Xcitium Cloud Verdict

File Name: virussign.com_5c9bbe8e5b749efba278eabd96c9cbe1.exe

File Type: PE32+ executable (GUI) x86-64, for MS Windows

SHA1: 3b48a7ed61ab4ca62ecd8591bfdec38c3cf0493d

MD5: 5c9bbe8e5b749efba278eabd96c9cbe1

Download Kill Chain Report

Accessed Files

C:\Users\user\AppData\Local\Temp\api-ms-win-core-fibers-l1-1-1.DLL
C:\Windows\sysnative\api-ms-win-core-fibers-l1-1-1.DLL
C:\Windows\system\api-ms-win-core-fibers-l1-1-1.DLL
C:\Windows\api-ms-win-core-fibers-l1-1-1.DLL
C:\ProgramData\Oracle\Java\javapath\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Windows\sysnative\wbem\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Windows\sysnative\WindowsPowerShell\v1.0\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files\Microsoft Network Monitor 3\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files (x86)\Universal Extractor\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files (x86)\Universal Extractor\bin\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Python27\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Python27\Scripts\api-ms-win-core-fibers-l1-1-1.DLL
- C:\tools\sysinternals\api-ms-win-core-fibers-l1-1-1.DLL
- C:\tools\api-ms-win-core-fibers-l1-1-1.DLL
- C:\tools\IDA_Pro_v6\python\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Users\user\AppData\Local\Temp\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\sysnative\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\system\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\api-ms-win-core-localization-l1-2-1.DLL
- C:\ProgramData\Oracle\Java\javapath\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\sysnative\wbem\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\sysnative\WindowsPowerShell\v1.0\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files\Microsoft Network Monitor 3\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files (x86)\Universal Extractor\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files (x86)\Universal Extractor\bin\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\api-ms-win-core-localization-l1-2-1.DLL
- C:\Python27\api-ms-win-core-localization-l1-2-1.DLL
- C:\Python27\Scripts\api-ms-win-core-localization-l1-2-1.DLL
- C:\tools\sysinternals\api-ms-win-core-localization-l1-2-1.DLL
- C:\tools\api-ms-win-core-localization-l1-2-1.DLL
- C:\tools\IDA_Pro_v6\python\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\Globalization\Sorting\sortdefault.nls
- C:\
- C:\Users\user\AppData\Roaming\20503a4e5d0020a4.bin
- C:\Users\user\AppData\Local\bin\java.dll
- C:\Users\user\AppData\Local\jre\bin\java.dll
- C:\Windows\sysnative\alg.exe
- C:\Windows\sysnative\
- C:\Windows\Fonts\staticcache.dat
- C:\Users\user\AppData\Local\Temp\imageres.dll
- C:\Windows\sysnative\imageres.dll
- \Device\KsecDD
- C:\Windows\Temp
- C:\Users\user\AppData\Local\Temp
- C:\Windows\sysnative\Tasks\Microsoft\Windows\WDI\ResolutionHost
- C:\Windows\sysnative\LogFiles\Scm\9435f817-fed2-454e-88cd-7f78fda62c48
- C:\Windows\sysnative\LogFiles\Scm\fb3c354d-297a-4eb2-9b58-090f6361906b
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\
- C:\Windows\sysnative\config\systemprofile\AppData\Roaming\20503a4e5d0020a4.bin
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
- C:\Windows\sysnative\dllhost.exe
- C:\Windows\ehome\ehrecvr.exe
- C:\Windows\ehome\ehsched.exe
- C:\Windows\sysnative\FXSSVC.exe
- C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
- C:\Program Files (x86)\Google\Update\
- C:\Windows\sysnative\msdtc.exe
- C:\Windows\sysnative\msiexec.exe
- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\
- C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\
- C:\Windows\SysWOW64\perfhost.exe
- C:\Program Files (x86)\WinPcap\rpcapd.exe
- C:\Program Files (x86)\WinPcap\
- C:\Windows\sysnative\Locator.exe
- C:\Windows\sysnative\snmptrap.exe
- C:\Windows\sysnative\sppsvc.exe
- C:\Windows\sysnative\vds.exe
- C:\Windows\sysnative\VSSVC.exe
- C:\Windows\sysnative\wbengine.exe
- C:\Windows\sysnative\wbem\WmiApSrv.exe
- C:\Program Files\Windows Media Player\wmpnetwk.exe
- C:\Windows\sysnative\SearchIndexer.exe
- C:\*
- C:\$Recycle.Bin\*
- C:\$Recycle.Bin\S-1-5-21-2298303332-66077612-2598613238-1000\*
- C:\bevevnhfi\*
- C:\bevevnhfi\bin\*
- C:\bevevnhfi\bin\execsc.exe
- C:\bevevnhfi\bin\fQWmJDsb.exe
- C:\bevevnhfi\bin\loader.exe
- C:\bevevnhfi\bin\loader_x64.exe
- C:\bevevnhfi\bin\yFFKvqC.exe
- C:\bevevnhfi\dll\*
- C:\bevevnhfi\lib\*
- C:\bevevnhfi\lib\api\*
- C:\bevevnhfi\lib\common\*
- C:\bevevnhfi\lib\core\*
- C:\bevevnhfi\modules\*
- C:\bevevnhfi\modules\auxiliary\*
- C:\bevevnhfi\modules\packages\*
- C:\CXNLWFFzvR\*
- C:\CXNLWFFzvR\drop\*
- C:\CXNLWFFzvR\files\*
- C:\CXNLWFFzvR\logs\*
- C:\CXNLWFFzvR\memory\*
- C:\CXNLWFFzvR\shots\*
- C:\Documents and Settings\*
- C:\mctrlc\*
- C:\mctrlc\bin\*
- C:\mctrlc\bin\execsc.exe
- C:\mctrlc\bin\FoNQWrug.exe
- C:\mctrlc\bin\loader.exe
- C:\mctrlc\bin\loader_x64.exe
- C:\mctrlc\bin\qyCwoNN.exe
- C:\mctrlc\dll\*
- C:\mctrlc\lib\*
- C:\mctrlc\lib\api\*
- C:\mctrlc\lib\common\*
- C:\mctrlc\lib\core\*
- C:\mctrlc\modules\*
- C:\mctrlc\modules\auxiliary\*
- C:\mctrlc\modules\packages\*
- C:\nidguu\*
- C:\nidguu\bin\*
- C:\nidguu\bin\execsc.exe
- C:\nidguu\bin\loader.exe
- C:\nidguu\bin\loader_x64.exe
- C:\nidguu\bin\nURNEMUK.exe
- C:\nidguu\bin\rhfuTcC.exe
- C:\nidguu\dll\*
- C:\nidguu\lib\*
- C:\nidguu\lib\api\*
- C:\nidguu\lib\common\*
- C:\nidguu\lib\core\*
- C:\nidguu\modules\*
- C:\nidguu\modules\auxiliary\*
- C:\nidguu\modules\packages\*
- C:\Program Files\*
- C:\Program Files\7-Zip\*
- C:\Program Files\7-Zip\7z.exe
- C:\Program Files\7-Zip\7zFM.exe
- C:\Program Files\7-Zip\7zG.exe
- C:\Program Files\7-Zip\Lang\*
- C:\Program Files\7-Zip\Uninstall.exe
- C:\Program Files\Application Verifier\*
- C:\Program Files\Common Files\*
- C:\Program Files\Common Files\Services\*
- C:\Program Files\Common Files\SpeechEngines\*
- C:\Program Files\Common Files\System\*
- C:\Program Files\Common Files\System\ado\*
- C:\Program Files\Common Files\System\ado\en-US\*
- C:\Program Files\Common Files\System\en-US\*
- C:\Program Files\Common Files\System\msadc\*
- C:\Program Files\Common Files\System\msadc\en-US\*
- C:\Program Files\Common Files\System\Ole DB\*
- C:\Program Files\Common Files\System\Ole DB\en-US\*
- C:\Program Files\DVD Maker\*
- C:\Program Files\DVD Maker\DVDMaker.exe
- C:\Program Files\DVD Maker\en-US\*
- C:\Program Files\DVD Maker\Shared\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\Full\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\Push\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\*
- C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\*
- C:\Program Files\Internet Explorer\*
- C:\Program Files\Internet Explorer\en-US\*
- C:\Program Files\Internet Explorer\ieinstal.exe
- C:\Program Files\Internet Explorer\ielowutil.exe
- C:\Program Files\Internet Explorer\iexplore.exe
- C:\Program Files\Internet Explorer\SIGNUP\*
- C:\Program Files\MPC-HC\*
- C:\Program Files\MPC-HC\CrashReporter\*
- C:\Program Files\MPC-HC\CrashReporter\sendrpt.exe
- C:\Program Files\MPC-HC\Lang\*
- C:\Program Files\MPC-HC\LAVFilters64\*
- C:\Program Files\MPC-HC\mpc-hc64.exe
- C:\Program Files\MPC-HC\Shaders\*
- C:\Program Files\MPC-HC\unins000.exe
- C:\Program Files\MSBuild\*
- C:\Program Files\Oracle\*
- C:\Program Files\Oracle\VirtualBox Guest Additions\*
- C:\Program Files\Oracle\VirtualBox Guest Additions\uninst.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxControl.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxDrvInst.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxTray.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxWHQLFake.exe
- C:\Program Files\Reference Assemblies\*
- C:\Program Files\Sandboxie\*
- C:\Program Files\Sandboxie\32\*
- C:\Program Files\Sandboxie\32\SbieSvc.exe
- C:\Program Files\Sandboxie\License.exe
- C:\Program Files\Sandboxie\SandboxieBITS.exe
- C:\Program Files\Sandboxie\SandboxieCrypto.exe
- C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe
- C:\Program Files\Sandboxie\SandboxieRpcSs.exe
- C:\Program Files\Sandboxie\SandboxieWUAU.exe
- C:\Program Files\Sandboxie\SbieCtrl.exe
- C:\Program Files\Sandboxie\SbieIni.exe
- C:\Program Files\Sandboxie\SbieSvc.exe
- C:\Program Files\Sandboxie\Start.exe
- C:\Program Files\Uninstall Information\*
- C:\Program Files (x86)\*
- C:\Program Files (x86)\Adobe\*
- C:\Program Files (x86)\Adobe\Reader 9.0\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Esl\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\A3DUtility.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroBroker.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32Info.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroTextExtractor.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeCollabSync.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AMT\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Eula.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Javascripts\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Legal\ENU\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\LogTransport2.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prc\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\CMap\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\SaslPrep\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\ICU\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\*
- C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A95000000001}\*
- C:\Program Files (x86)\Application Verifier\*
- C:\Program Files (x86)\Common Files\*
- C:\Program Files (x86)\Common Files\Adobe\*
- C:\Program Files (x86)\Common Files\Adobe\Acrobat\*
- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\*
- C:\Program Files (x86)\Common Files\Adobe\ARM\*
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\*
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AcrobatUpdater.exe
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\ReaderUpdater.exe
- C:\Program Files (x86)\Common Files\Adobe\Help\*
- C:\Program Files (x86)\Common Files\Adobe\Help\en_US\*
- C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\*
- C:\Program Files (x86)\Common Files\Adobe\Help\en_US\Adobe Reader\9.0\*
- C:\Program Files (x86)\Common Files\Adobe\Updater6\*
- C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdaterInstallMgr.exe
- C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe
- C:\Program Files (x86)\Common Files\DESIGNER\*
- C:\Program Files (x86)\Common Files\Java\*
- C:\Program Files (x86)\Common Files\Java\Java Update\*
- C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe
- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
- C:\Program Files (x86)\Common Files\microsoft shared\*
- C:\Program Files (x86)\Common Files\microsoft shared\DAO\*
- C:\Program Files (x86)\Common Files\microsoft shared\DW\*
- C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\*
- C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\EURO\*
- C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\1028\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\1031\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\1036\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\1040\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\1041\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\1042\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\1046\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\1049\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\2052\*
- C:\Program Files (x86)\Common Files\microsoft shared\Help\3082\*
- C:\Program Files (x86)\Common Files\microsoft shared\ink\*
- C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\*
- C:\Program Files (x86)\Common Files\microsoft shared\ink\1.7\*
- C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\*
- C:\Program Files (x86)\Common Files\microsoft shared\ink\HWRCustomization\*
- C:\Program Files (x86)\Common Files\microsoft shared\ink\mip.exe
- C:\Program Files (x86)\Common Files\microsoft shared\ink\pipanel.exe
- C:\Program Files (x86)\Common Files\microsoft shared\ink\TabTip32.exe
- C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\*
- C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\PublicAssemblies\*
- C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\*
- C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US\*
- C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\msinfo32.exe
- C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\OINFOP12.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\MSORUN\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE11\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE11\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\ACECNFLT.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Cultures\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\HTML\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\HTML\XMLLINKS\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\HTML\XMLLINKS\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSE7.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOICONS.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOXMLED.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\ODSERV.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\OFFDIAG.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Access.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\ENTERPRISE\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Excel.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Groove.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\InfoPath.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\ODEPLOY.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Office.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Office64.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Office64.WW\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\OneNote.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Outlook.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\PowerPoint.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Proof.en\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Proof.es\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Proof.fr\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Proofing.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Publisher.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\SETUP.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\Word.en-us\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\VS Runtime\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\VS Runtime\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\VS Runtime\SCHEMAS\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\VS Runtime\SCHEMAS\HTML\*
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\VS Runtime\SCHEMAS\XML\*
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\*
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\*
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\*
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\*
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\armv4i\*
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\armv4i\dxcap.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\armv4i\vsgraphicsremoteengine.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\x86\*
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\x86\dxcap.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\x86\vsgraphicsremoteengine.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Portal\*
- C:\Program Files (x86)\Common Files\microsoft shared\Portal\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\PROOF\*
- C:\Program Files (x86)\Common Files\microsoft shared\PROOF\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\PROOF\1036\*
- C:\Program Files (x86)\Common Files\microsoft shared\PROOF\3082\*
- C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\*
- C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\*
- C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\LISTS\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\SmartTagInstall.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\*
- C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\Stationery\*
- C:\Program Files (x86)\Common Files\microsoft shared\TextConv\*
- C:\Program Files (x86)\Common Files\microsoft shared\TextConv\en-US\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\AFTRNOON\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\ARCTIC\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\AXIS\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\BLENDS\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\BLUECALM\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\BLUEPRNT\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\BOLDSTRI\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\BREEZE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\CANYON\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\CAPSULES\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\CASCADE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\COMPASS\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\CONCRETE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\DEEPBLUE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\ECHO\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\ECLIPSE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\EDGE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\EVRGREEN\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\EXPEDITN\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\ICE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\INDUST\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\IRIS\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\JOURNAL\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\LAYERS\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\LEVEL\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\NETWORK\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\PAPYRUS\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\PIXEL\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\PROFILE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\QUAD\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\RADIAL\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\REFINED\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\RICEPAPR\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\RIPPLE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\RMNSQUE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\SATIN\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\SKY\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\SLATE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\SONORA\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\SPRING\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\STRTEDGE\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\STUDIO\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\SUMIPNTG\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\WATER\*
- C:\Program Files (x86)\Common Files\microsoft shared\THEMES12\WATERMAR\*
- C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\*
- C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ARFR\*
- C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENES\*
- C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\*
- C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ESEN\*
- C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FRAR\*
- C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\FREN\*
- C:\Program Files (x86)\Common Files\microsoft shared\Triedit\*
- C:\Program Files (x86)\Common Files\microsoft shared\Triedit\en-US\*
- C:\Program Files (x86)\Common Files\microsoft shared\VBA\*
- C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\*
- C:\Program Files (x86)\Common Files\microsoft shared\VBA\VBA6\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\VGX\*
- C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\*
- C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\*
- C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\1033\*
- C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\*
- C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\12\*
- C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\12\BIN\*
- C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\12\BIN\1033\*
- C:\Program Files (x86)\Common Files\Services\*
- C:\Program Files (x86)\Common Files\SpeechEngines\*
- C:\Program Files (x86)\Common Files\System\*
- C:\Program Files (x86)\Common Files\System\ado\*
- C:\Program Files (x86)\Common Files\System\ado\en-US\*
- C:\Program Files (x86)\Common Files\System\en-US\*
- C:\Program Files (x86)\Common Files\System\msadc\*
- C:\Program Files (x86)\Common Files\System\msadc\en-US\*
- C:\Program Files (x86)\Common Files\System\MSMAPI\*
- C:\Program Files (x86)\Common Files\System\MSMAPI\1033\*
- C:\Program Files (x86)\Common Files\System\Ole DB\*
- C:\Program Files (x86)\Common Files\System\Ole DB\Cartridges\*
- C:\Program Files (x86)\Common Files\System\Ole DB\en-US\*
- C:\Program Files (x86)\Common Files\System\Ole DB\Resources\*
- C:\Program Files (x86)\Common Files\System\Ole DB\Resources\1033\*
- C:\Program Files (x86)\Fiddler2\*
- C:\Program Files (x86)\Google\*
- C:\Program Files (x86)\Google\Chrome\*
- C:\Program Files (x86)\Google\Chrome\Application\*
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\*
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\default_apps\*
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\delegate_execute.exe
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Extensions\*
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Installer\*
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Installer\chrmstp.exe
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Installer\setup.exe
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Locales\*
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\nacl64.exe
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\PepperFlash\*
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\VisualElements\*
- C:\Program Files (x86)\Google\Chrome\Application\Dictionaries\*
- C:\Program Files (x86)\Google\CrashReports\*
- C:\Program Files (x86)\Google\Update\*
- C:\Program Files (x86)\Google\Update\1.3.29.5\*
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdate.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateBroker.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateComRegisterShell64.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateOnDemand.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateSetup.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateWebPlugin.exe
- C:\Program Files (x86)\Google\Update\Download\*
- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\*
- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\48.0.2564.103\*
- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\48.0.2564.103\48.0.2564.103_chrome_installer.exe
- C:\Program Files (x86)\Google\Update\Install\*
- C:\Program Files (x86)\IDA\*
- C:\Program Files (x86)\IDA\cfg\*
- C:\Program Files (x86)\IDA\idag.exe
- C:\Program Files (x86)\IDA\idau.exe
- C:\Program Files (x86)\IDA\idaw.exe
- C:\Program Files (x86)\IDA\idc\*
- C:\Program Files (x86)\IDA\ids\*
- C:\Program Files (x86)\IDA\ids\epoc\*
- C:\Program Files (x86)\IDA\ids\epoc\arm\*
- C:\Program Files (x86)\IDA\ids\epoc\pc\*
- C:\Program Files (x86)\IDA\ids\epoc6\*
- C:\Program Files (x86)\IDA\ids\epoc6\arm\*
- C:\Program Files (x86)\IDA\ids\epoc9\*
- C:\Program Files (x86)\IDA\ids\epoc9\arm\*
- C:\Program Files (x86)\IDA\ids\flirt\*
- C:\Program Files (x86)\IDA\ids\geos\*
- C:\Program Files (x86)\IDA\ids\linux\*
- C:\Program Files (x86)\IDA\ids\os2\*
- C:\Program Files (x86)\IDA\ids\win\*
- C:\Program Files (x86)\IDA\ids\wince\*
- C:\Program Files (x86)\IDA\ids\wince\arm\*
- C:\Program Files (x86)\IDA\ids\wince\pc\*
- C:\Program Files (x86)\IDA\loaders\*
- C:\Program Files (x86)\IDA\plugins\*
- C:\Program Files (x86)\IDA\plugins\bochs\*
- C:\Program Files (x86)\IDA\procs\*
- C:\Program Files (x86)\IDA\python\*
- C:\Program Files (x86)\IDA\sig\*
- C:\Program Files (x86)\IDA\sig\arm\*
- C:\Program Files (x86)\IDA\sig\h8\*
- C:\Program Files (x86)\IDA\sig\i960\*
- C:\Program Files (x86)\IDA\sig\mc68\*
- C:\Program Files (x86)\IDA\til\*
- C:\Program Files (x86)\IDA\til\arm\*
- C:\Program Files (x86)\IDA\til\i960\*
- C:\Program Files (x86)\IDA\til\pc\*
- C:\Program Files (x86)\IDA\unins000.exe
- C:\Program Files (x86)\IDA\win32_remote.exe
- C:\Program Files (x86)\IDA\wingraph32.exe
- C:\Program Files (x86)\Internet Explorer\*
- C:\Program Files (x86)\Internet Explorer\en-US\*
- C:\Program Files (x86)\Internet Explorer\ExtExport.exe
- C:\Program Files (x86)\Internet Explorer\ieinstal.exe
- C:\Program Files (x86)\Internet Explorer\ielowutil.exe
- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- C:\Program Files (x86)\Internet Explorer\SIGNUP\*
- C:\Program Files (x86)\Java\*
