standards HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Invoice_tr2018.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB HKEY_CURRENT_USER\Software\Microsoft\Fusion HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000 HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\8fc8b75\5ea6176 HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\2a2c620c\57ef26e2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Invoice_tr2018.exe HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Invoice_tr2018.exe HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|Invoice_tr2018.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\2a2c620c\4a6a1e58 HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\4ad60644\6f323003 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\235dd0a9 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\9e47f51 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun HKEY_CURRENT_USER\Software\Microsoft\Command Processor HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avanger.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Start Menu|Programs|Startup|avanger.exe HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Start Menu|Programs|Startup|avanger.exe HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Microsoft|Windows|Start Menu|Programs|Startup|avanger.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Data.SqlXml__b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\dreamcdd HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6827186d\3ab748ca HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\34c00305\10ad48e HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\34c00305\2787afab HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Cummins Inc HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run HKEY_CURRENT_USER\Software\Classes HKEY_CURRENT_USER\Software\Classes\AppID\avanger.exe HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\9D15E8E6 HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\635996b8\6e1468b8 HKEY_CURRENT_USER\Software\Classes\WinMgmts HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default) HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Scripting HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\Scripting\Default Namespace HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSclient HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain HKEY_CURRENT_USER\Software\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it HKEY_CURRENT_USER\Software\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default) HKEY_CURRENT_USER\Software\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler HKEY_CURRENT_USER\Software\Classes\TypeLib HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default) HKEY_CLASSES_ROOT\CLSID\{62E522DC-8CF3-40A8-8B2E-37D595651E40}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\410 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\10 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US HKEY_CURRENT_USER\Software\Classes\Interface\{027947E1-D731-11CE-A357-000000000001} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default) HKEY_CURRENT_USER\Software\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler HKEY_CURRENT_USER\Software\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_CURRENT_USER\Software\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_CLASSES_ROOT\CLSID\{04B83D61-21AE-11D2-8B33-00600806D9B6}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.CustomMarshalers__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\CustomMarshalers,2.0.0.0,,b03f5f7f11d50a3a,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualC__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_CLASSES_ROOT\CLSID\{D6BDAFB2-9435-491F-BB87-6AA0F0BC31A2}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.JScript__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.JScript,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration.Install__b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\avanger_RASAPI32 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\EnableFileTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\EnableConsoleTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\FileTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\ConsoleTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\MaxFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\FileDirectory HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.net clr networking\Performance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names HKEY_CURRENT_USER HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DnsCache\Parameters HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DnsClient HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly HKEY_LOCAL_MACHINE\System\Setup HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSClient HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{846EE342-7039-11DE-9D20-806E6F6E6963} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ProductId HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3042e84f\70d5371f HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3042e84f\68769f99 HKEY_CURRENT_USER\Control Panel\International HKEY_CURRENT_USER\Control Panel\International\sYearMonth HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic.resources_it-IT_b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6d5fb745\1c4dd593 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic.resources_it_b03f5f7f11d50a3a HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6d5fb745\4deb99ab HKEY_LOCAL_MACHINE\Software\Policies HKEY_CURRENT_USER\Software\Policies HKEY_CURRENT_USER\Software HKEY_LOCAL_MACHINE\Software HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\ HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\ HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\ HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409 HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionLow HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionHigh HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionLow HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionHigh HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MissingDependencies HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2 HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 HKEY_CURRENT_USER\Software\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676 HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password HKEY_CURRENT_USER\Software\Aerofox\FoxmailPreview HKEY_CURRENT_USER\Software\Aerofox\Foxmail\V3.1 HKEY_CURRENT_USER\Software\Qualcomm\Eudora\CommandLine HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions HKEY_CLASSES_ROOT\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32\Class HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\410 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\10 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32\(Default) HKEY_CURRENT_USER\Software\FTPWare\COREFTP\Sites HKEY_CURRENT_USER\Software\Paltalk HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTP Commander HKEY_LOCAL_MACHINE\SOFTWARE\Vitalwerks\DUC HKEY_CURRENT_USER\SOFTWARE\Vitalwerks\DUC HKEY_CURRENT_USER\Software\DownloadManager\Passwords HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.resources_it-IT_b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\433351e7\2db83a0b HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.resources_it_b77a5c561934e089 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\433351e7\26b4a30 HKEY_USERS\S-1-5-20_Classes HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission HKEY_LOCAL_MACHINE\Software\Microsoft\OLE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Elevation HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\# HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\# HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\# HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000003 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000003\00000000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000003\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000003\00000000\Data HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\DeviceDesc HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000 HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Mfg HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\LogConf HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\LogConf\ForcedConfig HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Service HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000002 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000002\00000000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000002\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000002\00000000\Data HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_CAFE&SUBSYS_00000000&REV_00\3&267A616A&0&20 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_CAFE&SUBSYS_00000000&REV_00\3&267A616A&0&20\Class HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\CDROMVBOX_CD-ROM_____________________________1.0_____\5&106AF171&0&1.0.0 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\CDROMVBOX_CD-ROM_____________________________1.0_____\5&106AF171&0&1.0.0\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_7111&SUBSYS_00000000&REV_01\3&267A616A&0&09 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_7111&SUBSYS_00000000&REV_01\3&267A616A&0&09\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2617AEAE&0&0 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2617AEAE&0&0\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&0 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&0\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&1 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&1\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_2829&SUBSYS_00000000&REV_02\3&267A616A&0&68 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_2829&SUBSYS_00000000&REV_02\3&267A616A&0&68\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994ad04-93ef-11d0-a3cc-00a0c9223196} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInTopo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInWave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneWave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInTopo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInWave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerTopo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerWave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ClassGUID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{C2D43895-0262-4873-A789-C2F96D24B693} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{684BB8B6-2793-49A5-8012-E0A941B4B4DF} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{5F6D61D9-D207-449A-BD48-652A5D1F25BE} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{29898C9D-B0A4-4FEF-BDB6-57A562022CEE} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{E43D242B-9EAB-4626-A952-46649FBB939A} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#NDISWANBH HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#NDISWANIP HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#NDISWANIPV6 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{8E301A52-AFFA-4F49-B9CA-C79096A1A056} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{DF4A9D2C-8742-4EB1-8703-D395C4183F33} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{71F897D7-EB7C-4D8D-89DB-AC80D9DD2270} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{eeab7790-c514-11d1-b42b-00805fc1270e}&asyncmac HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Properties\{83da6326-97a6-4088-9453-a1923f573b29} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\00000006 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Pnp\{71d10298-bdb9-4dcd-a87a-eec6137ab254}\0 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{EEAB7790-C514-11D1-B42B-00805FC1270E}\ASYNCMAC HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ClassGUID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ContainerID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Legacy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\# HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CompatibleIDs HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\#\Control HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\#\Control\Linked HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceHandlers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PerHwIdStorage\LastUpdateTime HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CustomPropertyCacheDate HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PerHwIdStorage\SW#{eeab7790-c514-11d1-b42b-00805fc1270e} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CustomPropertyHwIdKey HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{78032B7E-4968-42D3-9F37-287EA86C0AAA} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceGroups HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceGroup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Properties\{afd97640-86a3-4210-b67c-289c41aabe55} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\SYSTEM\0000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\SYSTEM\0000\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HTREE\ROOT\0 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HTREE\ROOT\0\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{78032B7E-4968-42D3-9F37-287EA86C0AAA}\Control HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{78032B7E-4968-42D3-9F37-287EA86C0AAA}\Control\Linked HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\BTH HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_AGILEVPNMINIPORT\0000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_AGILEVPNMINIPORT\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_AGILEVPNMINIPORT\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_L2TPMINIPORT\0000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_L2TPMINIPORT\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_L2TPMINIPORT\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANBH\0000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANBH\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANBH\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIP\0000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANIP\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANIP\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_NDISWANIPV6\0000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANIPV6\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANIPV6\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPPOEMINIPORT\0000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_PPPOEMINIPORT\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_PPPOEMINIPORT\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\FriendlyName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\DeviceDesc HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_PPTPMINIPORT\0000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_PPTPMINIPORT\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_PPTPMINIPORT\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\MS_SSTPMINIPORT\0000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_SSTPMINIPORT\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_SSTPMINIPORT\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\*ISATAP\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\*ISATAP\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\ROOT\*ISATAP\0001 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\*ISATAP\0001\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\*ISATAP\0001\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\Properties\{afd97640-86a3-4210-b67c-289c41aabe55} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#DiskVBOX_HARDDISK___________________________1.0_____#5&33d1638a&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\# HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#DiskVBOX_HARDDISK___________________________1.0_____#5&33d1638a&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#DiskVBOX_HARDDISK___________________________1.0_____#5&33d1638a&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{eb115ffc-10c8-4964-831d-6dcb02e6f23f} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eheadphonewave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control\Linked HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eheadphonetopo HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef} HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Data HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eheadphonewave HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneWave\Properties HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerRequestOverride HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Power\PowerRequestOverride HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Power\PowerRequestOverride\Driver HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\Tracing\WMI HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable HKEY_LOCAL_MACHINE\SYSTEM\Setup HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Safeboot\Option HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default) HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\WMI Writer HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax HKEY_LOCAL_MACHINE\Software\Classes HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult HKEY_LOCAL_MACHINE\system\Setup HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\ProcessIdentifier HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\ProcessIdentifier HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\ProcessIdentifier HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\ProcessIdentifier HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms) HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\ESS HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\CIMOM HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks HKEY_LOCAL_MACHINE\software\microsoft\wbem\cimom HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/subscription HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2 HKEY_LOCAL_MACHINE\Software\Microsoft\OleAut HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InProcServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default) HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\LocalServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\InProcServer32 HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\LocalServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32" HKEY_LOCAL_MACHINE\system\currentcontrolset\control\minint HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2\SCM Event Provider HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\TreatAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\CIMV2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\CIMV2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Cimom HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\AccessProviders HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\wmiprvse.exe HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler HKEY_CURRENT_USER\Control Panel\International\LocaleName HKEY_CURRENT_USER\Control Panel\International\sCountry HKEY_CURRENT_USER\Control Panel\International\sList HKEY_CURRENT_USER\Control Panel\International\sDecimal HKEY_CURRENT_USER\Control Panel\International\sThousand HKEY_CURRENT_USER\Control Panel\International\sGrouping HKEY_CURRENT_USER\Control Panel\International\sNativeDigits HKEY_CURRENT_USER\Control Panel\International\sCurrency HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep HKEY_CURRENT_USER\Control Panel\International\sMonGrouping HKEY_CURRENT_USER\Control Panel\International\sPositiveSign HKEY_CURRENT_USER\Control Panel\International\sNegativeSign HKEY_CURRENT_USER\Control Panel\International\sTimeFormat HKEY_CURRENT_USER\Control Panel\International\sShortTime HKEY_CURRENT_USER\Control Panel\International\s1159 HKEY_CURRENT_USER\Control Panel\International\s2359 HKEY_CURRENT_USER\Control Panel\International\sShortDate HKEY_CURRENT_USER\Control Panel\International\sLongDate HKEY_CURRENT_USER\Control Panel\International\iCountry HKEY_CURRENT_USER\Control Panel\International\iMeasure HKEY_CURRENT_USER\Control Panel\International\iPaperSize HKEY_CURRENT_USER\Control Panel\International\iDigits HKEY_CURRENT_USER\Control Panel\International\iLZero HKEY_CURRENT_USER\Control Panel\International\iNegNumber HKEY_CURRENT_USER\Control Panel\International\NumShape HKEY_CURRENT_USER\Control Panel\International\iCurrDigits HKEY_CURRENT_USER\Control Panel\International\iCurrency HKEY_CURRENT_USER\Control Panel\International\iNegCurr HKEY_CURRENT_USER\Control Panel\International\iCalendarType HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Component Information HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009 HKEY_PERFORMANCE_TEXT\Counter HKEY_PERFORMANCE_DATA\238 HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LsaExtensionConfig\SspiCli HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureDll HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureRoutine HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SecurityProviders HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\SspiCache HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Name HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Comment HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\RpcId HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Version HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\TokenSize HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SaslProfiles HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\Schannel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextLockCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextListCount HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sCountry HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sList HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sDecimal HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sThousand HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sGrouping HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sNativeDigits HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sCurrency HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonDecimalSep HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonThousandSep HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonGrouping HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sPositiveSign HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sNegativeSign HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sTimeFormat HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sShortTime HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\s1159 HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\s2359 HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sShortDate HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sYearMonth HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sLongDate HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCountry HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iMeasure HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iPaperSize HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iDigits HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iLZero HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iNegNumber HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\NumShape HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCurrDigits HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCurrency HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iNegCurr HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCalendarType HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iFirstDayOfWeek HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iFirstWeekOfYear HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOwner HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOrganization HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Plus! ProductId HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentType HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\InstallDate HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemPartition HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PriorityControl\Win32PrioritySeparation HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LicenseInfo\FilePrint HKEY_LOCAL_MACHINE\SYSTEM HKEY_LOCAL_MACHINE\SOFTWARE HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CoDeviceInstallers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PerHwIdStorage HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\InfPath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\InfSection HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\ HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\InstalledDisplayDrivers HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\HardwareInformation.MemorySize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\HardwareInformation.ChipType HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\HardwareInformation.DACType HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\I8j.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\63fc17e7\5b5a3ba7 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyComputer HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyComputer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesRecycleBin HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesRecycleBin HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoInternetIcon HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoInternetIcon HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\I8j.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCommonGroups HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCommonGroups HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\Attributes HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\CallForAttributes HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\RestrictedAttributes HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORDISPLAY HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideFolderVerbs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\UseDropHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORPARSING HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsParseDisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForOverlay HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\MapNetDriveVerbs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForInfoTip HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideInWebView HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideOnDesktopPerUser HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsAliasedNotifications HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsUniversalDelegate HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\NoFileFolderJunction HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\PinToNameSpaceTree HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HasNavigationEnum HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{20D04FE0-3AEA-1069-A2D8-08002B30309D} HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DontShowSuperHidden HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DontShowSuperHidden HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWebView HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWebView HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ClassicShell HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ClassicShell HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\SeparateProcess HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\SeparateProcess HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetCrawling HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetCrawling HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSimpleStartMenu HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSimpleStartMenu HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowCompColor HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\DontPrettyPath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowInfoTip HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideIcons HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MapNetDrvBtn HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\WebView HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Filter HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SeparateProcess HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\NoNetCrawling HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AutoCheckSelect HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\IconsOnly HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowTypeOverlay HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Shell\RegisteredApplications\UrlAssociations\Directory\OpenWithProgids HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\Directory HKEY_CLASSES_ROOT\Directory HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\CurVer HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\ HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\ShellEx\IconHandler HKEY_CLASSES_ROOT\Folder HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\IconHandler HKEY_CLASSES_ROOT\AllFilesystemObjects HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\IconHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\DocObject HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\DocObject HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\DocObject HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\BrowseInPlace HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\BrowseInPlace HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\BrowseInPlace HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\Clsid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\Clsid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\Clsid HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\IsShortcut HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\IsShortcut HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\IsShortcut HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\AlwaysShowExt HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\NeverShowExt HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\NeverShowExt HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\NeverShowExt HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting HKEY_CURRENT_USER\SOFTWARE\Microsoft\PCHealth\ErrorReporting HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\PCHealth\ErrorReporting\ForceQueueMode HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\PCHealth\ErrorReporting\ShowUI HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\PCHealth\ErrorReporting\DoReport HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\PCHealth\ErrorReporting\AllOrNone HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting\ExclusionList HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting\ExclusionList HKEY_CURRENT_USER\SOFTWARE\Microsoft\PCHealth\ErrorReporting\ExclusionList HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\ExclusionList HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting\InclusionList HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting\InclusionList HKEY_CURRENT_USER\SOFTWARE\Microsoft\PCHealth\ErrorReporting\InclusionList HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PCHealth\ErrorReporting\InclusionList HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default) HKEY_CLASSES_ROOT\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|I8j.exe HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|I8j.exe HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|I8j.exe HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\Debug HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MachineID HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Consent HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Consent\DefaultConsent HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontSendAdditionalData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Disabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultConsent HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultOverrideBehavior HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\CLR20r3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LoggingDisabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontShowUI HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableArchive HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ConfigureArchive HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableQueue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxQueueCount HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxArchiveCount HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceQueue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\QueuePesterInterval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ExcludedApplications HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DebugApplications HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\SendEFSFiles HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\BypassDataThrottling HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceUserModeCabCollection HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Windows Error Reporting HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\DontSendAdditionalData HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Disabled HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Consent\DefaultOverrideBehavior HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Consent\CLR20r3 HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\LoggingDisabled HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\DontShowUI HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\DisableArchive HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\ConfigureArchive HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\DisableQueue HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\MaxQueueCount HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\MaxArchiveCount HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\ForceQueue HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\QueuePesterInterval HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\ExcludedApplications HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\DebugApplications HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\SendEFSFiles HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\BypassDataThrottling HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\ForceUserModeCabCollection HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerServer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerUseSSL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerPortNumber HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerUseAuthentication HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Reliability Analysis\RAC HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Reliability Analysis\RAC\RacWerSampleTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RestartRunTime HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\RestartRunTime HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Throttling\CLR20r3 HKEY_LOCAL_MACHINE\Software\Microsoft\DirectUI HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SESSION MANAGER\SafeProcessSearchMode HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\ScrollInset HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragDelay HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragMinDist HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\ScrollDelay HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\ScrollInterval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\dw20.exe HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{3697C5FA-60DD-4B56-92D4-74A569205C16}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} HKEY_CURRENT_USER\Keyboard Layout\Toggle HKEY_CURRENT_USER\Keyboard Layout\Toggle\Language Hotkey HKEY_CURRENT_USER\Keyboard Layout\Toggle\Hotkey HKEY_CURRENT_USER\Keyboard Layout\Toggle\Layout Hotkey HKEY_CURRENT_USER\Software\Microsoft\CTF\DirectSwitchHotkeys HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\ HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\KnownClasses HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EditionID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\BuildLabEx HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDBuildNumber HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SystemInformation HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\BIOSVersion HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Windows\CSDBuildNumber HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\CEIPRole\RolesInWER HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\LastWatsonCabUploaded HKEY_LOCAL_MACHINE\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\44D72C57
Read Keys
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\dreamcdd HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Cummins Inc HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\9D15E8E6 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\Scripting\Default Namespace HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default) HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\CustomMarshalers,2.0.0.0,,b03f5f7f11d50a3a,x86 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Modules HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\SIG HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\LastModTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.JScript,8.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\EnableFileTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\FileTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\EnableConsoleTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\ConsoleTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\MaxFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\FileDirectory HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ProductId HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger HKEY_CURRENT_USER\Control Panel\International\sYearMonth HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040520160406\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016040820160409\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionLow HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionHigh HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionLow HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionHigh HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\DisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigString HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MVID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\EvalationData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\Status HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ILDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\NIDependencies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MissingDependencies HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32\Class HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000003\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000003\00000000\Data HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\DeviceDesc HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Mfg HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\LogConf\ForcedConfig HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Service HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000002\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\00000002\00000000\Data HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_CAFE&SUBSYS_00000000&REV_00\3&267A616A&0&20\Class HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\CDROMVBOX_CD-ROM_____________________________1.0_____\5&106AF171&0&1.0.0\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_7111&SUBSYS_00000000&REV_01\3&267A616A&0&09\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2617AEAE&0&0\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&0\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCIIDE\IDECHANNEL\4&2F42C713&0&1\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_2829&SUBSYS_00000000&REV_02\3&267A616A&0&68\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_80EE&DEV_BEEF&SUBSYS_00000000&REV_00\3&267A616A&0&10\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ClassGUID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#PCI#VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#*ISATAP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_AGILEVPNMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANBH#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_NDISWANIPV6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#MS_SSTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ClassGUID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ContainerID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Legacy HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\HardwareID HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CompatibleIDs HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{cac88484-7515-4c03-82e6-71a87abac361}\#\Control\Linked HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceHandlers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PerHwIdStorage\LastUpdateTime HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CustomPropertyCacheDate HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceGroups HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Device Parameters\DeviceGroup HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\SYSTEM\0000\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HTREE\ROOT\0\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#SW#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{78032B7E-4968-42D3-9F37-287EA86C0AAA}\Control\Linked HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_AGILEVPNMINIPORT\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_AGILEVPNMINIPORT\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_L2TPMINIPORT\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_L2TPMINIPORT\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANBH\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANBH\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANIP\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANIP\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANIPV6\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_NDISWANIPV6\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_PPPOEMINIPORT\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_PPPOEMINIPORT\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\FriendlyName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\PCI\VEN_8086&DEV_100E&SUBSYS_001E8086&REV_02\3&267A616A&0&18\DeviceDesc HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_PPTPMINIPORT\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_PPTPMINIPORT\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_SSTPMINIPORT\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\MS_SSTPMINIPORT\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\*ISATAP\0000\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\*ISATAP\0000\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\*ISATAP\0001\Phantom HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\*ISATAP\0001\Driver HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\IDE\DISKVBOX_HARDDISK___________________________1.0_____\5&33D1638A&0&0.0.0\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#DiskVBOX_HARDDISK___________________________1.0_____#5&33d1638a&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\DeviceInstance HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control\Linked HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ConfigFlags HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Data HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default) HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{1D11B68C-3611-45AD-A3A9-DF5BEF6A3827}\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5A4B1C7F-0474-4F5A-AD71-412EF0F51D47}\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{AB8C10DB-938A-46E7-81A7-3B33DEC13555}\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\Provider HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\Scope HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\Locale HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\User HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{F0CE0BE7-6BC7-49B5-8E71-F5FEEA56D0B1}\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32" HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\CIMV2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\CIMV2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter2 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\SecurityCenter HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\SecurityCenter HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension HKEY_CURRENT_USER\Control Panel\International\LocaleName HKEY_CURRENT_USER\Control Panel\International\sCountry HKEY_CURRENT_USER\Control Panel\International\sList HKEY_CURRENT_USER\Control Panel\International\sDecimal HKEY_CURRENT_USER\Control Panel\International\sThousand HKEY_CURRENT_USER\Control Panel\International\sGrouping HKEY_CURRENT_USER\Control Panel\International\sNativeDigits HKEY_CURRENT_USER\Control Panel\International\sCurrency HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep HKEY_CURRENT_USER\Control Panel\International\sMonGrouping HKEY_CURRENT_USER\Control Panel\International\sPositiveSign HKEY_CURRENT_USER\Control Panel\International\sNegativeSign HKEY_CURRENT_USER\Control Panel\International\sTimeFormat HKEY_CURRENT_USER\Control Panel\International\sShortTime HKEY_CURRENT_USER\Control Panel\International\s1159 HKEY_CURRENT_USER\Control Panel\International\s2359 HKEY_CURRENT_USER\Control Panel\International\sShortDate HKEY_CURRENT_USER\Control Panel\International\sLongDate HKEY_CURRENT_USER\Control Panel\International\iCountry HKEY_CURRENT_USER\Control Panel\International\iMeasure HKEY_CURRENT_USER\Control Panel\International\iPaperSize HKEY_CURRENT_USER\Control Panel\International\iDigits HKEY_CURRENT_USER\Control Panel\International\iLZero HKEY_CURRENT_USER\Control Panel\International\iNegNumber HKEY_CURRENT_USER\Control Panel\International\NumShape HKEY_CURRENT_USER\Control Panel\International\iCurrDigits HKEY_CURRENT_USER\Control Panel\International\iCurrency HKEY_CURRENT_USER\Control Panel\International\iNegCurr HKEY_CURRENT_USER\Control Panel\International\iCalendarType HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Component Information HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier HKEY_PERFORMANCE_TEXT\Counter HKEY_PERFORMANCE_DATA\238 HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureDll HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureRoutine HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SecurityProviders HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Name HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Comment HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Capabilities HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\RpcId HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Version HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Type HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\TokenSize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextLockCount HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SCHANNEL\UserContextListCount HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sCountry HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sList HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sDecimal HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sThousand HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sGrouping HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sNativeDigits HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sCurrency HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonDecimalSep HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonThousandSep HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sMonGrouping HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sPositiveSign HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sNegativeSign HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sTimeFormat HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sShortTime HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\s1159 HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\s2359 HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sShortDate HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sYearMonth HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\sLongDate HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCountry HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iMeasure HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iPaperSize HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iDigits HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iLZero HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iNegNumber HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\NumShape HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCurrDigits HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCurrency HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iNegCurr HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iCalendarType HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iFirstDayOfWeek HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\iFirstWeekOfYear HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOwner HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOrganization HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Plus! ProductId HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentType HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\InstallDate HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemPartition HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PriorityControl\Win32PrioritySeparation HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\InfPath HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\InfSection HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\InstalledDisplayDrivers HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\HardwareInformation.MemorySize HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\HardwareInformation.ChipType HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\HardwareInformation.DACType HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyComputer HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyComputer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesRecycleBin HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesRecycleBin HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoInternetIcon HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoInternetIcon HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCommonGroups HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCommonGroups HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\Attributes HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\CallForAttributes HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\RestrictedAttributes HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORDISPLAY HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideFolderVerbs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\UseDropHandler HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORPARSING HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsParseDisplayName HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForOverlay HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\MapNetDriveVerbs HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForInfoTip HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideInWebView HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideOnDesktopPerUser HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsAliasedNotifications HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsUniversalDelegate HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\NoFileFolderJunction HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\PinToNameSpaceTree HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HasNavigationEnum HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{20D04FE0-3AEA-1069-A2D8-08002B30309D} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DontShowSuperHidden HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DontShowSuperHidden HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWebView HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWebView HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ClassicShell HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\ClassicShell HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\SeparateProcess HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\SeparateProcess HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetCrawling HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetCrawling HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSimpleStartMenu HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSimpleStartMenu HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowCompColor HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\DontPrettyPath HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowInfoTip HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideIcons HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MapNetDrvBtn HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\WebView HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Filter HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SeparateProcess HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\NoNetCrawling HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AutoCheckSelect HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\IconsOnly HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowTypeOverlay HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\DocObject HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\DocObject HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\DocObject HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\BrowseInPlace HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\BrowseInPlace HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\BrowseInPlace HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\IsShortcut HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\IsShortcut HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\IsShortcut HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\AlwaysShowExt HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\NeverShowExt HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\NeverShowExt HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\NeverShowExt HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\PCHealth\ErrorReporting\ForceQueueMode HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\PCHealth\ErrorReporting\ShowUI HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\PCHealth\ErrorReporting\DoReport HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\PCHealth\ErrorReporting\AllOrNone HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\InprocServer32\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0A29FF9E-7F9C-4437-8B11-F424491E3931}\Server\(Default) HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MachineID HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Consent\DefaultConsent HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontSendAdditionalData HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Disabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultConsent HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultOverrideBehavior HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\CLR20r3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LoggingDisabled HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontShowUI HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableArchive HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ConfigureArchive HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableQueue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxQueueCount HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxArchiveCount HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceQueue HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\QueuePesterInterval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\SendEFSFiles HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\BypassDataThrottling HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceUserModeCabCollection HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\DontSendAdditionalData HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Disabled HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Consent\DefaultOverrideBehavior HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Consent\CLR20r3 HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\LoggingDisabled HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\DontShowUI HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\DisableArchive HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\ConfigureArchive HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\DisableQueue HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\MaxQueueCount HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\MaxArchiveCount HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\ForceQueue HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\QueuePesterInterval HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\SendEFSFiles HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\BypassDataThrottling HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\ForceUserModeCabCollection HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerServer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerUseSSL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerPortNumber HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerUseAuthentication HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Reliability Analysis\RAC\RacWerSampleTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\RestartRunTime HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\RestartRunTime HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SESSION MANAGER\SafeProcessSearchMode HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16 HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\ScrollInset HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragDelay HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragMinDist HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\ScrollDelay HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\ScrollInterval HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable HKEY_CURRENT_USER\Keyboard Layout\Toggle\Language Hotkey HKEY_CURRENT_USER\Keyboard Layout\Toggle\Hotkey HKEY_CURRENT_USER\Keyboard Layout\Toggle\Layout Hotkey HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductName HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EditionID HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\BuildLabEx HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDBuildNumber HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\BIOSVersion HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Windows\CSDBuildNumber HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\LastWatsonCabUploaded HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\44D72C57
Write Keys
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\dreamcdd HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Cummins Inc HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\avanger_RASAPI32 HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\EnableFileTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\EnableConsoleTracing HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\FileTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\ConsoleTracingMask HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\MaxFileSize HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\avanger_RASAPI32\FileDirectory HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun
Delete Keys
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SW\{eeab7790-c514-11d1-b42b-00805fc1270e}\asyncmac\CustomPropertyHwIdKey
Mutexes
Global\CLR_CASOFF_MUTEX Global\.net clr networking Local\_!MSFTHISTORY!_ Local\c:!users!seven01!appdata!local!microsoft!windows!temporary internet files!content.ie5! Local\c:!users!seven01!appdata!roaming!microsoft!windows!cookies! Local\c:!users!seven01!appdata!local!microsoft!windows!history!history.ie5! Local\!IETld!Mutex Local\c:!users!seven01!appdata!roaming!microsoft!windows!ietldcache! Global\6673f1a6-5aa3-11e8-8646-0800274633c1 Local\MSCTF.Asm.MutexDefault1 Global\6aa9988e-5aa3-11e8-8646-0800274633c1 Global\6eb45522-5aa3-11e8-8646-0800274633c1 Global\72d6e93a-5aa3-11e8-8646-0800274633c1 Global\7722054c-5aa3-11e8-8646-0800274633c1 Global\7b71e612-5aa3-11e8-8646-0800274633c1 Global\8019fdda-5aa3-11e8-8646-0800274633c1
Resolved APIs
advapi32.dll.RegOpenKeyExW advapi32.dll.RegQueryInfoKeyW advapi32.dll.RegEnumKeyExW advapi32.dll.RegEnumValueW advapi32.dll.RegCloseKey advapi32.dll.RegQueryValueExW kernel32.dll.FlsAlloc kernel32.dll.FlsFree kernel32.dll.FlsGetValue kernel32.dll.FlsSetValue kernel32.dll.InitializeCriticalSectionEx kernel32.dll.CreateEventExW kernel32.dll.CreateSemaphoreExW kernel32.dll.SetThreadStackGuarantee kernel32.dll.CreateThreadpoolTimer kernel32.dll.SetThreadpoolTimer kernel32.dll.WaitForThreadpoolTimerCallbacks kernel32.dll.CloseThreadpoolTimer kernel32.dll.CreateThreadpoolWait kernel32.dll.SetThreadpoolWait kernel32.dll.CloseThreadpoolWait kernel32.dll.FlushProcessWriteBuffers kernel32.dll.FreeLibraryWhenCallbackReturns kernel32.dll.GetCurrentProcessorNumber kernel32.dll.GetLogicalProcessorInformation kernel32.dll.CreateSymbolicLinkW kernel32.dll.EnumSystemLocalesEx kernel32.dll.CompareStringEx kernel32.dll.GetDateFormatEx kernel32.dll.GetLocaleInfoEx kernel32.dll.GetTimeFormatEx kernel32.dll.GetUserDefaultLocaleName kernel32.dll.IsValidLocaleName kernel32.dll.LCMapStringEx kernel32.dll.GetTickCount64 advapi32.dll.EventRegister mscoree.dll.#142 mscoreei.dll.RegisterShimImplCallback mscoreei.dll.OnShimDllMainCalled mscoreei.dll._CorExeMain shlwapi.dll.UrlIsW version.dll.GetFileVersionInfoSizeW version.dll.GetFileVersionInfoW version.dll.VerQueryValueW kernel32.dll.InitializeCriticalSectionAndSpinCount kernel32.dll.IsProcessorFeaturePresent msvcrt.dll._set_error_mode msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z kernel32.dll.FindActCtxSectionStringW kernel32.dll.GetSystemWindowsDirectoryW mscoree.dll.GetProcessExecutableHeap mscoreei.dll.GetProcessExecutableHeap mscorwks.dll._CorExeMain mscorwks.dll.GetCLRFunction advapi32.dll.RegisterTraceGuidsW advapi32.dll.UnregisterTraceGuids advapi32.dll.GetTraceLoggerHandle advapi32.dll.GetTraceEnableLevel advapi32.dll.GetTraceEnableFlags advapi32.dll.TraceEvent mscoree.dll.IEE mscoreei.dll.IEE mscorwks.dll.IEE mscoree.dll.GetStartupFlags mscoreei.dll.GetStartupFlags mscoree.dll.GetHostConfigurationFile mscoreei.dll.GetHostConfigurationFile mscoreei.dll.GetCORVersion mscoree.dll.GetCORSystemDirectory mscoreei.dll.GetCORSystemDirectory_RetAddr mscoreei.dll.CreateConfigStream ntdll.dll.RtlUnwind kernel32.dll.IsWow64Process advapi32.dll.AllocateAndInitializeSid advapi32.dll.OpenProcessToken advapi32.dll.GetTokenInformation advapi32.dll.InitializeAcl advapi32.dll.AddAccessAllowedAce advapi32.dll.FreeSid kernel32.dll.AddVectoredContinueHandler kernel32.dll.RemoveVectoredContinueHandler advapi32.dll.ConvertSidToStringSidW shell32.dll.SHGetFolderPathW kernel32.dll.GetWriteWatch kernel32.dll.ResetWriteWatch kernel32.dll.CreateMemoryResourceNotification kernel32.dll.QueryMemoryResourceNotification kernel32.dll.QueryActCtxW kernel32.dll.GetVersionExW kernel32.dll.GetFullPathNameW ole32.dll.CoInitializeEx cryptbase.dll.SystemFunction036 ole32.dll.CoGetContextToken advapi32.dll.CryptAcquireContextA advapi32.dll.CryptReleaseContext advapi32.dll.CryptCreateHash advapi32.dll.CryptDestroyHash advapi32.dll.CryptHashData advapi32.dll.CryptGetHashParam advapi32.dll.CryptImportKey advapi32.dll.CryptExportKey advapi32.dll.CryptGenKey advapi32.dll.CryptGetKeyParam advapi32.dll.CryptDestroyKey advapi32.dll.CryptVerifySignatureA advapi32.dll.CryptSignHashA advapi32.dll.CryptGetProvParam advapi32.dll.CryptGetUserKey advapi32.dll.CryptEnumProvidersA mscoree.dll.GetMetaDataInternalInterface mscoreei.dll.GetMetaDataInternalInterface mscorwks.dll.GetMetaDataInternalInterface mscorjit.dll.getJit kernel32.dll.GetUserDefaultUILanguage kernel32.dll.SetErrorMode kernel32.dll.GetFileAttributesExW mscoreei.dll.LoadLibraryShim culture.dll.ConvertLangIdToCultureName kernel32.dll.lstrlen kernel32.dll.lstrlenW mscoree.dll.ND_RI4 mscoreei.dll.ND_RI4 bcrypt.dll.BCryptGetFipsAlgorithmMode kernel32.dll.GlobalMemoryStatusEx kernel32.dll.VirtualProtect kernel32.dll.GetEnvironmentVariableW kernel32.dll.SwitchToThread kernel32.dll.CloseHandle kernel32.dll.GetCurrentProcessId advapi32.dll.LookupPrivilegeValueW kernel32.dll.GetCurrentProcess advapi32.dll.AdjustTokenPrivileges kernel32.dll.OpenProcess psapi.dll.EnumProcessModules psapi.dll.GetModuleInformation psapi.dll.GetModuleBaseNameW psapi.dll.GetModuleFileNameExW kernel32.dll.GetProcAddress kernel32.dll.DebugActiveProcess kernel32.dll.WaitForDebugEvent kernel32.dll.ContinueDebugEvent kernel32.dll.DeleteFileA advapi32.dll.SetKernelObjectSecurity advapi32.dll.GetKernelObjectSecurity ntdll.dll.NtSetInformationProcess ntdll.dll.NtProtectVirtualMemory kernel32.dll.GetModuleFileNameW shfolder.dll.SHGetFolderPathW kernel32.dll.CopyFileW kernel32.dll.LocalFree kernel32.dll.CreatePipe kernel32.dll.DuplicateHandle kernel32.dll.GetStdHandle kernel32.dll.GetCurrentDirectoryW kernel32.dll.CreateProcessW kernel32.dll.GetFileType kernel32.dll.GetConsoleCP kernel32.dll.GetACP kernel32.dll.UnmapViewOfFile kernel32.dll.GetConsoleOutputCP kernel32.dll.WriteFile ole32.dll.CoUninitialize kernel32.dll.CreateActCtxW kernel32.dll.AddRefActCtx kernel32.dll.ReleaseActCtx kernel32.dll.ActivateActCtx kernel32.dll.DeactivateActCtx kernel32.dll.GetCurrentActCtx advapi32.dll.EventUnregister kernel32.dll.SetThreadUILanguage kernel32.dll.SortGetHandle kernel32.dll.SortCloseHandle kernel32.dll.CopyFileExW kernel32.dll.IsDebuggerPresent kernel32.dll.SetConsoleInputExeNameW ntdll.dll.NtQueryInformationProcess kernel32.dll.GetTempPathW kernel32.dll.CreateFileW kernel32.dll.GetFileSize kernel32.dll.ReadFile kernel32.dll.VirtualAllocEx kernel32.dll.GetThreadContext kernel32.dll.Wow64GetThreadContext ntdll.dll.NtUnmapViewOfSection kernel32.dll.ResumeThread kernel32.dll.SetThreadContext kernel32.dll.Wow64SetThreadContext kernel32.dll.WriteProcessMemory kernel32.dll.ReadProcessMemory kernel32.dll.TerminateProcess uxtheme.dll.ThemeInitApiHook user32.dll.IsProcessDPIAware ole32.dll.CoCreateGuid kernel32.dll.LoadLibraryA kernel32.dll.CreateDirectoryW kernel32.dll.SetFileAttributesW advapi32.dll.RegSetValueExW kernel32.dll.CreateProcessA ole32.dll.CoWaitForMultipleHandles sechost.dll.LookupAccountNameLocalW advapi32.dll.LookupAccountSidW sechost.dll.LookupAccountSidLocalW cryptsp.dll.CryptAcquireContextW cryptsp.dll.CryptGenRandom ole32.dll.NdrOleInitializeExtension ole32.dll.CoGetClassObject ole32.dll.CoGetMarshalSizeMax ole32.dll.CoMarshalInterface ole32.dll.CoUnmarshalInterface ole32.dll.StringFromIID ole32.dll.CoGetPSClsid ole32.dll.CoTaskMemAlloc ole32.dll.CoTaskMemFree ole32.dll.CoCreateInstance ole32.dll.CoReleaseMarshalData ole32.dll.DcomChannelSetHResult rpcrtremote.dll.I_RpcExtInitializeExtensionPoint cryptsp.dll.CryptReleaseContext cryptsp.dll.CryptCreateHash cryptsp.dll.CryptDestroyHash cryptsp.dll.CryptHashData cryptsp.dll.CryptGetHashParam ole32.dll.CreateBindCtx ole32.dll.CoGetObjectContext ole32.dll.MkParseDisplayName oleaut32.dll.