- C:\Program Files (x86)\Java\jre1.8.0_91\*
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\*
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\client\*
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\*
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\jabswitch.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\java-rmi.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\java.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\javacpl.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\javaw.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\javaws.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\jjs.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2launcher.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\keytool.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\kinit.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\klist.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\ktab.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\orbd.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\pack200.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\*
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\policytool.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\rmid.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\rmiregistry.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\servertool.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssvagent.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\tnameserv.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\unpack200.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\*
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\applet\*
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\cmm\*
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\deploy\*
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\ext\*
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\fonts\*
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\i386\*
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\images\*
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\images\cursors\*
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\jfr\*
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\management\*
- C:\Program Files (x86)\Java\jre1.8.0_91\lib\security\*
- C:\Program Files (x86)\Mozilla Firefox\*
- C:\Program Files (x86)\Mozilla Firefox\browser\*
- C:\Program Files (x86)\Mozilla Firefox\browser\components\*
- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\*
- C:\Program Files (x86)\Mozilla Firefox\browser\features\*
- C:\Program Files (x86)\Mozilla Firefox\crashreporter.exe
- C:\Program Files (x86)\Mozilla Firefox\defaults\*
- C:\Program Files (x86)\Mozilla Firefox\defaults\pref\*
- C:\Program Files (x86)\Mozilla Firefox\dictionaries\*
- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- C:\Program Files (x86)\Mozilla Firefox\gmp-clearkey\*
- C:\Program Files (x86)\Mozilla Firefox\gmp-clearkey\0.1\*
- C:\Program Files (x86)\Mozilla Firefox\maintenanceservice.exe
- C:\Program Files (x86)\Mozilla Firefox\maintenanceservice_installer.exe
- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
- C:\Program Files (x86)\Mozilla Firefox\plugin-hang-ui.exe
- C:\Program Files (x86)\Mozilla Firefox\uninstall\*
- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
- C:\Program Files (x86)\Mozilla Firefox\updater.exe
- C:\Program Files (x86)\Mozilla Firefox\webapp-uninstaller.exe
- C:\Program Files (x86)\Mozilla Firefox\webapprt\*
- C:\Program Files (x86)\Mozilla Firefox\webapprt-stub.exe
- C:\Program Files (x86)\Mozilla Firefox\wow_helper.exe
- C:\Program Files (x86)\MSBuild\*
- C:\Program Files (x86)\Notepad++\*
- C:\Program Files (x86)\Notepad++\localization\*
- C:\Program Files (x86)\Notepad++\notepad++.exe
- C:\Program Files (x86)\Notepad++\nppIExplorerShell.exe
- C:\Program Files (x86)\Notepad++\plugins\*
- C:\Program Files (x86)\Notepad++\plugins\APIs\*
- C:\Program Files (x86)\Notepad++\plugins\disabled\*
- C:\Program Files (x86)\Notepad++\uninstall.exe
- C:\Program Files (x86)\Notepad++\updater\*
- C:\Program Files (x86)\Notepad++\updater\gpup.exe
- C:\Program Files (x86)\Reference Assemblies\*
- C:\Program Files (x86)\Safer Networking\*
- C:\Program Files (x86)\Safer Networking\FileAlyzer 2\*
- C:\Program Files (x86)\Safer Networking\FileAlyzer 2\FileAlyzer2.exe
- C:\Program Files (x86)\Safer Networking\FileAlyzer 2\unins000.exe
- C:\Program Files (x86)\Telerik\*
- C:\Program Files (x86)\Telerik\JustDecompile\*
- C:\Program Files (x86)\Telerik\JustDecompile\Libraries\*
- C:\Program Files (x86)\Uninstall Information\*
- C:\Program Files (x86)\Universal Extractor\*
- C:\Program Files (x86)\Universal Extractor\bin\*
- C:\Program Files (x86)\Universal Extractor\bin\7z.exe
- C:\Program Files (x86)\Universal Extractor\bin\arc.exe
- C:\Program Files (x86)\Universal Extractor\bin\arj.exe
- C:\Program Files (x86)\Universal Extractor\bin\AspackDie.exe
- C:\Program Files (x86)\Universal Extractor\bin\bin2iso.exe
- C:\Program Files (x86)\Universal Extractor\bin\BOOZ.EXE
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet.config
- C:\Windows\sysnative\mscoree.dll.local
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
- C:\Windows\Microsoft.NET\Framework64\*
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\clr.dll
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\sysnative\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\sysnative\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\sysnative\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Program Files\Microsoft Network Monitor 3\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Program Files (x86)\Universal Extractor\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Program Files (x86)\Universal Extractor\bin\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Python27\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Python27\Scripts\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\tools\sysinternals\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\tools\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\tools\IDA_Pro_v6\python\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\en-US\aspnet_rc.dll
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\en-US\aspnet_rc.dll.DLL
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\en\aspnet_rc.dll
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\en\aspnet_rc.dll.DLL
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll
- \\.\pipe\*
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ole32.dll
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\ndpsetup.bat
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenservicelock.dat
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenrootstorelock.dat
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ndpsetup.bat
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngenservicelock.dat
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngenrootstorelock.dat
- C:\Program Files (x86)\Google\Update\goopdate.dll
- C:\Program Files (x86)\Google\Update\1.3.29.5\goopdate.dll
- C:\Program Files (x86)\Google\Update\IPHLPAPI.DLL
- C:\Windows\System32\IPHLPAPI.DLL
- C:\Program Files (x86)\Google\Update\WINNSI.DLL
- C:\Windows\System32\winnsi.dll
- C:\Program Files (x86)\Google\Update\NETAPI32.dll
- C:\Windows\System32\netapi32.dll
- C:\Program Files (x86)\Google\Update\netutils.dll
- C:\Windows\System32\netutils.dll
- C:\Program Files (x86)\Google\Update\srvcli.dll
- C:\Windows\System32\srvcli.dll
- C:\Program Files (x86)\Google\Update\RASAPI32.dll
- C:\Windows\System32\rasapi32.dll
- C:\Program Files (x86)\Google\Update\rasman.dll
- C:\Windows\System32\rasman.dll
- C:\Program Files (x86)\Google\Update\VERSION.dll
- C:\Windows\System32\version.dll
- C:\Program Files (x86)\Google\Update\USERENV.dll
- C:\Windows\System32\userenv.dll
- C:\Program Files (x86)\Google\Update\profapi.dll
- C:\Windows\System32\profapi.dll
- C:\Program Files (x86)\Google\Update\WTSAPI32.dll
- C:\Windows\System32\wtsapi32.dll
- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe.Local\
- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2
- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
- C:\Program Files (x86)\Google\Update\msi.dll
- C:\Windows\System32\msi.dll
- C:\Program Files (x86)\Google\Update\MSIMG32.dll
- C:\Windows\System32\msimg32.dll
- C:\Program Files (x86)\Google\Update\UxTheme.dll
- C:\Windows\System32\uxtheme.dll
- C:\GoogleUpdate.ini
- \??\PIPE\wkssvc
- C:\DosDevices\pipe\
- C:\Windows\System32
- C:\Program Files (x86)
- C:\Program Files (x86)\Google
- C:\Program Files (x86)\Google\CrashReports
- \??\pipe\GoogleCrashServices\S-1-5-18
- C:\Program Files (x86)\Google\Update\1.3.29.5
- C:\Program Files (x86)\Google\Update\1.3.29.5\goopdateres_en.dll
- C:\Program Files (x86)\Google\Update
- \??\MountPointManager
- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
- C:\Windows\System32\config\systemprofile\AppData\Roaming\20503a4e5d0020a4.bin
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\
- C:\Windows\ehome\
- C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\
- C:\Windows\SysWOW64\
- C:\Windows\sysnative\wbem\
- C:\Program Files (x86)\WinPcap\rpcapd.ini
- \??\PIPE\srvsvc
- \Device\LanmanDatagramReceiver
- C:\Windows\SysWOW64\net.exe
- C:\Windows
- C:\Windows\SysWOW64
- C:\Windows\AppPatch\sysmain.sdb
- C:\Windows\SysWOW64\*.*
- C:\Windows\SysWOW64\ui\SwDRM.dll
- C:\Windows\SysWOW64\net1.exe
- C:\Windows\SysWOW64\sc.exe
- C:\Windows\SysWOW64\en-US\sc.exe.mui
- C:\Windows\Temp\fwtsqmfile00.sqm
- C:\Windows\ehome
- C:\Windows\appcompat\Programs\RecentFileCache.bcf
- C:\Windows\AppPatch\AppPatch64\sysmain.sdb
- C:\Windows\sysnative\Tasks\Microsoft\Windows\Media Center
- C:\Windows\sysnative\Tasks\Microsoft\Windows\Media Center\*
- C:\Windows\sysnative\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch
- C:\Windows\sysnative\Tasks\Microsoft\Windows\Media Center\ehDRMInit
- C:\Windows\sysnative\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath
- C:\Windows\ehome\ehtray.exe
- C:\Windows\sysnative
- C:\Windows\ehome\ehrec.exe
- C:\Windows\SysWOW64\en-US\perfhost.exe.mui
- C:\Windows\SoftwareDistribution\DataStore\DataStore.edb
- C:\Windows\SoftwareDistribution\DataStore\DataStore.edb\
- C:\Windows\SoftwareDistribution\DataStore
- C:\Windows\SoftwareDistribution\DataStore\
- C:\Windows\SoftwareDistribution
- C:\Windows\SoftwareDistribution\
- C:\Windows\
- C:
- \??\Volume{2400a2c5-ccb0-11e5-b7bd-806e6f6e6963}
- C:\Windows\Temp\
- C:\Windows\Temp\GUR7F31.tmp
- C:\Users\user\AppData\Roaming
- C:\Windows\SysWOW64\shell32.dll
- C:\Users
- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches
- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000000.db
- C:\Users\desktop.ini
- C:\Users\user
- C:\Users\user\AppData
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\prefs.js
- C:\Users\user\AppData\Local\{4F8629F3-210A-481F-A9F0-5806E90DF5B8}
- \??\pipe\GoogleCrashServices\S-1-5-18-x64
- C:\Program Files (x86)\Google\Update\Download
- C:\ProgramData\Microsoft\Windows\WER\ReportQueue
- C:\Windows\sysnative\en-US\faultrep.dll.mui
- C:\Windows\sysnative\winxp\triage.ini
- C:\Windows\sysnative\WINXP
- C:\Windows\sysnative\winext
- C:\Windows\sysnative\winext\arcade
- C:\Windows\sysnative\pri
- C:\ProgramData\Oracle\Java\javapath
- C:\ProgramData\Oracle\Java\javapath\
- C:\Windows\sysnative\wbem
- C:\Windows\sysnative\WindowsPowerShell\v1.0
- C:\Windows\sysnative\WindowsPowerShell\v1.0\
- C:\Program Files\Microsoft Network Monitor 3
- C:\Program Files\Microsoft Network Monitor 3\
- C:\Program Files (x86)\Universal Extractor
- C:\Program Files (x86)\Universal Extractor\
- C:\Program Files (x86)\Universal Extractor\bin
- C:\Program Files (x86)\Universal Extractor\bin\
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\
- C:\Python27
- C:\Python27\
- C:\Python27\Scripts
- C:\Python27\Scripts\
- C:\tools\sysinternals
- C:\tools
- C:\tools\
- C:\tools\IDA_Pro_v6\python
- C:\Windows\sysnative\WINXP\dbghelp.dll
- C:\Windows\sysnative\winext\dbghelp.dll
- C:\Windows\sysnative\winext\arcade\dbghelp.dll
- C:\Windows\sysnative\pri\dbghelp.dll
- C:\Windows\sysnative\dbghelp.dll
- C:\Windows\sysnative\WINXP\ext.dll
- C:\Windows\sysnative\winext\ext.dll
- C:\Windows\sysnative\winext\arcade\ext.dll
- C:\Windows\sysnative\pri\ext.dll
- C:\Windows\sysnative\ext.dll
- C:\ProgramData\Oracle\Java\javapath\ext.dll
- C:\Windows\ext.dll
- C:\Windows\sysnative\wbem\ext.dll
- C:\Windows\sysnative\WindowsPowerShell\v1.0\ext.dll
- C:\Program Files\Microsoft Network Monitor 3\ext.dll
- C:\Program Files (x86)\Universal Extractor\ext.dll
- C:\Program Files (x86)\Universal Extractor\bin\ext.dll
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\ext.dll
- C:\Python27\ext.dll
- C:\Python27\Scripts\ext.dll
- C:\tools\sysinternals\ext.dll
- C:\tools\ext.dll
- C:\tools\IDA_Pro_v6\python\ext.dll
- C:\Windows\sysnative\en-US\KERNELBASE.dll.mui
- C:\Windows\sysnative\WINXP\exts.dll
- C:\Windows\sysnative\winext\exts.dll
- C:\Windows\sysnative\winext\arcade\exts.dll
- C:\Windows\sysnative\pri\exts.dll
- C:\Windows\sysnative\exts.dll
- C:\ProgramData\Oracle\Java\javapath\exts.dll
- C:\Windows\exts.dll
- C:\Windows\sysnative\wbem\exts.dll
- C:\Windows\sysnative\WindowsPowerShell\v1.0\exts.dll
- C:\Program Files\Microsoft Network Monitor 3\exts.dll
- C:\Program Files (x86)\Universal Extractor\exts.dll
- C:\Program Files (x86)\Universal Extractor\bin\exts.dll
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\exts.dll
- C:\Python27\exts.dll
- C:\Python27\Scripts\exts.dll
- C:\tools\sysinternals\exts.dll
- C:\tools\exts.dll
- C:\tools\IDA_Pro_v6\python\exts.dll
- C:\Windows\sysnative\WINXP\uext.dll
- C:\Windows\sysnative\winext\uext.dll
- C:\Windows\sysnative\winext\arcade\uext.dll
- C:\Windows\sysnative\pri\uext.dll
- C:\Windows\sysnative\uext.dll
- C:\ProgramData\Oracle\Java\javapath\uext.dll
- C:\Windows\uext.dll
- C:\Windows\sysnative\wbem\uext.dll
- C:\Windows\sysnative\WindowsPowerShell\v1.0\uext.dll
- C:\Program Files\Microsoft Network Monitor 3\uext.dll
- C:\Program Files (x86)\Universal Extractor\uext.dll
- C:\Program Files (x86)\Universal Extractor\bin\uext.dll
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\uext.dll
- C:\Python27\uext.dll
- C:\Python27\Scripts\uext.dll
- C:\tools\sysinternals\uext.dll
- C:\tools\uext.dll
- C:\tools\IDA_Pro_v6\python\uext.dll
- C:\Windows\sysnative\WINXP\ntsdexts.dll
- C:\Windows\sysnative\winext\ntsdexts.dll
- C:\Windows\sysnative\winext\arcade\ntsdexts.dll
- C:\Windows\sysnative\pri\ntsdexts.dll
- C:\Windows\sysnative\ntsdexts.dll
- C:\ProgramData\Oracle\Java\javapath\ntsdexts.dll
- C:\Windows\ntsdexts.dll
- C:\Windows\sysnative\wbem\ntsdexts.dll
- C:\Windows\sysnative\WindowsPowerShell\v1.0\ntsdexts.dll
- C:\Program Files\Microsoft Network Monitor 3\ntsdexts.dll
- C:\Program Files (x86)\Universal Extractor\ntsdexts.dll
- C:\Program Files (x86)\Universal Extractor\bin\ntsdexts.dll
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\ntsdexts.dll
- C:\Python27\ntsdexts.dll
- C:\Python27\Scripts\ntsdexts.dll
- C:\tools\sysinternals\ntsdexts.dll
- C:\tools\ntsdexts.dll
- C:\tools\IDA_Pro_v6\python\ntsdexts.dll
- C:\Windows\sysnative\en-US\wer.dll.mui
- C:\Windows\sysnative\config\systemprofile\AppData\Local\CrashDumps
- C:\Windows\sysnative\config\systemprofile\AppData\Local\CrashDumps\*.dmp
- C:\Windows\sysnative\config\systemprofile\AppData\Local\CrashDumps\alg.exe.2472.dmp
- C:\Windows\sysnative\ntdll.dll
- C:\Windows\sysnative\kernel32.dll
- C:\Windows\sysnative\KERNELBASE.dll
- C:\Windows\sysnative\advapi32.dll
- C:\Windows\sysnative\msvcrt.dll
- C:\Windows\sysnative\sechost.dll
- C:\Windows\sysnative\rpcrt4.dll
- C:\Windows\sysnative\atl.dll
- C:\Windows\sysnative\user32.dll
- C:\Windows\sysnative\gdi32.dll
- C:\Windows\sysnative\lpk.dll
- C:\Windows\sysnative\usp10.dll
- C:\Windows\sysnative\ws2_32.dll
- C:\Windows\sysnative\nsi.dll
- C:\Windows\sysnative\ole32.dll
- C:\Windows\sysnative\oleaut32.dll
- C:\Windows\sysnative\wsock32.dll
- C:\Windows\sysnative\mswsock.dll
- C:\Windows\sysnative\imm32.dll
- C:\Windows\sysnative\msctf.dll
- C:\Windows\sysnative\api-ms-win-core-synch-l1-2-0.DLL
- C:\Windows\sysnative\sspicli.dll
- C:\Windows\sysnative\winhttp.dll
- C:\Windows\sysnative\webio.dll
- C:\Windows\sysnative\crypt32.dll
- C:\Windows\sysnative\msasn1.dll
- C:\Windows\sysnative\mpr.dll
- C:\Windows\sysnative\secur32.dll
- C:\Windows\sysnative\shlwapi.dll
- C:\Windows\sysnative\dnsapi.dll
- C:\Windows\sysnative\ntmarta.dll
- C:\Windows\sysnative\Wldap32.dll
- C:\Windows\sysnative\CRYPTBASE.dll
- C:\Windows\sysnative\clbcatq.dll
- C:\Windows\sysnative\cryptsp.dll
- C:\Windows\sysnative\rsaenh.dll
- C:\Windows\sysnative\RpcRtRemote.dll
- C:\Windows\sysnative\IPHLPAPI.DLL
- C:\Windows\sysnative\winnsi.dll
- C:\Windows\sysnative\tzres.dll
- C:\Windows\Registration\R000000000001.clb
- C:\Windows\sysnative\wbem\MOF
- C:\Windows\sysnative\wbem\MOF\bad\
- C:\Windows\sysnative\wbem\MOF\good\
- C:\Windows\sysnative\wbem\MOF\*
- \??\WMIDataDevice
- \??\PIPE\samr
- C:\Windows\sysnative\wbem\repository
- C:\Windows\sysnative\wbem\Logs
- C:\Windows\sysnative\wbem\AutoRecover
- C:\Windows\sysnative\wbem\repository\INDEX.BTR
- C:\Windows\sysnative\wbem\repository\WRITABLE.TST
- C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
- C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
- C:\Windows\sysnative\wbem\repository\WBEM9xUpgd.dat
- \??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
- \??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe.Local\
- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34fc
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen_service.lock
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen_service.log
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngenservicelock.dat
- C:\Windows\System32\mscoree.dll.local
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
- C:\Windows\Microsoft.NET\Framework\*
- C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
- C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
- C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
- C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe.config
- C:\Windows\Microsoft.NET\Framework\v4.0.30319
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvc.dll
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe.Local\
- C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngen_service.lock
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngen_service.log
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngenservicelock.dat
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe.config
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\sysnative\en-US\advapi32.dll.mui
- C:\Windows\sysnative\drivers\acpi.sys
- C:\Windows\sysnative\drivers\en-US\ACPI.sys.mui
- C:\Windows\sysnative\drivers\ndis.sys
- C:\Windows\sysnative\drivers\en-US\ndis.sys.mui
- C:\Windows\sysnative\drivers\mssmbios.sys
- C:\Windows\sysnative\drivers\en-US\mssmbios.sys.mui
- C:\Windows\sysnative\drivers\hdaudbus.sys
- C:\Windows\sysnative\drivers\en-US\HDAudBus.sys.mui
- C:\Windows\sysnative\drivers\intelppm.sys
- C:\Windows\sysnative\drivers\en-US\intelppm.sys.mui
- C:\Windows\sysnative\drivers\portcls.sys
- C:\Windows\sysnative\drivers\en-US\portcls.SYS.mui
- C:\Windows\sysnative\drivers\monitor.sys
- C:\Windows\sysnative\drivers\en-US\monitor.sys
- C:\Windows\sysnative\drivers\en\monitor.sys
- C:\Windows\Registration
- C:\Windows\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}*.crmlog
- C:\Windows\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{BB1BBD67-ED8C-4496-88C8-4131F3DAEEF5}.crmlog
- C:\Windows\ehome\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Windows\ehome\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\ehome\ehETW.dll
- C:\Windows\sysnative\ehETW.dll
- C:\Windows\system\ehETW.dll
- C:\Windows\ehETW.dll
- C:\ProgramData\Oracle\Java\javapath\ehETW.dll
- C:\Windows\sysnative\wbem\ehETW.dll
- C:\Windows\sysnative\WindowsPowerShell\v1.0\ehETW.dll
- C:\Program Files\Microsoft Network Monitor 3\ehETW.dll
- C:\Program Files (x86)\Universal Extractor\ehETW.dll
- C:\Program Files (x86)\Universal Extractor\bin\ehETW.dll
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\ehETW.dll
- C:\Python27\ehETW.dll
- C:\Python27\Scripts\ehETW.dll
- C:\tools\sysinternals\ehETW.dll
- C:\tools\ehETW.dll
- C:\tools\IDA_Pro_v6\python\ehETW.dll
- C:\ProgramData\Microsoft\eHome\RecoveryTasks\
- C:\ProgramData\Microsoft\eHome\RecoveryTasks\*.rrtl
- C:\Users\Public\Recorded TV\TempRec\*.TmpSBE
- C:\Users\Public\Recorded TV\TempRec\TempSBE\
- C:\Users\Public\Recorded TV\TempRec\TempSBE\*
- C:\ProgramData\Microsoft\eHome\SharedSBE\*
- C:\Users\Public\Recorded TV\TempRec\
- C:\Windows\ehome\ehProxy.dll
- C:\Windows\sysnative\taskhost.exe
- C:\Windows\shell32.dll
- C:\Windows\sysnative\shell32.dll
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Themes\
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Themes\slideshow.ini
- C:\Windows\ehome\ehres.dll
- C:\Windows\ehome\en-US\EHRes.dll.mui
- C:\Windows\Temp\FXSSVCDebugLogFile.txt
- \Device\PcwDrv
- C:\ProgramData\Microsoft\Windows NT\MSFax\Queue
- C:\ProgramData\Microsoft\Windows NT\MSFax\Queue\TST4777.tmp
- C:\ProgramData\Microsoft\Windows NT\MSFax
- C:\ProgramData\Microsoft\Windows NT\MSFax\TST4A76.tmp
- C:\ProgramData\Microsoft\Windows NT\MSFax\TST4BEE.tmp
- C:\ProgramData\Microsoft\Windows NT\MSFax\Queue\TST4BEE.tmp
- C:\ProgramData\Microsoft\Windows NT\MSFax\SentItems
- C:\ProgramData\Microsoft\Windows NT\MSFax\Inbox
- C:\ProgramData\Microsoft\Windows NT\MSFax\SentItems\*.*
- C:\ProgramData\Microsoft\Windows NT\MSFax\Inbox\*.*
- C:\Windows\sysnative\en-US\radarrs.dll.mui
- C:\Windows\sysnative\radarrs.dll
- C:\Windows\sysnative\en-US\DUser.dll.mui
- C:\Windows\sysnative\en\DUser.dll.mui
- C:\Windows\sysnative\duser.dll
- C:\Windows\sysnative\taskhost.exe.Local\
- C:\Windows\winsxs\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3
- C:\Windows\winsxs\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3\COMCTL32.dll.mui
- C:\Windows\sysnative\Msdtc\Trace
- C:\Windows\sysnative\Msdtc\Trace\dtctrace.log
- C:\Windows\system32\MSDtc\trace
- C:\Windows\DtcInstall.log
- C:\Windows\sysnative\Msdtc\MSDTC.LOG
- C:\Windows\sysnative\en-US\msdtcVSp1res.dll.mui
- C:\Windows\ehome\ehRec.exe.config
- C:\Windows\ehome\api-ms-win-appmodel-runtime-l1-1-0.dll
- C:\Windows\ehome\ehRec.exe.Local\
- C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\msvcr80.dll
- C:\Windows\winsxs
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\machine.config
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\fusion.localgac
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\security.config
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\security.config.cch
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\enterprisesec.config
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\enterprisesec.config.cch
- C:\Windows\sysnative\config\systemprofile\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\64bit\security.config
- C:\Windows\sysnative\config\systemprofile\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\64bit\security.config.cch
- C:\Windows\assembly\NativeImages_v2.0.50727_64\index14a.dat
- C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\9469491f37d9c35b596968b206615309\mscorlib.ni.dll
- C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.INI
- C:\Windows\assembly\GAC_MSIL\ehCIR\6.1.0.0__31bf3856ad364e35\setupapi.dll
- C:\Windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\e049a1a3948a031aed69690fc102ea6c\mcstoredb.ni.dll
- C:\Windows\assembly\GAC_64\mcstoredb\6.1.0.0__31bf3856ad364e35\mcstoredb.INI
- C:\Windows\assembly\GAC_64\mcstoredb\6.1.0.0__31bf3856ad364e35\mcstoredb.dll
- C:\Windows\assembly\GAC_64\mcstoredb\6.1.0.0__31bf3856ad364e35\RASAPI32.dll
- C:\Windows\sysnative\rasapi32.dll
- C:\Windows\assembly\GAC_64\mcstoredb\6.1.0.0__31bf3856ad364e35\rasman.dll
- C:\Windows\sysnative\rasman.dll
- C:\Windows\Globalization\en-us.nlp
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
- C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\ntdll.dll
- C:\programdata\microsoft\eHome\mcepg2-0.db
- C:\programdata\microsoft\eHome
- C:\programdata\microsoft
- C:\programdata
- C:\programdata\microsoft\eHome\mcepg2-0
- C:\programdata\microsoft\eHome\mcepg2-0\Blocks.mem
- C:\programdata\microsoft\eHome\Counter.mem
- C:\programdata\microsoft\eHome\mcepg2-0\Root.mem
- C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\oleaut32.dll
- C:\programdata\microsoft\eHome\
- C:\ProgramData\Microsoft\eHome\mcepg2-0.db
- C:\Windows\sysnative\msiexec.exe.Local\
- C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac
- C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll
- C:\Windows\WindowsShell.Manifest
- C:\Windows\Installer
- C:\ProgramData\Microsoft\Network\
- C:\ProgramData\Microsoft\Network\Downloader\
- C:\Windows\sysnative\upnp.dll
Show More 1108

Read Registry Keys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\EnableAnchorContext
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\FailureActions
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SENS\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\HTTP\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Spooler\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PlugPlay\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\TapiSrv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\TapiSrv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\TapiSrv\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\TapiSrv\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WdiSystemHost\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WdiSystemHost\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WdiSystemHost\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WdiSystemHost\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2298303332-66077612-2598613238-1000\ProfileImagePath
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SamSs\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Environment
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe\GlobalFlag
- HKEY_USERS\.DEFAULT\Control Panel\International\LocaleName
- HKEY_USERS\.DEFAULT\Control Panel\International\sCountry
- HKEY_USERS\.DEFAULT\Control Panel\International\sList
- HKEY_USERS\.DEFAULT\Control Panel\International\sDecimal
- HKEY_USERS\.DEFAULT\Control Panel\International\sThousand
- HKEY_USERS\.DEFAULT\Control Panel\International\sGrouping
- HKEY_USERS\.DEFAULT\Control Panel\International\sNativeDigits
- HKEY_USERS\.DEFAULT\Control Panel\International\sCurrency
- HKEY_USERS\.DEFAULT\Control Panel\International\sMonDecimalSep
- HKEY_USERS\.DEFAULT\Control Panel\International\sMonThousandSep
- HKEY_USERS\.DEFAULT\Control Panel\International\sMonGrouping
- HKEY_USERS\.DEFAULT\Control Panel\International\sPositiveSign
- HKEY_USERS\.DEFAULT\Control Panel\International\sNegativeSign
- HKEY_USERS\.DEFAULT\Control Panel\International\sTimeFormat
- HKEY_USERS\.DEFAULT\Control Panel\International\sShortTime
- HKEY_USERS\.DEFAULT\Control Panel\International\s1159
- HKEY_USERS\.DEFAULT\Control Panel\International\s2359
- HKEY_USERS\.DEFAULT\Control Panel\International\sShortDate
- HKEY_USERS\.DEFAULT\Control Panel\International\sYearMonth
- HKEY_USERS\.DEFAULT\Control Panel\International\sLongDate
- HKEY_USERS\.DEFAULT\Control Panel\International\iCountry
- HKEY_USERS\.DEFAULT\Control Panel\International\iMeasure
- HKEY_USERS\.DEFAULT\Control Panel\International\iPaperSize
- HKEY_USERS\.DEFAULT\Control Panel\International\iDigits
- HKEY_USERS\.DEFAULT\Control Panel\International\iLZero
- HKEY_USERS\.DEFAULT\Control Panel\International\iNegNumber
- HKEY_USERS\.DEFAULT\Control Panel\International\NumShape
- HKEY_USERS\.DEFAULT\Control Panel\International\iCurrDigits
- HKEY_USERS\.DEFAULT\Control Panel\International\iCurrency
- HKEY_USERS\.DEFAULT\Control Panel\International\iNegCurr
- HKEY_USERS\.DEFAULT\Control Panel\International\iCalendarType
- HKEY_USERS\.DEFAULT\Control Panel\International\iFirstDayOfWeek
- HKEY_USERS\.DEFAULT\Control Panel\International\iFirstWeekOfYear
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D6015EC3-FA16-4813-9CA1-DA204574F5DA}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\BCA9F854
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaxSxSHashCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ASP.NET\UseWorkStation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ASP.NET\4.0.30319.0\ReadGCConcurrentModeFromConfig
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\InstallRoot
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\CLRLoadLogDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\OnlyUseLatestCLR
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full\Release
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ASP.NET\VerificationCompatibility
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Parameters\Port
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Parameters\UseIPV6
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ASP.NET_4.0.30319\Performance\Library
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Parameters\AllowRemoteConnection
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\GCCpuGroup
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Thread_UseAllCpuGroups
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_SampleIntervalLow
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\ThreadPool_ForceMinWorkerThreads
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\ThreadPool_ForceMaxWorkerThreads
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_WavePeriod
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_MaxWaveMagnitude
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_WaveMagnitudeMultiplier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_WaveHistorySize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_Bias
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_TargetSignalToNoiseRatio
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_MaxChangePerSecond
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_MaxChangePerSample
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_SampleIntervalHigh
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_ErrorSmoothingFactor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_GainExponent
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_MaxSampleErrorPercent
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Parameters\SocketTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenServiceDebugLog
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Client\Install
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGEN_USE_PRIVATE_STORE
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DefaultVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Version
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\ZapSet
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\WorkPending
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State\PendingUpdate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGenServiceDebugLog
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NicPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\RegistryRoot
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\AssemblyPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\AssemblyPath2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Client\Install
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGEN_USE_PRIVATE_STORE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\DefaultVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Version
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\ZapSet
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\WorkPending
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\State\PendingUpdate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}\pv
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\OemInstallTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\usagestats
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\usagestats
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\usagestats
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\usagestats
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}\usagestats
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}\usagestats
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\eulaaccepted
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\gupdate_service_name
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\OffDiag\DoNotTestMemory
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\LastCodeRedCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\LastOSVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\gupdate_task_name_ua
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\UpdateTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\InstallTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\LastChecked
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\Timeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\LogLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\CDBufferRead
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\CDBufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\NetworkBufferRead
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\NetworkBufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\InternetBufferRead
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\InternetBufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\BufferWrite
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\DefaultAuthLevel
- HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\wmi
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\wmi
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters\ServiceDllUnloadOnStop
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceDllUnloadOnStop
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ActivateWindowsSearch\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ehDRMInit\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3710662C-015A-4CD7-B802-A66D3570CD6A}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3710662C-015A-4CD7-B802-A66D3570CD6A}\Triggers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\UpdateRecordPath\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2757F743-66B7-497D-A161-50ADE38F7C07}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2757F743-66B7-497D-A161-50ADE38F7C07}\Triggers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Triggers
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Clients\StartMenuInternet\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\old-uid
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\uid-create-time
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\uid-num-rotations
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Control Panel\International\LocaleName
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\CommonFilesDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ProgramW6432Dir
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\CommonW6432Dir
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyComputer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesRecycleBin
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoInternetIcon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCommonGroups
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\CallForAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\RestrictedAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORDISPLAY
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideFolderVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\UseDropHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORPARSING
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsParseDisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForOverlay
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\MapNetDriveVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForInfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideInWebView
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideOnDesktopPerUser
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsAliasedNotifications
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsUniversalDelegate
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\NoFileFolderJunction
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\PinToNameSpaceTree
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HasNavigationEnum
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DontShowSuperHidden
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWebView
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ClassicShell
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\SeparateProcess
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetCrawling
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSimpleStartMenu
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowCompColor
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\DontPrettyPath
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowInfoTip
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideIcons
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MapNetDrvBtn
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\WebView
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Filter
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SeparateProcess
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\NoNetCrawling
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AutoCheckSelect
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\IconsOnly
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowTypeOverlay
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\DocObject
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_CLASSES\Folder\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\BrowseInPlace
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_CLASSES\Folder\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\IsShortcut
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_CLASSES\Folder\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\NeverShowExt
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_CLASSES\Folder\NeverShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\NeverShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Google\Update\proxy\source
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\GoogleUpdate.exe\AppId
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\IsMSIHelperRegistered
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\RetryAfter
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\WerSvcGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Parameters\ServiceDll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Parameters\ServiceManifest
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Parameters\ServiceMain
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ServiceTimeout
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Parameters\ServiceDllUnloadOnStop
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\NoReflection
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\NoReflection
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TraceFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug\WaitOnStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug\Debugger
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug\WaitonExceptionRecord
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MachineID
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultConsent
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontSendAdditionalData
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Disabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultConsent
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultOverrideBehavior
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\APPCRASH
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LoggingDisabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontShowUI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableArchive
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ConfigureArchive
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableQueue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxQueueCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxArchiveCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceQueue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\QueuePesterInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\SendEFSFiles
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\BypassDataThrottling
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceUserModeCabCollection
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontSendAdditionalData
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultOverrideBehavior
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\APPCRASH
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LoggingDisabled
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontShowUI
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableArchive
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ConfigureArchive
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableQueue
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxQueueCount
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxArchiveCount
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceQueue
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\QueuePesterInterval
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\SendEFSFiles
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\BypassDataThrottling
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceUserModeCabCollection
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerServer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerUseSSL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerPortNumber
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerUseAuthentication
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Reliability Analysis\RAC\RacWerSampleTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\6FD5A890
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug\OfflineMode
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\DumpFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\DumpCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\DumpType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\CustomDumpFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SuppressOnDebugger
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\alg.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\SYSTEM32\ntdll.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\kernel32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\KERNELBASE.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\ADVAPI32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\msvcrt.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\SYSTEM32\sechost.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\RPCRT4.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\ATL.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\USER32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\GDI32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\LPK.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\USP10.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\WS2_32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\NSI.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\ole32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\OLEAUT32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\WSOCK32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\MSWSOCK.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\IMM32.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\MSCTF.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\api-ms-win-core-synch-l1-2-0.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\SspiCli.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\WINHTTP.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\webio.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\CRYPT32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\MSASN1.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\MPR.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\Secur32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\SHLWAPI.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\DNSAPI.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\ntmarta.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\WLDAP32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\CRYPTBASE.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\CLBCatQ.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\CRYPTSP.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\rsaenh.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\RpcRtRemote.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\IPHLPAPI.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\WINNSI.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\EnableEELogging
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LogEEInfoAsNative
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\ActivationFailureLoggingLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\CallFailureLoggingLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\InvalidSecurityDescriptorLoggingLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DisableActivationSecurityCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\UseRunAsTokenCache
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\IssueActivationRpcAtIdentify
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\ResumeTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultLaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MachineLaunchRestriction
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MachineAccessRestriction
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\DCOM Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\EnableDCOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\OleModalLoopBehavior
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DCOMSCMRemoteCallFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\EnableDCOMHTTP
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\IgnoreServerExceptions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\BreakOnSilencedServerExceptions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationService
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyMutualAuthentication
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacySecureReferences
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaxActivationRetriesPerServer
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000B7FD00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\LocalServer32\LocalServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\LocalServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\LocalServer32\ServerExecutable
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\AppID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\DllSurrogate
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\AppID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\AppID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\AppID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\CoInitializeSecurityParam
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\ImpersonationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\AuthenticationCapabilities
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\CoInitializeSecurityAppID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\DeferredCoInitializeSecurityServices
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\DefaultRpcStackSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\SystemCritical
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceDll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceManifest
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceMain
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NoResyncPerf
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ADAPDelay
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LodCtrDelay
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\TimeToFullDredge
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\TimeToTerminateAdap
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastFullDredgeTimestamp
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\AECFFC7E
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
- HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\Synchronization
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\AppId
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENBreakOnWorker
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenRegistryAccessCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State\ExtraInstallSteps
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceBreakOnStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenServiceMaxLogSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceTestHookDll
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServicePolicy
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\RootstoreDirty
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENUseService
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGENBreakOnWorker
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGenRegistryAccessCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\State\ExtraInstallSteps
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGENServiceBreakOnStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGenServiceMaxLogSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGENServiceTestHookDll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGENServicePolicy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\RootstoreDirty
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGENUseService
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Log File Max Size
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ACPI\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ACPI\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NDIS\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NDIS\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\mssmbios\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\mssmbios\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\HDAudBus\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\HDAudBus\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\intelppm\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\intelppm\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\monitor\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\monitor\ImagePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\UseLegacyLowCommitDetection
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MinimumFreeMemPercentageToCreateProcess
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MinimumFreeMemPercentageToCreateObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\AlwaysPushTrackingInfo
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\TrackingInfoCallbackDuration
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{97312C82-D4C2-11D1-B682-00805FC79216}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Eventlog\SuppressDuplicateDuration
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\TrackingInfoEvtFrequency
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\TrackingInfoPollingFrequency
- HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Media\Windows Media Center\InstallInfo\IconsVisible
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ehrecvr.exe\AppId
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4396DC6-E851-4D3A-8D01-34E6949F3500}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4396DC6-E851-4D3A-8D01-34E6949F3500}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\44382709
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D44CBB4F-743E-4818-8077-C47F666CA7EE}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D44CBB4F-743E-4818-8077-C47F666CA7EE}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA23DFB6-E23F-4B94-B1A4-095D6E84493C}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA23DFB6-E23F-4B94-B1A4-095D6E84493C}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\GipActivityBypass
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DCC8327-DBE9-48E6-846C-33725865D50C}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\InProcServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\InProcServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03A84965-6E86-49C5-B831-826B38732363}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\InProcServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\InProcServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\ServiceStarted
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\Heartbeat
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\WaitingForShutdown
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\ServiceFailures
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33D8C85A-B8C1-4828-B51A-4F3349AD5F9E}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33D8C85A-B8C1-4828-B51A-4F3349AD5F9E}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\F890EC02
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{50D9196A-DD32-4F64-9BD1-20AB9175858E}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{50D9196A-DD32-4F64-9BD1-20AB9175858E}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B635ECB-0887-4015-8CA6-D621362F98D1}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B635ECB-0887-4015-8CA6-D621362F98D1}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\HeartbeatIntervalMs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BA0AEE04-518A-4C18-87FC-7DA3691997EB}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\InProcServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\InProcServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B196B284-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B196B286-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{36A5EC1B-A347-40AE-A640-3DCB83AF86F7}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\EhschedExitDelay
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7100EAC3-1292-4D2E-8D27-7B81C077F51E}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E4A29C85-6658-43EE-9EB1-8E450F41E9E7}\ProxyStubClsid32\(Default)
- HKEY_CURRENT_USER\Control Panel\Personalization\Desktop Slideshow\Interval
- HKEY_CURRENT_USER\Control Panel\Personalization\Desktop Slideshow\Shuffle
- HKEY_CURRENT_USER\Control Panel\Personalization\Desktop Slideshow\AnimationDuration
- HKEY_CURRENT_USER\Control Panel\Personalization\Desktop Slideshow\Flags
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Media Center\EnableNotifications
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\EnableLaunchErrors
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\EnableSPADLaunchErrors
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableMulticast
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\QueryAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\DisableAdapterDomainName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\RegistrationEnabled
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\RegisterAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\RegistrationMaxAddressCount
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\MaxNumberOfAddressesToRegister
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\EnableMulticast
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\Domain
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\DhcpDomain
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableMulticast
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\Password
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\UseDefaultFaultHandlingPolicy
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Print\SynchronousPrintHandleAccessMode
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\1\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\1\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\1\Number
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\2\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\2\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\2\Number
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\3\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\3\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\3\Number
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\4\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\4\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\4\Number
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\QueueState
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Retries
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Retry Delay
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\UseDeviceTsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Branding
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\AllowPersonalCoverPages
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\QueueAgeLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\StartCheapTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\StopCheapTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\UseArchive
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ArchiveFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\SizeQuotaWarn
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\HighWatermark
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\LowWatermark
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ArchiveAgeLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\AutoCreateAccountOnConnect
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\IncomingFaxesArePublic
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\RecipientsLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\NextJobNumber
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\LastUniqueLineId
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\MaxLineCloseTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Client\DebugLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\QueueDirectory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\AllowRemote
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\APIVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\ImageName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\ProviderName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\FriendlyName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1130
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\GUID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\ImageName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\FriendlyName
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1134
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Email\Function Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Email\Guid
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Email\Priority
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Email\FriendlyName
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1131
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Folder\Function Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Folder\Guid
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Folder\Priority
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Folder\FriendlyName
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1132
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Printing\Function Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Printing\Guid
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Printing\Priority
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Printing\FriendlyName
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1133
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\Port
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\UseForMsRoute
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\SMTPAuth
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\Type
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\Server
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\From
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogIncoming
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogOutgoing
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogLimitCriteria
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogSizeLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogAgeLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogLimitReachedAction
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\DBFile
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ManualAnswerDevice
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Security\Descriptor
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\Config\ServerName
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\CLResolutionInterval
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\DisplayInterval
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\SkipWatson
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\Settings\ReflectionInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_MISC
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_CM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_TRACE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_SVC
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_GATEWAY
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_UI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_CONTACT
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_UTIL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_CLUSTER
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_RESOURCE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_TIP
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_XA
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_LOG
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_MTXOCI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_ETWTRACE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_PROXY
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_KTMRM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_VSSBACKUP
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_PERFMON
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_TM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_LU
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Output\TraceFilePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Output\MemoryBufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Output\DebugOutEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\DisableTerminationOnHeapCorruption
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\SysprepInProgress
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\MaxRecoveryTimePerMbInMinutes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Description\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Svcid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Host\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Clsid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\488091f0-bff6-11ce-9de8-00aa00a3f464\DefaultProvider\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Protocol\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Endpoint\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\CustomProperties\LOG\Size\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\AccountName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\SuppressDuplicateDuration
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\NetworkDtcAccess
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\NetworkDtcAccessAdmin
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\NetworkDtcAccessClients
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\NetworkDtcAccessTransactions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\NetworkDtcAccessTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\AllowOnlySecureRpcCalls
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\XaTransactions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\LuTransactions
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\CustomProperties\LOG\Path\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\LoggingOptions\RequestSessionUp
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\LoggingOptions\MaxBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\LoggingOptions\MinBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\LoggingOptions\BufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\LoggingOptions\MaxFileSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\UniqueId
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Active
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\ControlFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Transaction_Transitions\UniqueId
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Transaction_Transitions\Active
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Transaction_Transitions\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Transaction_Transitions\ControlFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\DtcMaxSessions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\DoNotGoIdle
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\DisableTipPassThruCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\MinCheckpointInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\MaxCheckpointInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\WaitForAllXaBranchPrepares
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\SnapshotSecurityDisabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\ServerTcpPort
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\CmCancelRpcAfter
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\CmMaxNumberBindRetries
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\CmMaxIdlePings
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\CmPingFreqSecs
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\CmVerbose
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\RpcQosCapabilities
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\RpcQosIdentity
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\RpcAuthnSvc
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\NumCCcimHistoryEntries
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\11aca493-fed3-47fc-b70f-e87aa0689f70\Description\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Description\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Description\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Svcid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Host\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Clsid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\ced2de40-bff6-11ce-9de8-00aa00a3f464\DefaultProvider\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Protocol\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Endpoint\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\NoTracking
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\9
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureDll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureRoutine
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SecurityProviders
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Name
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Comment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Capabilities
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\RpcId
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Version
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\TokenSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Description\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Svcid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Host\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Clsid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\01366d42-c04e-11d1-b1c0-00c04fc2f3ef\DefaultProvider\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Protocol\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Endpoint\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\OverrideTipHostname
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Svcid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Host\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Clsid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\6407e780-7e5d-11d0-8ce6-00c04fdc877e\DefaultProvider\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Protocol\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Endpoint\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\XaTmMinWarmRecoveryInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\XaTmMaxWarmRecoveryInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\TransactionBridge
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\LogWarnEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\SHARED_MEMORY_MUTEX_TIMEOUT
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\SupportNs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ehRec.EXE\AppId
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\GCStressStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\GCStressStartAtJit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\DisableConfigCache
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\LatestIndex
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\index14a\NIUsageMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\index14a\ILUsageMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\ConfigMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\ConfigString
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\MVID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\EvalationData
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\Status
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\ILDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\NIDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\MissingDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\7950e2c5\19b8f67f\82\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\7950e2c5\19b8f67f\82\Status
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\7950e2c5\19b8f67f\82\Modules
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\7950e2c5\19b8f67f\82\SIG
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\7950e2c5\19b8f67f\82\LastModTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,AMD64
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5CC76543-0F98-47A8-AFA2-208562EF9454}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5CC76543-0F98-47A8-AFA2-208562EF9454}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\5D480935
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95142BF8-5F09-452B-B384-44AF84A500C6}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95142BF8-5F09-452B-B384-44AF84A500C6}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{004965CF-B85C-4207-8703-37B499041028}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FA01D54E-D0C5-418C-8D72-C0976DA13A56}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Recording\UpdatedPowerPolicy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\ConfigMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\ConfigString
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\MVID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\EvalationData
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\Status
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\ILDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\NIDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\MissingDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3d590c3f\59f3b67b\89\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3d590c3f\59f3b67b\89\Status
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3d590c3f\59f3b67b\89\Modules
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3d590c3f\59f3b67b\89\SIG
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3d590c3f\59f3b67b\89\LastModTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3b249b34\157e0c82\78\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3b249b34\157e0c82\78\Status
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3b249b34\157e0c82\78\Modules
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3b249b34\157e0c82\78\SIG
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3b249b34\157e0c82\78\LastModTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Transactions,2.0.0.0,,b77a5c561934e089,AMD64
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\EPG.fullPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\EPG.instance
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\CseOn
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\TailCallOpt
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\PInvokeInline
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\PInvokeCalliOpt
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NewGCCalc
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\TURNOFFDEBUGINFO
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\DisableHotCold
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\clientid
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\DBPOOL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\DBMAXSIZE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\FLUSHINTERVAL
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer\Debug
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{000C101C-0000-0000-C000-000000000046}\ProgId\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{000C101C-0000-0000-C000-000000000046}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\13BAD134
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceDll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceManifest
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceMain
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileMinMemory
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Counter
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Help
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Counter
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Help
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_metadata
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobInactivityTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TimeQuantaLength
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobNoProgressTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobMinimumRetryDelay
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TransferBufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackBegin
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackEnd
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackDuration
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TestFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\ForceFileFlush
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\UseLmCompat
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\IGDSearcherDLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADDA3D55-6F72-4319-BFF9-18600A539B10}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADDA3D55-6F72-4319-BFF9-18600A539B10}\TypeLib\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADDA3D55-6F72-4319-BFF9-18600A539B10}\TypeLib\Version
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DB3442A7-A2E9-4A59-9CB5-F5C1A5D901E5}\1.0\0\win32\(Default)
Show More 1786