#2 oleaut32.dll.#6 kernel32.dll.GetThreadPreferredUILanguages kernel32.dll.SetThreadPreferredUILanguages kernel32.dll.LocaleNameToLCID kernel32.dll.LCIDToLocaleName kernel32.dll.GetSystemDefaultLocaleName ole32.dll.BindMoniker sxs.dll.SxsOleAut32RedirectTypeLibrary advapi32.dll.RegOpenKeyW advapi32.dll.RegEnumKeyW advapi32.dll.RegQueryValueW sxs.dll.SxsOleAut32MapConfiguredClsidToReferenceClsid sxs.dll.SxsLookupClrGuid oleaut32.dll.#9 oleaut32.dll.#4 oleaut32.dll.#283 oleaut32.dll.#284 mscoreei.dll._CorDllMain mscoree.dll.GetTokenForVTableEntry mscoree.dll.SetTargetForVTableEntry mscoree.dll.GetTargetForVTableEntry mscoreei.dll.GetTokenForVTableEntry mscoreei.dll.SetTargetForVTableEntry mscoreei.dll.GetTargetForVTableEntry kernel32.dll.GetLastError kernel32.dll.LocalAlloc oleaut32.dll.VariantInit oleaut32.dll.VariantClear oleaut32.dll.#7 kernel32.dll.CreateEventW kernel32.dll.SetEvent ole32.dll.IIDFromString wminet_utils.dll.ResetSecurity wminet_utils.dll.SetSecurity wminet_utils.dll.BlessIWbemServices wminet_utils.dll.BlessIWbemServicesObject wminet_utils.dll.GetPropertyHandle wminet_utils.dll.WritePropertyValue wminet_utils.dll.Clone wminet_utils.dll.VerifyClientKey wminet_utils.dll.GetQualifierSet wminet_utils.dll.Get wminet_utils.dll.Put wminet_utils.dll.Delete wminet_utils.dll.GetNames wminet_utils.dll.BeginEnumeration wminet_utils.dll.Next wminet_utils.dll.EndEnumeration wminet_utils.dll.GetPropertyQualifierSet wminet_utils.dll.GetObjectText wminet_utils.dll.SpawnDerivedClass wminet_utils.dll.SpawnInstance wminet_utils.dll.CompareTo wminet_utils.dll.GetPropertyOrigin wminet_utils.dll.InheritsFrom wminet_utils.dll.GetMethod wminet_utils.dll.PutMethod wminet_utils.dll.DeleteMethod wminet_utils.dll.BeginMethodEnumeration wminet_utils.dll.NextMethod wminet_utils.dll.EndMethodEnumeration wminet_utils.dll.GetMethodQualifierSet wminet_utils.dll.GetMethodOrigin wminet_utils.dll.QualifierSet_Get wminet_utils.dll.QualifierSet_Put wminet_utils.dll.QualifierSet_Delete wminet_utils.dll.QualifierSet_GetNames wminet_utils.dll.QualifierSet_BeginEnumeration wminet_utils.dll.QualifierSet_Next wminet_utils.dll.QualifierSet_EndEnumeration wminet_utils.dll.GetCurrentApartmentType wminet_utils.dll.GetDemultiplexedStub wminet_utils.dll.CreateInstanceEnumWmi wminet_utils.dll.CreateClassEnumWmi wminet_utils.dll.ExecQueryWmi wminet_utils.dll.ExecNotificationQueryWmi wminet_utils.dll.PutInstanceWmi wminet_utils.dll.PutClassWmi wminet_utils.dll.CloneEnumWbemClassObject wminet_utils.dll.ConnectServerWmi oleaut32.dll.#500 oleaut32.dll.SysStringLen kernel32.dll.RtlZeroMemory kernel32.dll.RegOpenKeyExW advapi32.dll.GetUserNameW kernel32.dll.GetComputerNameW mscoree.dll.ND_RI2 mscoreei.dll.ND_RI2 rasapi32.dll.RasEnumConnectionsW rtutils.dll.TraceRegisterExA rtutils.dll.TracePrintfExA sechost.dll.OpenSCManagerW sechost.dll.OpenServiceW sechost.dll.QueryServiceStatus sechost.dll.CloseServiceHandle ws2_32.dll.WSAStartup ws2_32.dll.WSASocketW ws2_32.dll.setsockopt ws2_32.dll.WSAEventSelect ws2_32.dll.ioctlsocket ws2_32.dll.closesocket advapi32.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW kernel32.dll.CreateFileMappingW kernel32.dll.MapViewOfFile kernel32.dll.VirtualQuery kernel32.dll.ReleaseMutex advapi32.dll.CreateWellKnownSid kernel32.dll.CreateMutexW kernel32.dll.WaitForSingleObject kernel32.dll.OpenMutexW kernel32.dll.GetProcessTimes ws2_32.dll.WSAIoctl kernel32.dll.FormatMessageW rasapi32.dll.RasConnectionNotificationW advapi32.dll.RegOpenCurrentUser advapi32.dll.RegNotifyChangeKeyValue sechost.dll.NotifyServiceStatusChangeA winhttp.dll.WinHttpGetIEProxyConfigForCurrentUser kernel32.dll.ResetEvent iphlpapi.dll.GetNetworkParams dnsapi.dll.DnsQueryConfig iphlpapi.dll.GetAdaptersAddresses iphlpapi.dll.GetIpInterfaceEntry iphlpapi.dll.GetBestInterfaceEx ws2_32.dll.inet_addr ws2_32.dll.getaddrinfo ws2_32.dll.freeaddrinfo ws2_32.dll.WSAConnect ws2_32.dll.send ws2_32.dll.recv ws2_32.dll.shutdown kernel32.dll.GetModuleHandleW user32.dll.DefWindowProcW gdi32.dll.GetStockObject user32.dll.RegisterClassW user32.dll.CreateWindowExW user32.dll.SetWindowLongW user32.dll.GetWindowLongW kernel32.dll.GetCurrentThread kernel32.dll.GetCurrentThreadId user32.dll.CallWindowProcW user32.dll.RegisterWindowMessageW dwmapi.dll.DwmIsCompositionEnabled user32.dll.SetWindowsHookExW ntdll.dll.NtQuerySystemInformation kernel32.dll.DeleteFileW kernel32.dll.GetModuleFileNameA kernel32.dll.MoveFileExW user32.dll.SetClipboardViewer ole32.dll.OleInitialize ole32.dll.OleGetClipboard kernel32.dll.GlobalLock kernel32.dll.GlobalUnlock kernel32.dll.GlobalFree user32.dll.SendMessageW kernel32.dll.GetStartupInfoW kernel32.dll.CreateIoCompletionPort kernel32.dll.PostQueuedCompletionStatus ntdll.dll.NtQueryInformationThread ntdll.dll.NtGetCurrentProcessorNumber user32.dll.GetSystemMetrics user32.dll.GetClientRect user32.dll.GetWindowRect user32.dll.GetParent ole32.dll.CoRegisterMessageFilter user32.dll.PeekMessageW user32.dll.IsWindowUnicode user32.dll.GetMessageW user32.dll.TranslateMessage user32.dll.DispatchMessageW kernel32.dll.RtlMoveMemory user32.dll.WaitMessage shell32.dll.ShellExecuteEx shell32.dll.ShellExecuteExW kernel32.dll.FindFirstFileW kernel32.dll.FindClose kernel32.dll.GetExitCodeProcess user32.dll.WaitForInputIdle kernel32.dll.GetSystemTimeAsFileTime user32.dll.GetLastInputInfo setupapi.dll.CM_Get_Device_Interface_List_Size_ExW mlang.dll.#112 wininet.dll.FindFirstUrlCacheEntryA setupapi.dll.CM_Get_Device_Interface_List_ExW kernel32.dll.SetFileInformationByHandle urlmon.dll.CreateUri wininet.dll.FindNextUrlCacheEntryA advapi32.dll.AddMandatoryAce urlmon.dll.CreateIUriBuilder urlmon.dll.IntlPercentEncodeNormalize wininet.dll.FindCloseUrlCache ole32.dll.CoRevokeInitializeSpy comctl32.dll.#388 cryptsp.dll.CryptAcquireContextA ole32.dll.CLSIDFromProgIDEx kernel32.dll.GetVolumeInformationA kernel32.dll.CreateSemaphoreA vssapi.dll.CreateWriter advapi32.dll.LookupAccountNameW samcli.dll.NetLocalGroupGetMembers samlib.dll.SamConnect rpcrt4.dll.NdrClientCall3 rpcrt4.dll.RpcStringBindingComposeW rpcrt4.dll.RpcBindingFromStringBindingW rpcrt4.dll.RpcStringFreeW rpcrt4.dll.RpcBindingFree samlib.dll.SamOpenDomain samlib.dll.SamLookupNamesInDomain samlib.dll.SamOpenAlias samlib.dll.SamFreeMemory samlib.dll.SamCloseHandle samlib.dll.SamGetMembersInAlias netutils.dll.NetApiBufferFree ole32.dll.StringFromCLSID propsys.dll.VariantToPropVariant wbemcore.dll.Reinitialize wbemsvc.dll.DllGetClassObject wbemsvc.dll.DllCanUnloadNow authz.dll.AuthzInitializeContextFromToken authz.dll.AuthzInitializeObjectAccessAuditEvent2 authz.dll.AuthzAccessCheck authz.dll.AuthzFreeAuditEvent authz.dll.AuthzFreeContext authz.dll.AuthzInitializeResourceManager authz.dll.AuthzFreeResourceManager rpcrt4.dll.RpcBindingCreateW rpcrt4.dll.RpcBindingBind rpcrt4.dll.I_RpcMapWin32Status advapi32.dll.EventWrite kernel32.dll.RegCloseKey kernel32.dll.RegSetValueExW kernel32.dll.RegQueryValueExW wmisvc.dll.IsImproperShutdownDetected wevtapi.dll.EvtRender wevtapi.dll.EvtNext wevtapi.dll.EvtClose wevtapi.dll.EvtQuery wevtapi.dll.EvtCreateRenderContext rpcrt4.dll.RpcBindingSetAuthInfoExW rpcrt4.dll.RpcBindingSetOption ole32.dll.CoCreateFreeThreadedMarshaler ole32.dll.CreateStreamOnHGlobal advapi32.dll.RegCreateKeyExW kernelbase.dll.InitializeAcl kernelbase.dll.AddAce sechost.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW kernel32.dll.IsThreadAFiber kernel32.dll.OpenProcessToken kernelbase.dll.GetTokenInformation kernelbase.dll.DuplicateTokenEx kernelbase.dll.AdjustTokenPrivileges kernelbase.dll.AllocateAndInitializeSid kernelbase.dll.CheckTokenMembership kernel32.dll.SetThreadToken oleaut32.dll.#285 oleaut32.dll.#12 oleaut32.dll.#286 ole32.dll.CLSIDFromString oleaut32.dll.#17 oleaut32.dll.#20 oleaut32.dll.#19 oleaut32.dll.#25 ole32.dll.CoRevertToSelf advapi32.dll.LogonUserExExW sspicli.dll.LogonUserExExW authz.dll.AuthzInitializeContextFromSid ole32.dll.CoGetCallContext ole32.dll.CoImpersonateClient advapi32.dll.OpenThreadToken oleaut32.dll.#8 ole32.dll.CoSwitchCallContext oleaut32.dll.#287 oleaut32.dll.#288 oleaut32.dll.#289 ntmarta.dll.GetMartaExtensionInterface fastprox.dll.DllGetClassObject fastprox.dll.DllCanUnloadNow oleaut32.dll.#290 wmi.dll.WmiQueryAllDataW wmi.dll.WmiQuerySingleInstanceW wmi.dll.WmiSetSingleItemW wmi.dll.WmiSetSingleInstanceW wmi.dll.WmiExecuteMethodW wmi.dll.WmiNotificationRegistrationW wmi.dll.WmiMofEnumerateResourcesW wmi.dll.WmiFileHandleToInstanceNameW wmi.dll.WmiDevInstToInstanceNameW wmi.dll.WmiQueryGuidInformation wmi.dll.WmiOpenBlock wmi.dll.WmiCloseBlock wmi.dll.WmiFreeBuffer wmi.dll.WmiEnumerateGuids winbrand.dll.BrandingLoadString security.dll.InitSecurityInterfaceW cryptsp.dll.SystemFunction035 schannel.dll.SpUserModeInitialize ntdll.dll.RtlInitUnicodeString ntdll.dll.RtlFreeUnicodeString ntdll.dll.NtSetSystemEnvironmentValue ntdll.dll.NtQuerySystemEnvironmentValue ntdll.dll.NtCreateFile ntdll.dll.NtQueryDirectoryObject ntdll.dll.NtQueryObject ntdll.dll.NtOpenDirectoryObject ntdll.dll.NtQueryInformationToken ntdll.dll.NtOpenFile ntdll.dll.NtClose ntdll.dll.NtFsControlFile ntdll.dll.NtQueryVolumeInformationFile netapi32.dll.NetGroupEnum netapi32.dll.NetGroupGetInfo netapi32.dll.NetGroupSetInfo netapi32.dll.NetLocalGroupGetInfo netapi32.dll.NetLocalGroupSetInfo netapi32.dll.NetGroupGetUsers netapi32.dll.NetLocalGroupGetMembers netapi32.dll.NetLocalGroupEnum netapi32.dll.NetShareEnum netapi32.dll.NetShareGetInfo netapi32.dll.NetShareAdd netapi32.dll.NetShareEnumSticky netapi32.dll.NetShareSetInfo netapi32.dll.NetShareDel netapi32.dll.NetShareDelSticky netapi32.dll.NetShareCheck netapi32.dll.NetUserEnum netapi32.dll.NetUserGetInfo netapi32.dll.NetUserSetInfo netapi32.dll.NetApiBufferFree netapi32.dll.NetQueryDisplayInformation netapi32.dll.NetServerSetInfo netapi32.dll.NetServerGetInfo netapi32.dll.NetGetDCName netapi32.dll.NetWkstaGetInfo netapi32.dll.NetGetAnyDCName netapi32.dll.NetServerEnum netapi32.dll.NetUserModalsGet netapi32.dll.NetScheduleJobAdd netapi32.dll.NetScheduleJobDel netapi32.dll.NetScheduleJobEnum netapi32.dll.NetScheduleJobGetInfo netapi32.dll.NetUseGetInfo netapi32.dll.NetEnumerateTrustedDomains netapi32.dll.DsGetDcNameW netapi32.dll.DsRoleGetPrimaryDomainInformation netapi32.dll.DsRoleFreeMemory netapi32.dll.NetRenameMachineInDomain netapi32.dll.NetJoinDomain netapi32.dll.NetUnjoinDomain wkscli.dll.NetWkstaGetInfo cscapi.dll.CscNetApiGetInterface kernel32.dll.GetDiskFreeSpaceExW kernel32.dll.GetVolumePathNameW kernel32.dll.CreateToolhelp32Snapshot kernel32.dll.Thread32First kernel32.dll.Thread32Next kernel32.dll.Process32First kernel32.dll.Process32Next kernel32.dll.Module32First kernel32.dll.Module32Next kernel32.dll.Heap32ListFirst kernel32.dll.GetSystemDefaultUILanguage oleaut32.dll.