Modified Files

C:\Users\user\AppData\Roaming\20503a4e5d0020a4.bin
C:\Windows\sysnative\alg.exe
C:\Windows\sysnative\LogFiles\Scm\9435f817-fed2-454e-88cd-7f78fda62c48
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
C:\Windows\sysnative\config\systemprofile\AppData\Roaming\20503a4e5d0020a4.bin
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
- C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
- C:\Program Files (x86)\WinPcap\rpcapd.exe
- C:\bevevnhfi\bin\execsc.exe
- C:\bevevnhfi\bin\fQWmJDsb.exe
- C:\bevevnhfi\bin\loader.exe
- C:\bevevnhfi\bin\loader_x64.exe
- C:\bevevnhfi\bin\yFFKvqC.exe
- C:\mctrlc\bin\execsc.exe
- C:\mctrlc\bin\FoNQWrug.exe
- C:\mctrlc\bin\loader.exe
- C:\mctrlc\bin\loader_x64.exe
- C:\mctrlc\bin\qyCwoNN.exe
- C:\nidguu\bin\execsc.exe
- C:\nidguu\bin\loader.exe
- C:\nidguu\bin\loader_x64.exe
- C:\nidguu\bin\nURNEMUK.exe
- C:\nidguu\bin\rhfuTcC.exe
- C:\Program Files\7-Zip\7z.exe
- C:\Program Files\7-Zip\7zFM.exe
- C:\Program Files\7-Zip\7zG.exe
- C:\Program Files\7-Zip\Uninstall.exe
- C:\Program Files\DVD Maker\DVDMaker.exe
- C:\Program Files\Internet Explorer\ieinstal.exe
- C:\Program Files\Internet Explorer\ielowutil.exe
- C:\Program Files\Internet Explorer\iexplore.exe
- C:\Program Files\MPC-HC\CrashReporter\sendrpt.exe
- C:\Program Files\MPC-HC\mpc-hc64.exe
- C:\Program Files\MPC-HC\unins000.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\uninst.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxControl.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxDrvInst.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxTray.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxWHQLFake.exe
- C:\Program Files\Sandboxie\32\SbieSvc.exe
- C:\Program Files\Sandboxie\License.exe
- C:\Program Files\Sandboxie\SandboxieBITS.exe
- C:\Program Files\Sandboxie\SandboxieCrypto.exe
- C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe
- C:\Program Files\Sandboxie\SandboxieRpcSs.exe
- C:\Program Files\Sandboxie\SandboxieWUAU.exe
- C:\Program Files\Sandboxie\SbieCtrl.exe
- C:\Program Files\Sandboxie\SbieIni.exe
- C:\Program Files\Sandboxie\SbieSvc.exe
- C:\Program Files\Sandboxie\Start.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\A3DUtility.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroBroker.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32Info.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroTextExtractor.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeCollabSync.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Eula.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\LogTransport2.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AcrobatUpdater.exe
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\ReaderUpdater.exe
- C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdaterInstallMgr.exe
- C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe
- C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe
- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
- C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\ink\mip.exe
- C:\Program Files (x86)\Common Files\microsoft shared\ink\pipanel.exe
- C:\Program Files (x86)\Common Files\microsoft shared\ink\TabTip32.exe
- C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\msinfo32.exe
- C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\OINFOP12.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\ACECNFLT.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSE7.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOICONS.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOXMLED.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\ODSERV.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\OFFDIAG.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\ODEPLOY.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\SETUP.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\armv4i\dxcap.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\armv4i\vsgraphicsremoteengine.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\x86\dxcap.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\x86\vsgraphicsremoteengine.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\SmartTagInstall.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\delegate_execute.exe
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Installer\chrmstp.exe
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Installer\setup.exe
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\nacl64.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdate.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateBroker.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateComRegisterShell64.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateOnDemand.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateSetup.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateWebPlugin.exe
- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\48.0.2564.103\48.0.2564.103_chrome_installer.exe
- C:\Program Files (x86)\IDA\idag.exe
- C:\Program Files (x86)\IDA\idau.exe
- C:\Program Files (x86)\IDA\idaw.exe
- C:\Program Files (x86)\IDA\unins000.exe
- C:\Program Files (x86)\IDA\win32_remote.exe
- C:\Program Files (x86)\IDA\wingraph32.exe
- C:\Program Files (x86)\Internet Explorer\ExtExport.exe
- C:\Program Files (x86)\Internet Explorer\ieinstal.exe
- C:\Program Files (x86)\Internet Explorer\ielowutil.exe
- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\jabswitch.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\java-rmi.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\java.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\javacpl.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\javaw.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\javaws.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\jjs.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2launcher.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\keytool.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\kinit.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\klist.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\ktab.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\orbd.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\pack200.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\policytool.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\rmid.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\rmiregistry.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\servertool.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssvagent.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\tnameserv.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\unpack200.exe
- C:\Program Files (x86)\Mozilla Firefox\crashreporter.exe
- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- C:\Program Files (x86)\Mozilla Firefox\maintenanceservice.exe
- C:\Program Files (x86)\Mozilla Firefox\maintenanceservice_installer.exe
- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
- C:\Program Files (x86)\Mozilla Firefox\plugin-hang-ui.exe
- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
- C:\Program Files (x86)\Mozilla Firefox\updater.exe
- C:\Program Files (x86)\Mozilla Firefox\webapp-uninstaller.exe
- C:\Program Files (x86)\Mozilla Firefox\webapprt-stub.exe
- C:\Program Files (x86)\Mozilla Firefox\wow_helper.exe
- C:\Program Files (x86)\Notepad++\notepad++.exe
- C:\Program Files (x86)\Notepad++\nppIExplorerShell.exe
- C:\Program Files (x86)\Notepad++\uninstall.exe
- C:\Program Files (x86)\Notepad++\updater\gpup.exe
- C:\Program Files (x86)\Safer Networking\FileAlyzer 2\FileAlyzer2.exe
- C:\Program Files (x86)\Safer Networking\FileAlyzer 2\unins000.exe
- C:\Program Files (x86)\Universal Extractor\bin\7z.exe
- C:\Program Files (x86)\Universal Extractor\bin\arc.exe
- C:\Program Files (x86)\Universal Extractor\bin\arj.exe
- C:\Program Files (x86)\Universal Extractor\bin\AspackDie.exe
- C:\Program Files (x86)\Universal Extractor\bin\bin2iso.exe
- C:\Program Files (x86)\Universal Extractor\bin\BOOZ.EXE
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenservicelock.dat
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngenrootstorelock.dat
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngenservicelock.dat
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngenrootstorelock.dat
- \??\PIPE\wkssvc
- \??\pipe\GoogleCrashServices\S-1-5-18
- C:\Windows\System32\config\systemprofile\AppData\Roaming\20503a4e5d0020a4.bin
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
- C:\Windows\sysnative\dllhost.exe
- C:\Windows\ehome\ehrecvr.exe
- C:\Windows\ehome\ehsched.exe
- C:\Windows\sysnative\FXSSVC.exe
- C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
- C:\Windows\sysnative\msdtc.exe
- C:\Windows\sysnative\msiexec.exe
- C:\Windows\SysWOW64\perfhost.exe
- C:\Windows\sysnative\Locator.exe
- C:\Windows\sysnative\snmptrap.exe
- C:\Windows\sysnative\sppsvc.exe
- C:\Windows\sysnative\vds.exe
- C:\Windows\sysnative\VSSVC.exe
- C:\Windows\sysnative\wbengine.exe
- C:\Windows\sysnative\wbem\WmiApSrv.exe
- \??\PIPE\srvsvc
- \Device\LanmanDatagramReceiver
- C:\Windows\Temp\fwtsqmfile00.sqm
- C:\Windows\appcompat\Programs\RecentFileCache.bcf
- C:\Windows\SoftwareDistribution\DataStore\DataStore.edb
- C:\Users\user\AppData\Local\{4F8629F3-210A-481F-A9F0-5806E90DF5B8}
- \??\pipe\GoogleCrashServices\S-1-5-18-x64
- C:\Windows\sysnative\config\systemprofile\AppData\Local\CrashDumps\alg.exe.2472.dmp
- \??\WMIDataDevice
- \??\PIPE\samr
- C:\Windows\sysnative\wbem\repository\WRITABLE.TST
- C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
- C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
- C:\Windows\sysnative\wbem\repository\INDEX.BTR
- \??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
- \??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen_service.lock
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngen_service.log
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\ngenservicelock.dat
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngen_service.lock
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngen_service.log
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\ngenservicelock.dat
- C:\Windows\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{BB1BBD67-ED8C-4496-88C8-4131F3DAEEF5}.crmlog
- C:\Windows\Temp\FXSSVCDebugLogFile.txt
- C:\ProgramData\Microsoft\Windows NT\MSFax
- C:\ProgramData\Microsoft\Windows NT\MSFax\SentItems
- C:\ProgramData\Microsoft\Windows NT\MSFax\Inbox
- C:\Windows\DtcInstall.log
- C:\Windows\sysnative\Msdtc\MSDTC.LOG
- C:\programdata\microsoft\eHome\mcepg2-0\Blocks.mem
- C:\programdata\microsoft\eHome\Counter.mem
- C:\programdata\microsoft\eHome\mcepg2-0\Root.mem
- C:\programdata\microsoft\eHome\mcepg2-0.db
Show More 214

Resolved APIs

user32.dll.wsprintfW
kernel32.dll.GetModuleFileNameW
kernel32.dll.HeapDestroy
kernel32.dll.HeapCreate
kernel32.dll.HeapAlloc
- kernel32.dll.HeapFree
- kernel32.dll.GetProcAddress
- kernel32.dll.GetModuleHandleW
- kernel32.dll.WaitForSingleObject
- kernel32.dll.GetEnvironmentVariableW
- kernel32.dll.GetTempPathW
- kernel32.dll.CreateProcessW
- kernel32.dll.GetFileAttributesW
- kernel32.dll.EnterCriticalSection
- kernel32.dll.LeaveCriticalSection
- kernel32.dll.InitializeCriticalSection
- kernel32.dll.GetWindowsDirectoryW
- kernel32.dll.GetVolumeInformationW
- kernel32.dll.GetComputerNameW
- kernel32.dll.LocalFree
- kernel32.dll.OpenMutexW
- kernel32.dll.CreateMutexW
- kernel32.dll.GetCurrentThread
- kernel32.dll.GetLogicalDriveStringsW
- kernel32.dll.GetDriveTypeW
- kernel32.dll.TerminateThread
- kernel32.dll.GetCurrentProcessId
- kernel32.dll.ProcessIdToSessionId
- kernel32.dll.RaiseException
- kernel32.dll.RtlCaptureContext
- kernel32.dll.RtlLookupFunctionEntry
- kernel32.dll.RtlVirtualUnwind
- kernel32.dll.IsDebuggerPresent
- kernel32.dll.UnhandledExceptionFilter
- kernel32.dll.SetUnhandledExceptionFilter
- kernel32.dll.TerminateProcess
- kernel32.dll.IsProcessorFeaturePresent
- kernel32.dll.SetLastError
- kernel32.dll.GetCurrentThreadId
- kernel32.dll.GetACP
- kernel32.dll.GetStringTypeW
- kernel32.dll.InitializeCriticalSectionAndSpinCount
- kernel32.dll.TlsAlloc
- kernel32.dll.TlsGetValue
- kernel32.dll.TlsSetValue
- kernel32.dll.TlsFree
- kernel32.dll.GetTickCount
- kernel32.dll.FreeLibrary
- kernel32.dll.LoadLibraryExW
- kernel32.dll.LCMapStringW
- kernel32.dll.DeleteCriticalSection
- kernel32.dll.IsValidCodePage
- kernel32.dll.GetOEMCP
- kernel32.dll.GetCPInfo
- kernel32.dll.ExitProcess
- kernel32.dll.GetModuleHandleExW
- kernel32.dll.GetProcessHeap
- kernel32.dll.HeapReAlloc
- kernel32.dll.FindFirstFileW
- kernel32.dll.FindClose
- kernel32.dll.FindNextFileW
- kernel32.dll.CreateFileW
- kernel32.dll.GetFileTime
- kernel32.dll.GetFileSizeEx
- kernel32.dll.SetFileTime
- kernel32.dll.lstrcmpiW
- kernel32.dll.GetFileSize
- kernel32.dll.WriteFile
- kernel32.dll.GetLastError
- kernel32.dll.GetCurrentProcess
- kernel32.dll.WideCharToMultiByte
- kernel32.dll.MultiByteToWideChar
- kernel32.dll.SetFilePointerEx
- kernel32.dll.ReadFile
- kernel32.dll.VirtualFree
- kernel32.dll.VirtualAlloc
- kernel32.dll.CreateThread
- kernel32.dll.CloseHandle
- kernel32.dll.ReleaseMutex
- kernel32.dll.Sleep
- kernel32.dll.ExitThread
- kernel32.dll.GetUserDefaultLangID
- kernel32.dll.WriteConsoleW
- kernel32.dll.GetConsoleMode
- kernel32.dll.GetConsoleCP
- kernel32.dll.FlushFileBuffers
- kernel32.dll.SetStdHandle
- kernel32.dll.GetFileType
- kernel32.dll.GetStdHandle
- kernel32.dll.GetSystemDefaultLangID
- kernel32.dll.GetUserDefaultUILanguage
- kernel32.dll.FreeEnvironmentStringsW
- kernel32.dll.GetEnvironmentStringsW
- kernel32.dll.GetCommandLineW
- kernel32.dll.GetCommandLineA
- kernel32.dll.FindNextFileA
- kernel32.dll.FindFirstFileExA
- kernel32.dll.GetModuleFileNameA
- kernel32.dll.InterlockedFlushSList
- kernel32.dll.RtlUnwindEx
- kernel32.dll.InitializeSListHead
- kernel32.dll.QueryPerformanceCounter
- kernel32.dll.GetStartupInfoW
- kernel32.dll.GetSystemTimeAsFileTime
- kernel32.dll.HeapSize
- advapi32.dll.GetNamedSecurityInfoW
- advapi32.dll.GetSidSubAuthorityCount
- advapi32.dll.GetSidSubAuthority
- advapi32.dll.OpenProcessToken
- advapi32.dll.StartServiceW
- advapi32.dll.QueryServiceConfigW
- advapi32.dll.OpenServiceW
- advapi32.dll.ChangeServiceConfigW
- advapi32.dll.GetExplicitEntriesFromAclW
- advapi32.dll.AdjustTokenPrivileges
- advapi32.dll.LookupPrivilegeValueW
- advapi32.dll.OpenThreadToken
- advapi32.dll.SetNamedSecurityInfoW
- advapi32.dll.GetTokenInformation
- advapi32.dll.CloseServiceHandle
- advapi32.dll.EnumServicesStatusExW
- advapi32.dll.OpenSCManagerW
- advapi32.dll.InitializeSecurityDescriptor
- advapi32.dll.SetSecurityDescriptorDacl
- advapi32.dll.AllocateAndInitializeSid
- advapi32.dll.SetEntriesInAclW
- advapi32.dll.FreeSid
- advapi32.dll.GetUserNameW
- winhttp.dll.WinHttpQueryDataAvailable
- winhttp.dll.WinHttpOpen
- winhttp.dll.WinHttpAddRequestHeaders
- winhttp.dll.WinHttpSendRequest
- winhttp.dll.WinHttpConnect
- winhttp.dll.WinHttpOpenRequest
- winhttp.dll.WinHttpReceiveResponse
- winhttp.dll.WinHttpReadData
- winhttp.dll.WinHttpCloseHandle
- crypt32.dll.CryptStringToBinaryA
- ntdll.dll.NtAdjustPrivilegesToken
- ntdll.dll.RtlAdjustPrivilege
- ntdll.dll.NtQuerySystemInformation
- ntdll.dll.RtlInitUnicodeString
- ntdll.dll.RtlEqualUnicodeString
- ntdll.dll.NtOpenThread
- ntdll.dll.NtClose
- ntdll.dll.NtOpenThreadTokenEx
- ntdll.dll.RtlIpv4AddressToStringW
- ntdll.dll.NtImpersonateThread
- mpr.dll.WNetEnumResourceW
- mpr.dll.WNetCancelConnectionW
- mpr.dll.WNetOpenEnumW
- mpr.dll.WNetCloseEnum
- mpr.dll.WNetAddConnectionW
- secur32.dll.LsaFreeReturnBuffer
- secur32.dll.LsaGetLogonSessionData
- secur32.dll.LsaEnumerateLogonSessions
- shlwapi.dll.StrStrIW
- shlwapi.dll.PathUnquoteSpacesW
- shlwapi.dll.PathRemoveArgsW
- dnsapi.dll.DnsFree
- dnsapi.dll.DnsQuery_W
- kernel32.dll.FlsAlloc
- kernel32.dll.FlsSetValue
- kernel32.dll.FlsGetValue
- kernel32.dll.LCMapStringEx
- kernel32.dll.SortGetHandle
- kernel32.dll.SortCloseHandle
- kernel32.dll.InitializeCriticalSectionEx
- kernel32.dll.AreFileApisANSI
- ntmarta.dll.GetMartaExtensionInterface
- gdi32.dll.GetLayout
- gdi32.dll.GdiRealizationInfo
- gdi32.dll.FontIsLinked
- advapi32.dll.RegOpenKeyExW
- advapi32.dll.RegQueryInfoKeyW
- gdi32.dll.GetTextFaceAliasW
- advapi32.dll.RegEnumValueW
- advapi32.dll.RegCloseKey
- advapi32.dll.RegQueryValueExW
- gdi32.dll.GetFontAssocStatus
- advapi32.dll.RegQueryValueExA
- advapi32.dll.RegEnumKeyExW
- uxtheme.dll.ThemeInitApiHook
- user32.dll.IsProcessDPIAware
- dwmapi.dll.DwmIsCompositionEnabled
- comctl32.dll.RegisterClassNameW
- uxtheme.dll.EnableThemeDialogTexture
- uxtheme.dll.OpenThemeData
- uxtheme.dll.GetThemeBool
- gdi32.dll.GdiIsMetaPrintDC
- ole32.dll.CoInitializeEx
- ole32.dll.CoUninitialize
- cryptbase.dll.SystemFunction036
- ole32.dll.CoRegisterInitializeSpy
- ole32.dll.CoRevokeInitializeSpy
- uxtheme.dll.BufferedPaintInit
- uxtheme.dll.BufferedPaintRenderAnimation
- uxtheme.dll.BeginBufferedAnimation
- uxtheme.dll.IsThemeBackgroundPartiallyTransparent
- uxtheme.dll.DrawThemeParentBackground
- uxtheme.dll.DrawThemeBackground
- uxtheme.dll.GetThemeBackgroundContentRect
- uxtheme.dll.DrawThemeText
- uxtheme.dll.EndBufferedAnimation
- uxtheme.dll.CloseThemeData
- uxtheme.dll.BufferedPaintStopAllAnimations
- uxtheme.dll.BufferedPaintUnInit
- ole32.dll.CoRegisterClassObject
- ole32.dll.CLSIDFromOle1Class
- clbcatq.dll.GetCatalogObject
- clbcatq.dll.GetCatalogObject2
- sechost.dll.LookupAccountNameLocalW
- advapi32.dll.LookupAccountSidW
- sechost.dll.LookupAccountSidLocalW
- cryptsp.dll.CryptAcquireContextW
- cryptsp.dll.CryptGenRandom
- ole32.dll.NdrOleInitializeExtension
- ole32.dll.CoGetClassObject
- ole32.dll.CoGetMarshalSizeMax
- ole32.dll.CoMarshalInterface
- ole32.dll.CoUnmarshalInterface
- ole32.dll.StringFromIID
- ole32.dll.CoGetPSClsid
- ole32.dll.CoTaskMemAlloc
- ole32.dll.CoTaskMemFree
- ole32.dll.CoCreateInstance
- ole32.dll.CoReleaseMarshalData
- ole32.dll.DcomChannelSetHResult
- rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
- kernel32.dll.HeapSetInformation
- mscoree.dll.CorBindToRuntimeHost
- kernel32.dll.FlsFree
- kernel32.dll.CreateEventExW
- kernel32.dll.CreateSemaphoreExW
- kernel32.dll.SetThreadStackGuarantee
- kernel32.dll.CreateThreadpoolTimer
- kernel32.dll.SetThreadpoolTimer
- kernel32.dll.WaitForThreadpoolTimerCallbacks
- kernel32.dll.CloseThreadpoolTimer
- kernel32.dll.CreateThreadpoolWait
- kernel32.dll.SetThreadpoolWait
- kernel32.dll.CloseThreadpoolWait
- kernel32.dll.FlushProcessWriteBuffers
- kernel32.dll.FreeLibraryWhenCallbackReturns
- kernel32.dll.GetCurrentProcessorNumber
- kernel32.dll.GetLogicalProcessorInformation
- kernel32.dll.CreateSymbolicLinkW
- kernel32.dll.EnumSystemLocalesEx
- kernel32.dll.CompareStringEx
- kernel32.dll.GetDateFormatEx
- kernel32.dll.GetLocaleInfoEx
- kernel32.dll.GetTimeFormatEx
- kernel32.dll.GetUserDefaultLocaleName
- kernel32.dll.IsValidLocaleName
- kernel32.dll.GetTickCount64
- advapi32.dll.EventRegister
- mscoree.dll.#142
- mscoreei.dll.RegisterShimImplCallback
- mscoreei.dll.OnShimDllMainCalled
- mscoreei.dll.CorBindToRuntimeHost
- shlwapi.dll.UrlIsW
- version.dll.GetFileVersionInfoSizeW
- version.dll.GetFileVersionInfoW
- version.dll.VerQueryValueW
- clr.dll.SetRuntimeInfo
- clr.dll.DllGetClassObjectInternal
- advapi32.dll.RegDeleteValueW
- advapi32.dll.ConvertStringSidToSidW
- advapi32.dll.IsValidSid
- advapi32.dll.GetLengthSid
- advapi32.dll.CopySid
- advapi32.dll.LookupAccountNameW
- advapi32.dll.InitializeAcl
- advapi32.dll.AddAccessAllowedAce
- advapi32.dll.CryptAcquireContextW
- advapi32.dll.CryptGenRandom
- advapi32.dll.CryptReleaseContext
- cryptsp.dll.CryptReleaseContext
- ntdll.dll.NtQueryInformationThread
- kernel32.dll.CreateWaitableTimerExW
- kernel32.dll.SetWaitableTimerEx
- advapi32.dll.RegisterEventSourceW
- advapi32.dll.ReportEventW
- advapi32.dll.DeregisterEventSource
- kernel32.dll.RtlUnwind
- advapi32.dll.StartServiceCtrlDispatcherW
- advapi32.dll.RegisterServiceCtrlHandlerExW
- advapi32.dll.SetServiceStatus
- goopdate.dll.DllEntry
- kernel32.dll.RtlCaptureStackBackTrace
- wkscli.dll.NetWkstaGetInfo
- cscapi.dll.CscNetApiGetInterface
- kernel32.dll.CreateMutexExW
- dbghelp.dll.MiniDumpWriteDump
- rpcrt4.dll.UuidCreate
- kernel32.dll.GetProcessId
- setupapi.dll.CM_Get_Device_Interface_List_Size_ExW
- setupapi.dll.CM_Get_Device_Interface_List_ExW
- oleaut32.dll.#500
- advapi32.dll.UnregisterTraceGuids
- comctl32.dll.#321
- kernel32.dll.IsWow64Process
- shlwapi.dll.PathFindFileNameW
- shlwapi.dll.PathFindExtensionW
- kernel32.dll.Wow64DisableWow64FsRedirection
- kernel32.dll.Wow64RevertWow64FsRedirection
- ws2_32.dll.getaddrinfo
- ws2_32.dll.getnameinfo
- ws2_32.dll.freeaddrinfo
- wbemcore.dll.Reinitialize
- pcwum.dll.PerfDeleteInstance
- pcwum.dll.PerfStopProvider
- advapi32.dll.WmiCloseBlock
- propsys.dll.PropVariantToVariant
- ole32.dll.CoDisconnectObject
- wbemcore.dll.Shutdown
- advapi32.dll.RegDeleteKeyExW
- kernel32.dll.RegDeleteValueW
- oleaut32.dll.#9
- wtsapi32.dll.WTSQueryUserToken
- wtsapi32.dll.WTSQuerySessionInformationW
- kernel32.dll.WTSGetActiveConsoleSessionId
- winsta.dll.WinStationQueryInformationW
- advapi32.dll.CreateWellKnownSid
- rpcrt4.dll.RpcStringBindingComposeW
- rpcrt4.dll.RpcBindingFromStringBindingW
- rpcrt4.dll.RpcStringFreeW
- rpcrt4.dll.RpcBindingSetAuthInfoExW
- rpcrt4.dll.NdrClientCall2
- rpcrt4.dll.RpcBindingFree
- psapi.dll.GetProcessImageFileNameW
- winhttp.dll.WinHttpCheckPlatform
- winhttp.dll.WinHttpCrackUrl
- winhttp.dll.WinHttpCreateUrl
- winhttp.dll.WinHttpDetectAutoProxyConfigUrl
- winhttp.dll.WinHttpGetIEProxyConfigForCurrentUser
- winhttp.dll.WinHttpGetDefaultProxyConfiguration
- winhttp.dll.WinHttpGetProxyForUrl
- winhttp.dll.WinHttpQueryAuthSchemes
- winhttp.dll.WinHttpQueryHeaders
- winhttp.dll.WinHttpQueryOption
- winhttp.dll.WinHttpSetDefaultProxyConfiguration
- winhttp.dll.WinHttpSetCredentials
- winhttp.dll.WinHttpSetOption
- winhttp.dll.WinHttpSetStatusCallback
- winhttp.dll.WinHttpSetTimeouts
- winhttp.dll.WinHttpWriteData
- sspicli.dll.GetUserNameExW
- ole32.dll.CreateBindCtx
- ole32.dll.CoGetApartmentType
- comctl32.dll.#236
- oleaut32.dll.#6
- ole32.dll.CoGetMalloc
- comctl32.dll.#320
- comctl32.dll.#324
- comctl32.dll.#323
- comctl32.dll.#388
- comctl32.dll.#328
- comctl32.dll.#334
- advapi32.dll.RegEnumKeyW
- oleaut32.dll.#2
- comctl32.dll.#332
- comctl32.dll.#386
- advapi32.dll.IsTextUnicode
- comctl32.dll.#338
- comctl32.dll.#339
- shell32.dll.#102
- advapi32.dll.SetThreadToken
- advapi32.dll.RegDeleteTreeA
- advapi32.dll.RegDeleteTreeW
- nsi.dll.NsiAllocateAndGetTable
- cfgmgr32.dll.CM_Open_Class_Key_ExW
- iphlpapi.dll.ConvertInterfaceGuidToLuid
- iphlpapi.dll.GetIfEntry2
- iphlpapi.dll.GetIpForwardTable2
- iphlpapi.dll.GetIpNetEntry2
- iphlpapi.dll.FreeMibTable
- nsi.dll.NsiFreeTable
- advapi32.dll.RevertToSelf
- shlwapi.dll.StrCmpNW
- shlwapi.dll.StrStrA
- shlwapi.dll.UrlUnescapeA
- shlwapi.dll.#153
- ws2_32.dll.GetAddrInfoW
- wersvc.dll.ServiceMain
- wersvc.dll.SvchostPushServiceGlobals
- advapi32.dll.RegGetValueW
- sechost.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
- faultrep.dll.WerpInitiateCrashReporting
- wer.dll.WerpCreateMachineStore
- shell32.dll.SHGetFolderPathEx
- ole32.dll.StringFromGUID2
- profapi.dll.#104
- userenv.dll.CreateEnvironmentBlock
- sechost.dll.ConvertSidToStringSidW
- userenv.dll.DestroyEnvironmentBlock
- imm32.dll.ImmDisableIME
- psapi.dll.GetModuleFileNameExW
- wer.dll.WerpCreateIntegratorReportId
- wer.dll.WerReportCreate
- wer.dll.WerpSetIntegratorReportId
- wer.dll.WerReportSetParameter
- dbgeng.dll.DebugCreate
- ntdll.dll.CsrGetProcessId
- ntdll.dll.DbgBreakPoint
- ntdll.dll.DbgPrint
- ntdll.dll.DbgPrompt
- ntdll.dll.DbgUiConvertStateChangeStructure
- ntdll.dll.DbgUiGetThreadDebugObject