#15 oleaut32.dll.#26 devobj.dll.DevObjCreateDeviceInfoList devobj.dll.DevObjGetClassDevs devobj.dll.DevObjEnumDeviceInfo devobj.dll.DevObjDestroyDeviceInfoList setupapi.dll.CM_Open_DevNode_Key_Ex devobj.dll.DevObjGetDeviceProperty cfgmgr32.dll.CM_Connect_MachineA cfgmgr32.dll.CM_Disconnect_Machine cfgmgr32.dll.CM_Locate_DevNodeW cfgmgr32.dll.CM_Get_DevNode_Registry_PropertyW cfgmgr32.dll.CM_Get_Child cfgmgr32.dll.CM_Get_Sibling cfgmgr32.dll.CM_Get_DevNode_Status cfgmgr32.dll.CM_Get_First_Log_Conf cfgmgr32.dll.CM_Get_Next_Res_Des cfgmgr32.dll.CM_Get_Res_Des_Data cfgmgr32.dll.CM_Get_Res_Des_Data_Size cfgmgr32.dll.CM_Free_Log_Conf_Handle cfgmgr32.dll.CM_Free_Res_Des_Handle cfgmgr32.dll.CM_Get_Device_IDA cfgmgr32.dll.CM_Get_Device_ID_Size cfgmgr32.dll.CM_Get_Parent user32.dll.MonitorFromWindow user32.dll.MonitorFromRect user32.dll.MonitorFromPoint user32.dll.EnumDisplayMonitors user32.dll.EnumDisplayDevicesW user32.dll.GetMonitorInfoW dxgi.dll.DXGIReportAdapterConfiguration setupapi.dll.SetupDiGetClassDevsW setupapi.dll.SetupDiEnumDeviceInterfaces setupapi.dll.SetupDiGetDeviceInterfaceDetailW setupapi.dll.SetupDiDestroyDeviceInfoList gdi32.dll.D3DKMTOpenAdapterFromDeviceName gdi32.dll.D3DKMTQueryAdapterInfo gdi32.dll.D3DKMTGetDisplayModeList gdi32.dll.D3DKMTCloseAdapter wintrust.dll.WinVerifyTrust propsys.dll.PSCreateMemoryPropertyStore propsys.dll.PSPropertyBag_WriteDWORD ole32.dll.CoGetApartmentType ole32.dll.CoRegisterInitializeSpy comctl32.dll.#236 ole32.dll.CoGetMalloc propsys.dll.PSPropertyBag_ReadDWORD comctl32.dll.#320 comctl32.dll.#324 comctl32.dll.#323 comctl32.dll.#328 comctl32.dll.#334 advapi32.dll.InitializeSecurityDescriptor advapi32.dll.SetEntriesInAclW advapi32.dll.SetSecurityDescriptorDacl advapi32.dll.IsTextUnicode comctl32.dll.#332 comctl32.dll.#338 comctl32.dll.#339 shell32.dll.#102 comctl32.dll.#386 ole32.dll.OleUninitialize advapi32.dll.CheckTokenMembership mscoree.dll.DllGetClassObject mscoreei.dll.DllGetClassObject diasymreader.dll.DllGetClassObjectInternal wer.dll.WerReportCreate wer.dll.WerReportSetParameter wer.dll.WerReportAddFile wer.dll.WerReportSetUIOption wer.dll.WerReportSubmit wer.dll.WerReportAddDump wer.dll.WerReportCloseHandle user32.dll.LoadStringW advapi32.dll.RegGetValueW user32.dll.GetProcessWindowStation user32.dll.GetThreadDesktop user32.dll.GetUserObjectInformationW sensapi.dll.IsNetworkAlive rpcrt4.dll.NdrClientCall2 user32.dll.CharUpperW werui.dll.WerUICreate werui.dll.WerUIStart ole32.dll.CoInitialize dui70.dll.InitProcessPriv comctl32.dll.LoadIconWithScaleDown ntdll.dll.RtlRunEncodeUnicodeString ntdll.dll.RtlRunDecodeUnicodeString dui70.dll.InitThread duser.dll.InitGadgets user32.dll.RegisterMessagePumpHook dui70.dll.?GetClassInfoPtr@CCBase@DirectUI@@SGPAUIClassInfo@2@XZ dui70.dll.?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ dui70.dll.??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z dui70.dll.?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z dui70.dll.??0ClassInfoBase@DirectUI@@QAE@XZ dui70.dll.?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z dui70.dll.?Register@ClassInfoBase@DirectUI@@QAEJXZ dui70.dll.?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ dui70.dll.?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ dui70.dll.?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ dui70.dll.??1CritSecLock@DirectUI@@QAE@XZ dui70.dll.??0CCBase@DirectUI@@QAE@KPBG@Z dui70.dll.?Initialize@CCBase@DirectUI@@QAEJIPAVElement@2@PAK@Z duser.dll.CreateGadget duser.dll.SetGadgetMessageFilter duser.dll.SetGadgetStyle dui70.dll.?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z dui70.dll.?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z dui70.dll.?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z dui70.dll.?DirectionProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ dui70.dll.?OnPropertyChanged@CCBase@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z dui70.dll.?SetFontSize@Element@DirectUI@@QAEJH@Z dui70.dll.?SetWidth@Element@DirectUI@@QAEJH@Z dui70.dll.?SetHeight@Element@DirectUI@@QAEJH@Z dui70.dll.?EndDefer@Element@DirectUI@@QAEXK@Z dui70.dll.?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z duser.dll.InvalidateGadget dui70.dll.CreateDUIWrapper dui70.dll.?SetNotifyHandler@CCBase@DirectUI@@QAEXP6GHIIJPAJPAX@Z1@Z shell32.dll.ExtractIconExW comctl32.dll.TaskDialogIndirect uxtheme.dll.IsThemeActive duser.dll.SetGadgetRootInfo uxtheme.dll.IsAppThemed uxtheme.dll.GetThemeAppProperties xmllite.dll.CreateXmlReader xmllite.dll.CreateXmlReaderInputWithEncodingName uxtheme.dll.OpenThemeData uxtheme.dll.GetThemeMargins uxtheme.dll.GetThemeFont uxtheme.dll.GetThemeColor uxtheme.dll.GetThemeMetric duser.dll.SetGadgetParent duser.dll.GetDUserModule duser.dll.FindStdColor duser.dll.AttachWndProcW kernel32.dll.InterlockedPopEntrySList kernel32.dll.InterlockedPushEntrySList kernel32.dll.InterlockedCompareExchange comctl32.dll.RegisterClassNameW duser.dll.GetGadgetRect duser.dll.GetGadgetRgn duser.dll.GetGadgetTicket gdi32.dll.GetLayout gdi32.dll.GdiRealizationInfo gdi32.dll.FontIsLinked gdi32.dll.GetTextFaceAliasW gdi32.dll.GetFontAssocStatus advapi32.dll.RegQueryValueExA gdi32.dll.GdiIsMetaPrintDC dui70.dll.?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ dui70.dll.?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z dui70.dll.?OnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z dui70.dll.?CreateAccNameLabel@HWNDHost@DirectUI@@IAEPAUHWND__@@PAU3@@Z uxtheme.dll.EnableThemeDialogTexture dui70.dll.?OnMessage@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z dui70.dll.?CreateHWND@CCBase@DirectUI@@UAEPAUHWND__@@PAU3@@Z comctl32.dll.HIMAGELIST_QueryInterface comctl32.dll.DrawShadowText comctl32.dll.DrawSizeBox comctl32.dll.DrawScrollBar comctl32.dll.SizeBoxHwnd comctl32.dll.ScrollBar_MouseMove comctl32.dll.ScrollBar_Menu comctl32.dll.HandleScrollCmd comctl32.dll.DetachScrollBars comctl32.dll.AttachScrollBars comctl32.dll.CCSetScrollInfo comctl32.dll.CCGetScrollInfo comctl32.dll.CCEnableScrollBar comctl32.dll.QuerySystemGestureStatus uxtheme.dll.#49 uxtheme.dll.CloseThemeData dui70.dll.?PostCreate@CCBase@DirectUI@@MAEXPAUHWND__@@@Z dui70.dll.?IsContentProtected@Element@DirectUI@@UAE_NXZ uxtheme.dll.GetThemeBool duser.dll.GetGadgetFocus uxtheme.dll.GetThemeBackgroundContentRect uxtheme.dll.GetThemeTextMetrics uxtheme.dll.GetThemePartSize uxtheme.dll.GetThemeTextExtent uxtheme.dll.GetThemeBackgroundExtent duser.dll.SetGadgetFocus duser.dll.DUserSendEvent duser.dll.SetGadgetRect comctl32.dll.SetWindowSubclass comctl32.dll.DefSubclassProc dui70.dll.?GetHWND@HWNDHost@DirectUI@@UAEPAUHWND__@@XZ uxtheme.dll.#47 uxtheme.dll.BufferedPaintInit uxtheme.dll.BeginBufferedPaint uxtheme.dll.BufferedPaintRenderAnimation uxtheme.dll.BeginBufferedAnimation uxtheme.dll.IsThemeBackgroundPartiallyTransparent uxtheme.dll.DrawThemeParentBackground uxtheme.dll.DrawThemeBackground uxtheme.dll.DrawThemeText uxtheme.dll.EndBufferedAnimation uxtheme.dll.GetThemeTransitionDuration uxtheme.dll.GetBufferedPaintDC uxtheme.dll.GetBufferedPaintTargetDC uxtheme.dll.EndBufferedPaint duser.dll.ForwardGadgetMessage oleaut32.dll.SysAllocString oleaut32.dll.SysFreeString uxtheme.dll.GetThemeInt duser.dll.DUserPostEvent duser.dll.DisableContainerHwnd uxtheme.dll.BufferedPaintUnInit werui.dll.WerUIUpdateUIForState duser.dll.DeleteHandle duser.dll.DetachWndProc comctl32.dll.RemoveWindowSubclass dui70.dll.?OnUnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z dui70.dll.?MessageCallback@HWNDHost@DirectUI@@UAEIPAUtagGMSG@@@Z dui70.dll.?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ dui70.dll.?OnDestroy@HWNDHost@DirectUI@@UAEXXZ uxtheme.dll.BufferedPaintStopAllAnimations dui70.dll.??1CCBase@DirectUI@@UAE@XZ uxtheme.dll.DrawThemeParentBackgroundEx uxtheme.dll.GetThemeEnumValue user32.dll.MsgWaitForMultipleObjects winhttp.dll.WinHttpOpen winhttp.dll.WinHttpSetTimeouts winhttp.dll.WinHttpSetOption winhttp.dll.WinHttpConnect winhttp.dll.WinHttpOpenRequest winhttp.dll.WinHttpSetStatusCallback winhttp.dll.WinHttpGetDefaultProxyConfiguration winhttp.dll.WinHttpGetProxyForUrl winhttp.dll.WinHttpSendRequest ws2_32.dll.GetAddrInfoW ws2_32.dll.#2 ws2_32.dll.#21 ws2_32.dll.#9 ws2_32.dll.FreeAddrInfoW ws2_32.dll.#6 ws2_32.dll.#5 ws2_32.dll.WSARecv ws2_32.dll.WSASend winhttp.dll.WinHttpReceiveResponse winhttp.dll.WinHttpQueryHeaders winhttp.dll.WinHttpReadData ws2_32.dll.#22 ws2_32.dll.#3 winhttp.dll.WinHttpCloseHandle advapi32.dll.IsValidSid advapi32.dll.GetLengthSid advapi32.dll.CopySid advapi32.dll.RegisterEventSourceW advapi32.dll.ReportEventW advapi32.dll.DeregisterEventSource werui.dll.WerUITerminate werui.dll.WerUIDelete duser.dll.DUserFlushMessages duser.dll.DUserFlushDeferredMessages dui70.dll.UnInitThread user32.dll.UnregisterMessagePumpHook dui70.dll.UnInitProcessPriv dui70.dll.?Release@ClassInfoBase@DirectUI@@UAEHXZ dui70.dll.?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ dui70.dll.??1ClassInfoBase@DirectUI@@UAE@XZ advapi32.dll.DuplicateToken duser.dll.FindGadgetFromPoint
Execute Commands
"cmd" "C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.exe" reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "dreamcdd" /d "cmd /c type "C:\Users\Seven01\AppData\Local\Temp\dreamcdd.txt" | cmd" REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRun /t REG_DWORD /d 1 /f C:\Users\Seven01\AppData\Local\Temp\I8j.exe C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avanger.exe C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Start dw20.exe -x -s 584 dw20.exe -x -s 600 dw20.exe -x -s 596 dw20.exe -x -s 588
Started Services
Nothing to display
Created Services
Nothing to display
Behavior analysis details | |||||
---|---|---|---|---|---|
Machine name | Machine label | Machine manager | Started | Ended | Duration |
Seven05b_64 | Seven05b_64 | VirtualBox | 2018-05-18 15:56:36 | 2018-05-18 15:59:28 | 172 |
1 HTTP Request(s) detected
http://checkip.dyndns.org/
- Hostname: checkip.dyndns.org
- IP Address: 216.146.43.71
- Port: 80
- Count: 1
GET / HTTP/1.1 Host: checkip.dyndns.org Connection: Keep-Alive