- ntdll.dll.DbgUiIssueRemoteBreakin
- ntdll.dll.DbgUiSetThreadDebugObject
- ntdll.dll.NtAllocateVirtualMemory
- ntdll.dll.NtCreateDebugObject
- ntdll.dll.NtCreateFile
- ntdll.dll.NtDebugActiveProcess
- ntdll.dll.NtDebugContinue
- ntdll.dll.NtFreeVirtualMemory
- ntdll.dll.NtOpenProcess
- ntdll.dll.NtQueryInformationProcess
- ntdll.dll.NtQueryMutant
- ntdll.dll.NtQueryObject
- ntdll.dll.NtRemoveProcessDebug
- ntdll.dll.NtResumeThread
- ntdll.dll.NtSetInformationDebugObject
- ntdll.dll.NtSetInformationProcess
- ntdll.dll.NtSystemDebugControl
- ntdll.dll.NtWaitForDebugEvent
- ntdll.dll.RtlAnsiStringToUnicodeString
- ntdll.dll.RtlCreateProcessParameters
- ntdll.dll.RtlCreateUserProcess
- ntdll.dll.RtlDestroyProcessParameters
- ntdll.dll.RtlDosPathNameToNtPathName_U
- ntdll.dll.RtlFindMessage
- ntdll.dll.RtlFreeHeap
- ntdll.dll.RtlFreeUnicodeString
- ntdll.dll.RtlGetFunctionTableListHead
- ntdll.dll.RtlGetUnloadEventTrace
- ntdll.dll.RtlGetUnloadEventTraceEx
- ntdll.dll.RtlInitAnsiString
- ntdll.dll.RtlTryEnterCriticalSection
- ntdll.dll.RtlUnicodeStringToAnsiString
- ntdll.dll.NtOpenProcessToken
- ntdll.dll.NtOpenThreadToken
- ntdll.dll.NtQueryInformationToken
- kernel32.dll.CloseProfileUserMapping
- kernel32.dll.CreateToolhelp32Snapshot
- kernel32.dll.DebugActiveProcessStop
- kernel32.dll.DebugBreak
- kernel32.dll.DebugBreakProcess
- kernel32.dll.DebugSetProcessKillOnExit
- kernel32.dll.Module32First
- kernel32.dll.Module32FirstW
- kernel32.dll.Module32Next
- kernel32.dll.Module32NextW
- kernel32.dll.OpenThread
- kernel32.dll.Process32First
- kernel32.dll.Process32FirstW
- kernel32.dll.Process32Next
- kernel32.dll.Process32NextW
- kernel32.dll.SetProcessShutdownParameters
- kernel32.dll.Thread32First
- kernel32.dll.Thread32Next
- kernel32.dll.GetTimeZoneInformation
- kernel32.dll.DuplicateHandle
- kernel32.dll.Wow64GetThreadSelectorEntry
- advapi32.dll.ControlService
- advapi32.dll.CreateServiceA
- advapi32.dll.CreateServiceW
- advapi32.dll.DeleteService
- advapi32.dll.EnumServicesStatusExA
- advapi32.dll.GetEventLogInformation
- advapi32.dll.OpenSCManagerA
- advapi32.dll.OpenServiceA
- advapi32.dll.StartServiceA
- version.dll.GetFileVersionInfoSizeExW
- version.dll.GetFileVersionInfoExW
- dbghelp.dll.WinDbgExtensionDllInit
- dbghelp.dll.ExtensionApiVersion
- wer.dll.WerpSetDynamicParameter
- wer.dll.WerReportAddDump
- wer.dll.WerpSetCallBack
- wer.dll.WerReportSetUIOption
- wer.dll.WerpAddRegisteredDataToReport
- wer.dll.WerReportSubmit
- user32.dll.LoadStringW
- advapi32.dll.CheckTokenMembership
- user32.dll.GetProcessWindowStation
- user32.dll.GetThreadDesktop
- user32.dll.GetUserObjectInformationW
- sensapi.dll.IsNetworkAlive
- rpcrt4.dll.NdrClientCall3
- user32.dll.CharUpperW
- kernel32.dll.GetLongPathNameA
- kernel32.dll.GetLongPathNameW
- kernel32.dll.GetProcessTimes
- advapi32.dll.RegOpenKeyExA
- powrprof.dll.CallNtPowerInformation
- psapi.dll.EnumProcessModules
- version.dll.GetFileVersionInfoSizeA
- version.dll.GetFileVersionInfoA
- version.dll.VerQueryValueA
- wer.dll.WerReportCloseHandle
- user32.dll.MsgWaitForMultipleObjects
- advapi32.dll.DuplicateToken
- wer.dll.WerpFreeString
- ole32.dll.CoInitializeSecurity
- wmisvc.dll.ServiceMain
- kernel32.dll.RegOpenKeyExW
- sechost.dll.RegisterServiceCtrlHandlerExW
- sechost.dll.SetServiceStatus
- advapi32.dll.WmiOpenBlock
- vssapi.dll.CreateWriter
- samcli.dll.NetLocalGroupGetMembers
- samlib.dll.SamConnect
- samlib.dll.SamOpenDomain
- samlib.dll.SamLookupNamesInDomain
- samlib.dll.SamOpenAlias
- samlib.dll.SamFreeMemory
- samlib.dll.SamCloseHandle
- samlib.dll.SamGetMembersInAlias
- netutils.dll.NetApiBufferFree
- samlib.dll.SamEnumerateDomainsInSamServer
- samlib.dll.SamLookupDomainInSamServer
- ole32.dll.CoCreateGuid
- ole32.dll.StringFromCLSID
- oleaut32.dll.#4
- oleaut32.dll.#7
- propsys.dll.VariantToPropVariant
- wbemsvc.dll.DllGetClassObject
- wbemsvc.dll.DllCanUnloadNow
- authz.dll.AuthzInitializeContextFromToken
- authz.dll.AuthzInitializeObjectAccessAuditEvent2
- authz.dll.AuthzAccessCheck
- authz.dll.AuthzFreeAuditEvent
- authz.dll.AuthzFreeContext
- authz.dll.AuthzInitializeResourceManager
- authz.dll.AuthzFreeResourceManager
- rpcrt4.dll.RpcBindingCreateW
- rpcrt4.dll.RpcBindingBind
- rpcrt4.dll.I_RpcMapWin32Status
- advapi32.dll.EventUnregister
- advapi32.dll.EventWrite
- kernel32.dll.RegCloseKey
- kernel32.dll.RegSetValueExW
- kernel32.dll.RegQueryValueExW
- wmisvc.dll.IsImproperShutdownDetected
- wevtapi.dll.EvtRender
- wevtapi.dll.EvtNext
- wevtapi.dll.EvtClose
- wevtapi.dll.EvtQuery
- wevtapi.dll.EvtCreateRenderContext
- rpcrt4.dll.RpcBindingSetOption
- ole32.dll.CoCreateFreeThreadedMarshaler
- ole32.dll.CreateStreamOnHGlobal
- advapi32.dll.RegCreateKeyExW
- advapi32.dll.RegSetValueExW
- kernelbase.dll.InitializeAcl
- kernelbase.dll.AddAce
- kernel32.dll.IsThreadAFiber
- kernel32.dll.OpenProcessToken
- kernelbase.dll.GetTokenInformation
- kernelbase.dll.DuplicateTokenEx
- kernelbase.dll.AdjustTokenPrivileges
- kernel32.dll.SetThreadToken
- kernelbase.dll.CheckTokenMembership
- ole32.dll.CLSIDFromString
- kernelbase.dll.AllocateAndInitializeSid
- oleaut32.dll.#285
- advapi32.dll.RegOpenKeyW
- oleaut32.dll.#17
- oleaut32.dll.#20
- oleaut32.dll.#19
- oleaut32.dll.#25
- authz.dll.AuthzInitializeContextFromSid
- ole32.dll.CoGetCallContext
- ole32.dll.CoImpersonateClient
- ole32.dll.CoRevertToSelf
- oleaut32.dll.#8
- ole32.dll.CoSwitchCallContext
- oleaut32.dll.#286
- mscorsvc.dll.CorGetSvc
- kernel32.dll.VerSetConditionMask
- kernel32.dll.VerifyVersionInfoW
- mscoree.dll.CorIsLatestSvc
- mscoreei.dll.CorIsLatestSvc
- kernel32.dll.GetThreadPreferredUILanguages
- kernel32.dll.SetThreadPreferredUILanguages
- kernel32.dll.LocaleNameToLCID
- kernel32.dll.LCIDToLocaleName
- kernel32.dll.GetSystemDefaultLocaleName
- fastprox.dll.DllGetClassObject
- fastprox.dll.DllCanUnloadNow
- oleaut32.dll.#283
- oleaut32.dll.#284
- sechost.dll.StartServiceCtrlDispatcherW
- sechost.dll.RegisterServiceCtrlHandlerW
- comsvcs.dll.CoLoadServices
- clbcatq.dll.CheckMemoryGates
- advapi32.dll.QueryTraceW
- advapi32.dll.RegNotifyChangeKeyValue
- ntdll.dll.EtwSetMark
- cfgmgr32.dll.CMP_RegisterNotification
- sechost.dll.I_ScPnPGetServiceName
- cfgmgr32.dll.CM_MapCrToWin32Err
- user32.dll.UnregisterDeviceNotification
- user32.dll.RegisterDeviceNotificationW
- msdri.dll.DllGetClassObject
- msdri.dll.DllCanUnloadNow
- cfgmgr32.dll.CMP_UnregisterNotification
- rpcrt4.dll.RpcAsyncCancelCall
- rpcrt4.dll.RpcAsyncCompleteCall
- ehproxy.dll.DllGetClassObject
- ehproxy.dll.DllCanUnloadNow
- user32.dll.IsWindow
- user32.dll.GetWindowThreadProcessId
- winsta.dll.WinStationRegisterConsoleNotification
- rpcrt4.dll.RpcStringBindingComposeA
- rpcrt4.dll.RpcBindingFromStringBindingA
- rpcrt4.dll.RpcStringFreeA
- iphlpapi.dll.GetAdaptersAddresses
- bcryptprimitives.dll.GetHashInterface
- slc.dll.SLGetWindowsInformationDWORD
- rpcrt4.dll.UuidFromStringW
- radarrs.dll.WdiDiagnosticModuleMain
- radarrs.dll.WdiHandleInstance
- radarrs.dll.WdiGetDiagnosticModuleInterfaceVersion
- comctl32.dll.LoadIconWithScaleDown
- ntdll.dll.RtlRunEncodeUnicodeString
- ntdll.dll.RtlRunDecodeUnicodeString
- duser.dll.InitGadgets
- user32.dll.RegisterMessagePumpHook
- uxtheme.dll.IsThemeActive
- duser.dll.CreateGadget
- duser.dll.SetGadgetMessageFilter
- duser.dll.SetGadgetStyle
- duser.dll.SetGadgetRootInfo
- uxtheme.dll.IsAppThemed
- uxtheme.dll.GetThemeAppProperties
- xmllite.dll.CreateXmlReader
- xmllite.dll.CreateXmlReaderInputWithEncodingName
- uxtheme.dll.GetThemeMargins
- uxtheme.dll.GetThemeFont
- uxtheme.dll.GetThemeColor
- uxtheme.dll.GetThemeMetric
- duser.dll.SetGadgetParent
- duser.dll.GetDUserModule
- duser.dll.FindStdColor
- duser.dll.AttachWndProcW
- duser.dll.GetGadgetRect
- duser.dll.GetGadgetRgn
- duser.dll.GetGadgetTicket
- duser.dll.InvalidateGadget
- duser.dll.GetGadgetFocus
- uxtheme.dll.GetThemeTextExtent
- uxtheme.dll.GetThemeBackgroundExtent
- duser.dll.SetGadgetFocus
- duser.dll.DUserSendEvent
- duser.dll.SetGadgetRect
- uxtheme.dll.#47
- duser.dll.ForwardGadgetMessage
- duser.dll.SetGadgetFocusEx
- duser.dll.DisableContainerHwnd
- duser.dll.DUserFlushMessages
- duser.dll.DUserFlushDeferredMessages
- duser.dll.DeleteHandle
- user32.dll.UnregisterMessagePumpHook
- mtxclu.dll.MtxCluIsSameNodeW
- sechost.dll.OpenSCManagerW
- sechost.dll.OpenServiceW
- sechost.dll.CloseServiceHandle
- secur32.dll.InitSecurityInterfaceW
- cryptsp.dll.SystemFunction035
- shlwapi.dll.PathCanonicalizeW
- mscoreei.dll.CorBindToRuntimeEx
- msvcrt.dll._set_error_mode
- msvcrt.dll.?set_terminate@@YAP6AXXZP6AXXZ@Z
- kernel32.dll.FindActCtxSectionStringW
- kernel32.dll.GetSystemWindowsDirectoryW
- mscoree.dll.GetProcessExecutableHeap
- mscoreei.dll.GetProcessExecutableHeap
- mscorwks.dll.DllGetClassObjectInternal
- mscorwks.dll.GetCLRFunction
- advapi32.dll.RegisterTraceGuidsW
- advapi32.dll.GetTraceLoggerHandle
- advapi32.dll.GetTraceEnableLevel
- advapi32.dll.GetTraceEnableFlags
- advapi32.dll.TraceEvent
- mscoree.dll.IEE
- mscoreei.dll.IEE
- mscorwks.dll.IEE
- mscoree.dll.GetStartupFlags
- mscoreei.dll.GetStartupFlags
- mscoree.dll.GetHostConfigurationFile
- mscoreei.dll.GetHostConfigurationFile
- mscoreei.dll.GetCORVersion
- mscoree.dll.GetCORSystemDirectory
- mscoreei.dll.GetCORSystemDirectory_RetAddr
- mscoreei.dll.CreateConfigStream
- ntdll.dll.RtlVirtualUnwind
- kernel32.dll.AddVectoredContinueHandler
- kernel32.dll.RemoveVectoredContinueHandler
- advapi32.dll.ConvertSidToStringSidW
- shell32.dll.SHGetFolderPathW
- kernel32.dll.GetWriteWatch
- kernel32.dll.ResetWriteWatch
- kernel32.dll.CreateMemoryResourceNotification
- kernel32.dll.QueryMemoryResourceNotification
- kernel32.dll.GlobalMemoryStatusEx
- setupapi.dll.SetupDiGetClassDevsA
- setupapi.dll.SetupDiEnumDeviceInterfaces
- setupapi.dll.SetupDiDestroyDeviceInfoList
- wintrust.dll.WinVerifyTrust
- rasapi32.dll.RasConnectionNotificationW
- rasapi32.dll.RasDeleteEntryW
- rasapi32.dll.RasDialW
- rasapi32.dll.RasEnumEntriesW
- rasapi32.dll.RasEnumConnectionsW
- rasapi32.dll.RasGetAutodialEnableW
- rasapi32.dll.RasGetAutodialParamW
- rasapi32.dll.RasGetConnectStatusW
- rasapi32.dll.RasGetCredentialsW
- rasapi32.dll.RasGetEntryDialParamsW
- rasapi32.dll.RasGetErrorStringW
- rasapi32.dll.RasGetHport
- rasapi32.dll.RasGetProjectionInfoW
- rasapi32.dll.RasGetSubEntryHandleW
- rasapi32.dll.RasHangUpW
- rasapi32.dll.RasSetAutodialEnableW
- rasapi32.dll.RasSetAutodialParamW
- rasapi32.dll.RasSetCredentialsW
- rasapi32.dll.RasSetOldPassword
- rasapi32.dll.RasGetCountryInfoW
- rasapi32.dll.RasInvokeEapUI
- rasapi32.dll.RasSetEapUserDataW
- rasapi32.dll.RasGetEntryPropertiesW
- rasapi32.dll.RasValidateEntryNameW
- rasapi32.dll.RasWriteSharedPbkOptions
- rasapi32.dll.RasGetAutodialAddressW
- rasapi32.dll.DwEnumEntryDetails
- mscoreei.dll._CorDllMain
- mscoree.dll.GetTokenForVTableEntry
- mscoree.dll.SetTargetForVTableEntry
- mscoree.dll.GetTargetForVTableEntry
- mscoreei.dll.GetTokenForVTableEntry
- mscoreei.dll.SetTargetForVTableEntry
- mscoreei.dll.GetTargetForVTableEntry
- kernel32.dll.LocalAlloc
- cryptsp.dll.CryptHashData
- cryptsp.dll.CryptGetHashParam
- cryptsp.dll.CryptDestroyHash
- ole32.dll.CoGetContextToken
- shfolder.dll.SHGetFolderPathW
- kernel32.dll.GetFullPathNameW
- kernel32.dll.CreateEventW
- mscorjit.dll.getJit
- kernel32.dll.SetErrorMode
- kernel32.dll.GetFileAttributesExW
- advapi32.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
- kernel32.dll.CreateDirectoryW
- mscoree.dll.ND_WI4
- mscoreei.dll.ND_WI4
- mscoree.dll.ND_WI8
- mscoreei.dll.ND_WI8
- kernel32.dll.DeleteFileW
- kernel32.dll.CreateFileMappingW
- kernel32.dll.MapViewOfFile
- kernel32.dll.WaitForMultipleObjects
- oleaut32.dll.SysAllocStringLen
- sqlcese30.dll.DllGetClassObject
- sqlceqp30.dll.DllGetClassObject
- advapi32.dll.CryptAcquireContextA
- advapi32.dll.CryptCreateHash
- advapi32.dll.CryptHashData
- advapi32.dll.CryptDuplicateHash
- advapi32.dll.CryptDestroyHash
- advapi32.dll.CryptDeriveKey
- advapi32.dll.CryptDestroyKey
- advapi32.dll.CryptEncrypt
- advapi32.dll.CryptDecrypt
- kernel32.dll.GetNLSVersion
- cryptsp.dll.CryptDuplicateHash
- cryptsp.dll.CryptDeriveKey
- cryptsp.dll.CryptDestroyKey
- lpk.dll.LpkEditControl
- comctl32.dll.InitCommonControlsEx
- kernel32.dll.CreateWaitableTimerW
- kernel32.dll.SetWaitableTimer
- msi.dll.QueryInstanceCount
- qmgr.dll.ServiceMain
- ws2_32.dll.#115
- ws2_32.dll.WSASocketW
- ws2_32.dll.WSAIoctl
- ws2_32.dll.#111
- bitsigd.dll.InitializeEx
- upnp.dll.DllGetClassObject
- upnp.dll.DllCanUnloadNow
- oleaut32.dll.DllGetClassObject
- oleaut32.dll.DllCanUnloadNow
- sxs.dll.SxsOleAut32MapIIDToProxyStubCLSID
- advapi32.dll.RegQueryValueW
- oleaut32.dll.BSTR_UserSize
- oleaut32.dll.BSTR_UserMarshal
- oleaut32.dll.BSTR_UserUnmarshal
- oleaut32.dll.BSTR_UserFree
- oleaut32.dll.VARIANT_UserSize
- oleaut32.dll.VARIANT_UserMarshal
- oleaut32.dll.VARIANT_UserUnmarshal
- oleaut32.dll.VARIANT_UserFree
- oleaut32.dll.LPSAFEARRAY_UserSize
- oleaut32.dll.LPSAFEARRAY_UserMarshal
- oleaut32.dll.LPSAFEARRAY_UserUnmarshal
- oleaut32.dll.LPSAFEARRAY_UserFree
Show More 807

Deleted Files

C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000000.db
C:\ProgramData\Microsoft\Windows NT\MSFax\Queue\TST4777.tmp
C:\ProgramData\Microsoft\Windows NT\MSFax\TST4A76.tmp
C:\ProgramData\Microsoft\Windows NT\MSFax\TST4BEE.tmp
C:\programdata\microsoft\eHome\mcepg2-0\Blocks.mem
- C:\programdata\microsoft\eHome\Counter.mem
- C:\programdata\microsoft\eHome\mcepg2-0\Root.mem
Show More 2

Deleted Registry Keys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ASP.NET_4.0.30319\Names\fEZJsTooKvr4dQDIYl6YQ2PuZIGlvBbzJ4V6ELivqNyCAlsxr7SRWDcnLNKhZwTDrImQ9q1sYNZAL9rUgI359tEXE9lQ5e5j2t49w0SB0pGkIN2jtv8CGm
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\uid
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\old-uid
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\drivers\en-US\ndis.sys.mui[MofResourceName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\monitor.sys[MonitorWMI]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\drivers\ndis.sys[MofResourceName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\Password
Show More 3

Registry Keys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\AccessProviders
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
- HKEY_LOCAL_MACHINE\Software\JavaSoft\Java Runtime Environment
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\3b48a7ed61ab4ca62ecd8591bfdec38c3cf0493d.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\EnableAnchorContext
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\KnownClasses
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\RequiredPrivileges
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Default
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramW6432Dir
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonW6432Dir
- HKEY_USERS\S-1-5-18
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
- HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
- HKEY_USERS\.DEFAULT\Environment
- HKEY_USERS\.DEFAULT\Volatile Environment
- HKEY_USERS\.DEFAULT\Volatile Environment\0
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\TriggerInfo
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\defragsvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache3.0.0.0\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\TriggerInfo
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcSs\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdatem\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AeLookupSvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioSrv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\CryptSvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BFE\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\EventSystem\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\AudioEndpointBuilder\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\DcomLaunch\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcEptMapper\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PolicyAgent\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\FontCache\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RemoteRegistry\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SDRSVC\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\sppsvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\stisvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\swprv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wbengine\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wmiApSrv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WMPNetworkSvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WSearch\ObjectName
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskhost.exe
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wuauserv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wscsvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\FailureActions
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ALG\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SENS
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SENS\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\HTTP
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\HTTP\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SSDPSRV\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Spooler
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Spooler\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PlugPlay
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PlugPlay\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\TapiSrv
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\TapiSrv\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\TapiSrv\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\TapiSrv\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\TapiSrv\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WdiSystemHost
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WdiSystemHost\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WdiSystemHost\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WdiSystemHost\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WdiSystemHost\RequiredPrivileges
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2298303332-66077612-2598613238-1000\ProfileImagePath
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Environment
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Volatile Environment
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Volatile Environment\0
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SamSs
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SamSs\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\ErrorControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Tag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnService
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\DependOnGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Group
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\RequiredPrivileges
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Environment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\WOW64
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Environment
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe\GlobalFlag
- HKEY_CURRENT_USER
- HKEY_USERS\.DEFAULT\Control Panel\International
- HKEY_USERS\.DEFAULT\Control Panel\International\LocaleName
- HKEY_USERS\.DEFAULT\Control Panel\International\sCountry
- HKEY_USERS\.DEFAULT\Control Panel\International\sList
- HKEY_USERS\.DEFAULT\Control Panel\International\sDecimal
- HKEY_USERS\.DEFAULT\Control Panel\International\sThousand
- HKEY_USERS\.DEFAULT\Control Panel\International\sGrouping
- HKEY_USERS\.DEFAULT\Control Panel\International\sNativeDigits
- HKEY_USERS\.DEFAULT\Control Panel\International\sCurrency
- HKEY_USERS\.DEFAULT\Control Panel\International\sMonDecimalSep
- HKEY_USERS\.DEFAULT\Control Panel\International\sMonThousandSep
- HKEY_USERS\.DEFAULT\Control Panel\International\sMonGrouping
- HKEY_USERS\.DEFAULT\Control Panel\International\sPositiveSign
- HKEY_USERS\.DEFAULT\Control Panel\International\sNegativeSign
- HKEY_USERS\.DEFAULT\Control Panel\International\sTimeFormat
- HKEY_USERS\.DEFAULT\Control Panel\International\sShortTime
- HKEY_USERS\.DEFAULT\Control Panel\International\s1159
- HKEY_USERS\.DEFAULT\Control Panel\International\s2359
- HKEY_USERS\.DEFAULT\Control Panel\International\sShortDate
- HKEY_USERS\.DEFAULT\Control Panel\International\sYearMonth
- HKEY_USERS\.DEFAULT\Control Panel\International\sLongDate
- HKEY_USERS\.DEFAULT\Control Panel\International\iCountry
- HKEY_USERS\.DEFAULT\Control Panel\International\iMeasure
- HKEY_USERS\.DEFAULT\Control Panel\International\iPaperSize
- HKEY_USERS\.DEFAULT\Control Panel\International\iDigits
- HKEY_USERS\.DEFAULT\Control Panel\International\iLZero
- HKEY_USERS\.DEFAULT\Control Panel\International\iNegNumber
- HKEY_USERS\.DEFAULT\Control Panel\International\NumShape
- HKEY_USERS\.DEFAULT\Control Panel\International\iCurrDigits
- HKEY_USERS\.DEFAULT\Control Panel\International\iCurrency
- HKEY_USERS\.DEFAULT\Control Panel\International\iNegCurr
- HKEY_USERS\.DEFAULT\Control Panel\International\iCalendarType
- HKEY_USERS\.DEFAULT\Control Panel\International\iFirstDayOfWeek
- HKEY_USERS\.DEFAULT\Control Panel\International\iFirstWeekOfYear
- HKEY_CURRENT_USER\Software\Classes
- HKEY_LOCAL_MACHINE\Software\Classes
- HKEY_LOCAL_MACHINE\Software\Microsoft\COM3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D6015EC3-FA16-4813-9CA1-DA204574F5DA}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D6015EC3-FA16-4813-9CA1-DA204574F5DA}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D6015EC3-FA16-4813-9CA1-DA204574F5DA}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D6015EC3-FA16-4813-9CA1-DA204574F5DA}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D6015EC3-FA16-4813-9CA1-DA204574F5DA}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D6015EC3-FA16-4813-9CA1-DA204574F5DA}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D6015EC3-FA16-4813-9CA1-DA204574F5DA}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\alg.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
- HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\BCA9F854
- HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
- HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaxSxSHashCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F8ADE1D3-49DF-4B75-9005-EF9508E6A337}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CEB5509-C1CD-432F-9D8F-65D1E286AA80}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7B3181A0-C92F-4567-B0FA-CD9A10ECD7D1}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D8A68E5E-2B37-426C-A329-C117C14C429E}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BBB36F15-408D-4056-8C27-920843D40BE5}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6F9942C9-C1B1-4AB5-93DA-6058991DC8F3}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BC9B54AB-7883-4C13-909F-033D03267990}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6E590D61-F6BC-4DAD-AC21-7DC40D304059}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ALG\ISV
- HKEY_LOCAL_MACHINE\Software\Microsoft\ASP.NET
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ASP.NET\UseWorkStation
- HKEY_LOCAL_MACHINE\Software\Microsoft\ASP.NET\4.0.30319.0
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ASP.NET\4.0.30319.0\ReadGCConcurrentModeFromConfig
- HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\v4.0
- HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\InstallRoot
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\CLRLoadLogDir
- HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\OnlyUseLatestCLR
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NoClientChecks
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full\Release
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ASP.NET\VerificationCompatibility
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\aspnet_state\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Parameters\Port
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Parameters\UseIPV6
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ASP.NET_4.0.30319\Performance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ASP.NET_4.0.30319\Performance\Library
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ASP.NET_4.0.30319\Names
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ASP.NET_4.0.30319\Names\fEZJsTooKvr4dQDIYl6YQ2PuZIGlvBbzJ4V6ELivqNyCAlsxr7SRWDcnLNKhZwTDrImQ9q1sYNZAL9rUgI359tEXE9lQ5e5j2t49w0SB0pGkIN2jtv8CGm
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Parameters\AllowRemoteConnection
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\GCCpuGroup
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Thread_UseAllCpuGroups
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_SampleIntervalLow
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\ThreadPool_ForceMinWorkerThreads
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\ThreadPool_ForceMaxWorkerThreads
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_WavePeriod
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_MaxWaveMagnitude
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_WaveMagnitudeMultiplier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_WaveHistorySize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_Bias
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_TargetSignalToNoiseRatio
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_MaxChangePerSecond
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_MaxChangePerSample
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_SampleIntervalHigh
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_ErrorSmoothingFactor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_GainExponent
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\HillClimbing_MaxSampleErrorPercent
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Parameters\SocketTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenServiceDebugLog
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NicPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\RegistryRoot
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AssemblyPath2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Client
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Client\Install
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGEN_USE_PRIVATE_STORE
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DefaultVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Version
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\ZapSet
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727\NGenService\Roots
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\WorkPending
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727\NGENService\State
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State\PendingUpdate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGenQueue\WIN32\Default
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGenQueueMSI\WIN32\Default
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGenServiceDebugLog
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NicPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\RegistryRoot
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\AssemblyPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\AssemblyPath2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Client\Install
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGEN_USE_PRIVATE_STORE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\DefaultVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Version
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\ZapSet
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\WorkPending
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\State\PendingUpdate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGenQueue\WIN64\Default
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGenQueueMSI\WIN64\Default
- HKEY_LOCAL_MACHINE\Software\Google\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}\pv
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSclient
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc
- HKEY_LOCAL_MACHINE\Software\Google\Update\
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\OemInstallTime
- HKEY_LOCAL_MACHINE\Software\Google\UpdateDev\
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientState\
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{430FD4D0-B729-4F61-AA34-91526481799D}
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\usagestats
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\usagestats
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\usagestats
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\usagestats
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}\usagestats
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{FDA71E6F-AC4C-4A00-8B70-9958A68906BF}\usagestats
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\uid
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\old-uid
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\eulaaccepted
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\gupdate_service_name
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
- HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Common\Security
- HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Common\OffDiag
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\OffDiag\DoNotTestMemory
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\LastCodeRedCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\LastOSVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\gupdate_task_name_ua
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows
- HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\UpdateTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\InstallTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\LastChecked
- HKEY_LOCAL_MACHINE\Software\Google\Update\Clients\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Delivery\SourceEngine\Settings
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\Timeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\LogLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\CDBufferRead
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\CDBufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\NetworkBufferRead
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\NetworkBufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\InternetBufferRead
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\InternetBufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Delivery\SourceEngine\Settings\BufferWrite
- HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\SecurityService
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\DefaultAuthLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\RepositoryRestoreInProgress
- HKEY_LOCAL_MACHINE\system\Setup
- HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\wmi
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\wmi
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\net.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\net1.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\sc.exe
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc\Parameters\ServiceDllUnloadOnStop
- HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\ESS
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2\SCM Event Provider
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
- HKEY_LOCAL_MACHINE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PreviousServiceShutdown
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ProcessID
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\winmgmt
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceDllUnloadOnStop
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ehrecvr.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ActivateWindowsSearch
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ActivateWindowsSearch\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ehDRMInit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ehDRMInit\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3710662C-015A-4CD7-B802-A66D3570CD6A}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3710662C-015A-4CD7-B802-A66D3570CD6A}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3710662C-015A-4CD7-B802-A66D3570CD6A}\Triggers
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ehsched.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\UpdateRecordPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\UpdateRecordPath\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2757F743-66B7-497D-A161-50ADE38F7C07}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2757F743-66B7-497D-A161-50ADE38F7C07}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2757F743-66B7-497D-A161-50ADE38F7C07}\Triggers
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ehtray.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\ResolutionHost\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9435F817-FED2-454E-88CD-7F78FDA62C48}\Triggers
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\msdtc.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\ehrec.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\perfhost.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\Locator.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Google\UpdateDev
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\SOFTWARE\Clients\StartMenuInternet
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Clients\StartMenuInternet\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\uid-create-time
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\uid-num-rotations
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Control Panel\International
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Control Panel\International\LocaleName
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\PropertyBag
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\0
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\CommonFilesDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir (x86)
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\CommonFilesDir (x86)
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ProgramW6432Dir
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\CommonW6432Dir
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyComputer
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesRecycleBin
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoInternetIcon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\GoogleUpdate.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCommonGroups
- HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\CallForAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\RestrictedAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORDISPLAY
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideFolderVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\UseDropHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORPARSING
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsParseDisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForOverlay
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\MapNetDriveVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForInfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideInWebView
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideOnDesktopPerUser
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsAliasedNotifications
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsUniversalDelegate
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\NoFileFolderJunction
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\PinToNameSpaceTree
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HasNavigationEnum
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
- HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions
- HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DontShowSuperHidden
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWebView
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ClassicShell
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\SeparateProcess
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetCrawling
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSimpleStartMenu
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowCompColor
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\DontPrettyPath
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowInfoTip
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideIcons
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MapNetDrvBtn
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\WebView
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Filter
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SeparateProcess
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\NoNetCrawling
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AutoCheckSelect
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\IconsOnly
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowTypeOverlay
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Shell\RegisteredApplications\UrlAssociations\Directory\OpenWithProgids
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\Directory
- HKEY_CLASSES_ROOT\Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\CurVer
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\ShellEx\IconHandler
- HKEY_CLASSES_ROOT\Folder
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_CLASSES\Folder\ShellEx\IconHandler
- HKEY_CLASSES_ROOT\AllFilesystemObjects
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\IconHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\DocObject
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_CLASSES\Folder\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\BrowseInPlace
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_CLASSES\Folder\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\Clsid
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_CLASSES\Folder\Clsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\Clsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\IsShortcut
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_CLASSES\Folder\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\NeverShowExt
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_CLASSES\Folder\NeverShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\NeverShowExt
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}
- HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings\Wpad
- HKEY_LOCAL_MACHINE\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Google\Update\proxy
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Google\Update\proxy\source
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\GoogleUpdate.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\GoogleUpdate.exe\AppId
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\LastStartedAU
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\IsMSIHelperRegistered
- HKEY_LOCAL_MACHINE\Software\Google\Update\Pings
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\RetryAfter
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\WerSvcGroup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\wersvc
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Parameters\ServiceDll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Parameters\ServiceManifest
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Parameters\ServiceMain
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ServiceTimeout
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Parameters\ServiceDllUnloadOnStop
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\NoReflection
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\NoReflection
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\PropertyBag
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\alg.exe
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Error Reporting
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TraceFlags
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\Debug
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug\WaitOnStart
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AeDebug
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug\Debugger
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MiniNT
- HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Windows Error Reporting\Plugins\AppRecorder
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting\Plugins\FDR\CurrentSession
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug\ExceptionRecord
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug\WaitonExceptionRecord
- HKEY_CURRENT_USER\Software\Microsoft\Windiff
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MachineID
- HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Windows Error Reporting\Consent
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultConsent
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontSendAdditionalData
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Disabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultConsent
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultOverrideBehavior
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\APPCRASH
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LoggingDisabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontShowUI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableArchive
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ConfigureArchive
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableQueue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxQueueCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxArchiveCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceQueue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\QueuePesterInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ExcludedApplications
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DebugApplications
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\SendEFSFiles
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\BypassDataThrottling
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceUserModeCabCollection
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Windows Error Reporting
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontSendAdditionalData
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\DefaultOverrideBehavior
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Consent\APPCRASH
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LoggingDisabled
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DontShowUI
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableArchive
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ConfigureArchive
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DisableQueue
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxQueueCount
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\MaxArchiveCount
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceQueue
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\QueuePesterInterval
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ExcludedApplications
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\DebugApplications
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\SendEFSFiles
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\BypassDataThrottling
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\Windows Error Reporting\ForceUserModeCabCollection
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerServer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerUseSSL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerPortNumber
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\CorporateWerUseAuthentication
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Reliability Analysis\RAC
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Reliability Analysis\RAC\RacWerSampleTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\6FD5A890
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug\OfflineMode
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\LocalDumps
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\DumpFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\DumpCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\DumpType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\CustomDumpFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\SuppressOnDebugger
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\LocalDumps\alg.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\alg.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\SYSTEM32\ntdll.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\kernel32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\KERNELBASE.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\ADVAPI32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\msvcrt.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\SYSTEM32\sechost.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\RPCRT4.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\ATL.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\USER32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\GDI32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\LPK.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\USP10.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\WS2_32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\NSI.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\ole32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\OLEAUT32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\WSOCK32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\MSWSOCK.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\IMM32.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\MSCTF.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\api-ms-win-core-synch-l1-2-0.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\SspiCli.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\WINHTTP.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\webio.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\CRYPT32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\MSASN1.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\MPR.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\Secur32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\SHLWAPI.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\DNSAPI.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\ntmarta.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\WLDAP32.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\CRYPTBASE.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\CLBCatQ.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\CRYPTSP.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\system32\rsaenh.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\RpcRtRemote.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\IPHLPAPI.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls\C:\Windows\System32\WINNSI.DLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{B622553E-EADB-445E-9493-C3DF5AF99268}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\EnableEELogging
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LogEEInfoAsNative
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\ActivationFailureLoggingLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\CallFailureLoggingLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\InvalidSecurityDescriptorLoggingLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DisableActivationSecurityCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\UseRunAsTokenCache
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\IssueActivationRpcAtIdentify
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\ResumeTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DCOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultLaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MachineLaunchRestriction
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MachineAccessRestriction
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RPC
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\DCOM Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\EnableDCOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\OleModalLoopBehavior
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DCOMSCMRemoteCallFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\EnableDCOMHTTP
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\IgnoreServerExceptions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\BreakOnSilencedServerExceptions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationService
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyMutualAuthentication
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacySecureReferences
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MaxActivationRetriesPerServer
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{FA018B44-5E9F-4875-B127-5085A1B02ABD}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000B7FD00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000B7FD00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000B7FD00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\LocalServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\LocalServer32\LocalServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\LocalServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\LocalServer32\ServerExecutable
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\AppID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\DllSurrogate
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{0E11CB54-4C4A-4B37-AE0B-E93CEE60E646}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\Elevation
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{000C101C-0000-0000-C000-000000000046}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{69AD4AEE-51BE-439B-A92C-86AE490E8B30}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\LocalServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\AppID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\LocalServer
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\Elevation
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\LocalServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\AppID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\LocalServer
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4991D34B-80A1-4291-83B6-3328366B9097}\Elevation
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\LocalServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\AppID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\LocalServer
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{4EB61BAC-A3B6-4760-9581-655041EF4D69}\Elevation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\CoInitializeSecurityParam
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\ImpersonationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\AuthenticationCapabilities
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\CoInitializeSecurityAppID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\DeferredCoInitializeSecurityServices
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\DefaultRpcStackSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs\SystemCritical
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\svchost.exe
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceDll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceManifest
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceMain
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NoResyncPerf
- HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\ADAP
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ThrottleDrege
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ADAPDelay
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LodCtrDelay
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\TimeToFullDredge
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\TimeToTerminateAdap
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastFullDredgeTimestamp
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\AECFFC7E
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\FinalizerActivityBypass
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C49E32C6-BC8B-11D2-85D4-00105A1F8304}\InprocHandler
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Winmgmt\Parameters
- HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\Tracing\WMI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
- HKEY_LOCAL_MACHINE\SYSTEM\Setup
- HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Safeboot\Option
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\WMI Writer
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{5307DAE2-ECB0-44BD-B5D4-4F619ED6F3AC}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{63B0BD07-9A49-45D0-A15A-DB308515C864}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{A190E8A8-704C-4C1F-B989-8F60E14192D8}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{BBA52531-DBBB-4182-9FE7-7C956B932D14}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
- HKEY_LOCAL_MACHINE\software\microsoft\wbem\cimom
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/subscription
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\CIMOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
- HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InProcServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
- HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\LocalServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
- HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
- HKEY_LOCAL_MACHINE\Software\Microsoft\OleAut
- HKEY_CLASSES_ROOT\CLSID\{D2D588B5-D081-11d0-99E0-00C04FC2F8EC}\InProcServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\(Default)
- HKEY_CLASSES_ROOT\CLSID\{D2D588B5-D081-11d0-99E0-00C04FC2F8EC}\LocalServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\InprocServer32\Synchronization
- HKEY_CLASSES_ROOT\CLSID\{D2D588B5-D081-11d0-99E0-00C04FC2F8EC}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D2D588B5-D081-11D0-99E0-00C04FC2F8EC}\AppId
- HKEY_LOCAL_MACHINE\system\currentcontrolset\control\minint
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\Root
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\Root
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B7B31DF9-D515-11D3-A11C-00105A1F515A}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{07435309-D440-41B7-83F3-EB82DB6C622F}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21CD80A2-B305-4F37-9D4C-4534A8D9B568}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{06413D98-405C-4A5A-8D6F-19B8B7C6ACF7}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{027947E1-D731-11CE-A357-000000000001}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B1CAD8C-2DAB-11D2-B604-00104B703EFD}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1C1C45EE-4395-11D2-B60B-00104B703EFD}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{423EC01E-2E35-11D2-B604-00104B703EFD}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F50A28CF-5C9C-4F7E-9D80-E25E16E18C59}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6B3FC272-BF37-4968-933A-6DF9222A2607}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FC8C622-1728-4149-A57F-AD19D0970710}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FEC1B0AC-5808-4033-A915-C0185934581E}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EB658B8A-7A64-4DDC-9B8D-A92610DB0206}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENBreakOnWorker
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenRegistryAccessCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State\
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\State\ExtraInstallSteps
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceBreakOnStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGenServiceMaxLogSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServiceTestHookDll
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENServicePolicy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v2.0.50727\NGENService\ListenedState
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\RootstoreDirty
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGENUseService
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
- HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\AppPatch
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorsvw.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGENBreakOnWorker
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGenRegistryAccessCount
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\State\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\State\ExtraInstallSteps
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGENServiceBreakOnStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGenServiceMaxLogSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGENServiceTestHookDll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGENServicePolicy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727\NGENService\ListenedState\RootstoreDirty
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NGENUseService
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorsvw.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Sink Transmit Buffer Size
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Cimom
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\DefaultRpcStackSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\wmiprvse.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73E709EA-5D93-4B2E-BBB0-99B7938DA9E4}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Log File Max Size
- HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\WDM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\IDE\DiskVBOX_HARDDISK___________________________1.0_____\5&33d1638a&0&0.0.0_0-{05901221-D566-11d1-B2F0-00A0C9062910}
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ACPI
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ACPI\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ACPI\ImagePath
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NDIS
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NDIS\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NDIS\ImagePath
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mssmbios
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\mssmbios\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\mssmbios\ImagePath
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HDAudBus
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\HDAudBus\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\HDAudBus\ImagePath
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\intelppm
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\intelppm\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\intelppm\ImagePath
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\portcls
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\monitor
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\monitor\MofImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\monitor\ImagePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\advapi32.dll[MofResourceName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\en-US\advapi32.dll.mui[MofResourceName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\drivers\ACPI.sys[ACPIMOFResource]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\drivers\ndis.sys[MofResourceName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\drivers\en-US\ndis.sys.mui[MofResourceName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\mssmbios.sys[MofResource]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\en-US\mssmbios.sys.mui[MofResource]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\HDAudBus.sys[HDAudioMofName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\en-US\HDAudBus.sys.mui[HDAudioMofName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\intelppm.sys[PROCESSORWMI]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\en-US\intelppm.sys.mui[PROCESSORWMI]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\System32\Drivers\portcls.SYS[PortclsMof]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\System32\Drivers\en-US\portcls.SYS.mui[PortclsMof]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\monitor.sys[MonitorWMI]
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{49353C93-516B-11D1-AEA6-00C04FB68820}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\UseLegacyLowCommitDetection
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MinimumFreeMemPercentageToCreateProcess
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\MinimumFreeMemPercentageToCreateObject
- HKEY_LOCAL_MACHINE\Software\Microsoft\COM3\MTAThreadPool
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\CRM\LogFiles
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Setup\WinlogonNotify
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\AlwaysPushTrackingInfo
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\TrackingInfoCallbackDuration
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{97312C82-D4C2-11D1-B682-00805FC79216}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{97312C82-D4C2-11D1-B682-00805FC79216}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{97312C82-D4C2-11D1-B682-00805FC79216}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\Software\Microsoft\COM3\Eventlog
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Eventlog\SuppressDuplicateDuration
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{182C40F0-32E4-11D0-818B-00A0C9231C29}\VersionIndependentProgID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABAFB9-7F19-11D2-978E-0000F8757E2A}\VersionIndependentProgID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B2E958D-0393-11D1-B1AB-00AA00BA3258}\VersionIndependentProgID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ECABB0C4-7F19-11D2-978E-0000F8757E2A}\VersionIndependentProgID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\TrackingInfoEvtFrequency
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\TrackingInfoPollingFrequency
- HKEY_LOCAL_MACHINE\Software\Debug\ehRecvr.exe
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsMediaCenter
- HKEY_CURRENT_USER\Software\Policies\Microsoft\WindowsMediaCenter
- HKEY_LOCAL_MACHINE\Software\clients\Media\Windows Media Center\InstallInfo
- HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Media\Windows Media Center\InstallInfo\IconsVisible
- HKEY_CLASSES_ROOT\AppID
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{b622553e-eadb-445e-9493-c3df5af99268}
- HKEY_CURRENT_USER\Control Panel\International
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ehRecvr.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ehrecvr.exe\AppId
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4396DC6-E851-4D3A-8D01-34E6949F3500}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4396DC6-E851-4D3A-8D01-34E6949F3500}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4396DC6-E851-4D3A-8D01-34E6949F3500}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4396DC6-E851-4D3A-8D01-34E6949F3500}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4396DC6-E851-4D3A-8D01-34E6949F3500}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4396DC6-E851-4D3A-8D01-34E6949F3500}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4396DC6-E851-4D3A-8D01-34E6949F3500}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F4396DC6-E851-4D3A-8D01-34E6949F3500}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\44382709
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D44CBB4F-743E-4818-8077-C47F666CA7EE}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D44CBB4F-743E-4818-8077-C47F666CA7EE}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D44CBB4F-743E-4818-8077-C47F666CA7EE}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D44CBB4F-743E-4818-8077-C47F666CA7EE}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D44CBB4F-743E-4818-8077-C47F666CA7EE}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D44CBB4F-743E-4818-8077-C47F666CA7EE}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D44CBB4F-743E-4818-8077-C47F666CA7EE}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D44CBB4F-743E-4818-8077-C47F666CA7EE}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA23DFB6-E23F-4B94-B1A4-095D6E84493C}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA23DFB6-E23F-4B94-B1A4-095D6E84493C}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA23DFB6-E23F-4B94-B1A4-095D6E84493C}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA23DFB6-E23F-4B94-B1A4-095D6E84493C}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA23DFB6-E23F-4B94-B1A4-095D6E84493C}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA23DFB6-E23F-4B94-B1A4-095D6E84493C}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA23DFB6-E23F-4B94-B1A4-095D6E84493C}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA23DFB6-E23F-4B94-B1A4-095D6E84493C}\InprocHandler
- HKEY_CURRENT_USER\Software\Microsoft\DirectShow\PushClock
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\GipActivityBypass
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DCC8327-DBE9-48E6-846C-33725865D50C}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DCC8327-DBE9-48E6-846C-33725865D50C}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8DCC8327-DBE9-48E6-846C-33725865D50C}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\InProcServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\InProcServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7772804-3287-418E-9072-CF2B47238981}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03A84965-6E86-49C5-B831-826B38732363}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03A84965-6E86-49C5-B831-826B38732363}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{03A84965-6E86-49C5-B831-826B38732363}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\InProcServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\InProcServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03A84965-6E86-49C5-B831-826B38732363}\InprocHandler
- HKEY_LOCAL_MACHINE\Software\Debug\ehSched.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ehsched.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\ServiceStarted
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\Heartbeat
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\WaitingForShutdown
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\ServiceFailures
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33D8C85A-B8C1-4828-B51A-4F3349AD5F9E}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33D8C85A-B8C1-4828-B51A-4F3349AD5F9E}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33D8C85A-B8C1-4828-B51A-4F3349AD5F9E}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33D8C85A-B8C1-4828-B51A-4F3349AD5F9E}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33D8C85A-B8C1-4828-B51A-4F3349AD5F9E}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33D8C85A-B8C1-4828-B51A-4F3349AD5F9E}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33D8C85A-B8C1-4828-B51A-4F3349AD5F9E}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33D8C85A-B8C1-4828-B51A-4F3349AD5F9E}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\F890EC02
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{50D9196A-DD32-4F64-9BD1-20AB9175858E}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{50D9196A-DD32-4F64-9BD1-20AB9175858E}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{50D9196A-DD32-4F64-9BD1-20AB9175858E}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{50D9196A-DD32-4F64-9BD1-20AB9175858E}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{50D9196A-DD32-4F64-9BD1-20AB9175858E}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{50D9196A-DD32-4F64-9BD1-20AB9175858E}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{50D9196A-DD32-4F64-9BD1-20AB9175858E}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{50D9196A-DD32-4F64-9BD1-20AB9175858E}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B635ECB-0887-4015-8CA6-D621362F98D1}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B635ECB-0887-4015-8CA6-D621362F98D1}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B635ECB-0887-4015-8CA6-D621362F98D1}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B635ECB-0887-4015-8CA6-D621362F98D1}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B635ECB-0887-4015-8CA6-D621362F98D1}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B635ECB-0887-4015-8CA6-D621362F98D1}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B635ECB-0887-4015-8CA6-D621362F98D1}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B635ECB-0887-4015-8CA6-D621362F98D1}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\HeartbeatIntervalMs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BA0AEE04-518A-4C18-87FC-7DA3691997EB}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BA0AEE04-518A-4C18-87FC-7DA3691997EB}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BA0AEE04-518A-4C18-87FC-7DA3691997EB}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\InProcServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\InProcServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D09D1E04-D590-39A3-B517-B734A49A9277}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B196B284-BAB4-101A-B69C-00AA00341D07}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B196B284-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B196B284-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B196B286-BAB4-101A-B69C-00AA00341D07}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B196B286-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{B196B286-BAB4-101A-B69C-00AA00341D07}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{36A5EC1B-A347-40AE-A640-3DCB83AF86F7}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{36A5EC1B-A347-40AE-A640-3DCB83AF86F7}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{36A5EC1B-A347-40AE-A640-3DCB83AF86F7}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Media Center
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\EhschedExitDelay
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7100EAC3-1292-4D2E-8D27-7B81C077F51E}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7100EAC3-1292-4D2E-8D27-7B81C077F51E}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7100EAC3-1292-4D2E-8D27-7B81C077F51E}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E4A29C85-6658-43EE-9EB1-8E450F41E9E7}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E4A29C85-6658-43EE-9EB1-8E450F41E9E7}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E4A29C85-6658-43EE-9EB1-8E450F41E9E7}\ProxyStubClsid32\(Default)
- HKEY_CLASSES_ROOT\Applications\taskhost.exe
- HKEY_CURRENT_USER\Control Panel\Personalization\Desktop Slideshow
- HKEY_CURRENT_USER\Control Panel\Personalization\Desktop Slideshow\Interval
- HKEY_CURRENT_USER\Control Panel\Personalization\Desktop Slideshow\Shuffle
- HKEY_CURRENT_USER\Control Panel\Personalization\Desktop Slideshow\AnimationDuration
- HKEY_LOCAL_MACHINE\Control Panel\Personalization\Desktop Slideshow
- HKEY_CURRENT_USER\Control Panel\Personalization\Desktop Slideshow\Flags
- HKEY_CLASSES_ROOT\Applications\.exe
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Media Center
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Media Center\EnableNotifications
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\EnableLaunchErrors
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\EnableSPADLaunchErrors
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DnsCache\Parameters
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DnsClient
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DNS
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableAdapterDomainName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\PrioritizeRecordData
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\PrioritizeRecordData
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AllowUnqualifiedQuery
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\AllowUnqualifiedQuery
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AppendToMultiLabelName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenBadTlds
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenUnreachableServers
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ScreenDefaultServers
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DynamicServerQueryOrder
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\FilterClusterIp
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\WaitForNameErrorOnAll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseEdns
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsSecureNameQueryFallback
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableDAForAllNetworks
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DirectAccessQueryOrder
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\QueryIpMatching
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseHostsFile
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AddrConfigControl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationEnabled
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableDynamicUpdate
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterPrimaryName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\EnableAdapterDomainNameRegistration
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterReverseLookup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableReverseAddressRegistrations
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegisterWanAdapters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DisableWanDynamicUpdate
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationTtl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationTTL
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationRefreshInterval
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultRegistrationRefreshInterval
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationMaxAddressCount
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\MaxNumberOfAddressesToRegister
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateSecurityLevel
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UpdateSecurityLevel
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UpdateTopLevelDomainZones
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DowncaseSpnCauseApiOwnerIsTooLazy
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\RegistrationOverwrite
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheSize
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCacheTtl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxNegativeCacheTtl
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\AdapterTimeoutLimit
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ServerPriorityTimeLimit
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MaxCachedSockets
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\EnableMulticast
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastResponderFlags
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderFlags
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\MulticastSenderMaxTimeout
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsTest
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseCompartments
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\CacheAllCompartments
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseNewRegistration
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistration
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\ResolverRegistrationOnly
- HKEY_LOCAL_MACHINE\System\Setup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQueryTimeouts
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQueryTimeouts
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DnsQuickQueryTimeouts
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DnsQuickQueryTimeouts
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSClient
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\QueryAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\DisableAdapterDomainName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\RegistrationEnabled
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\RegisterAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\RegistrationMaxAddressCount
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\MaxNumberOfAddressesToRegister
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\EnableMulticast
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\Domain
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{88A68406-5E7C-4414-964E-1D6D4748182C}\DhcpDomain
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{846EE342-7039-11DE-9D20-806E6F6E6963}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\QueryAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableAdapterDomainName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationEnabled
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DisableDynamicUpdate
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegisterAdapterName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableAdapterDomainNameRegistration
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\RegistrationMaxAddressCount
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\MaxNumberOfAddressesToRegister
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\EnableMulticast
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\Domain
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{846ee342-7039-11de-9d20-806e6f6e6963}\DhcpDomain
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
- HKEY_LOCAL_MACHINE\Software\Microsoft\Fax\Receipts
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\Password
- HKEY_LOCAL_MACHINE\Software\Microsoft\Fax
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\UseDefaultFaultHandlingPolicy
- HKEY_LOCAL_MACHINE\Software\Microsoft\Fax\Client\ServiceStartup
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Print\SynchronousPrintHandleAccessMode
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\1\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\1\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\1\Number
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\2\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\2\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\2\Number
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\3\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\3\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\3\Number
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\4
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\4\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\4\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Logging\4\Number
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\QueueState
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Retries
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Retry Delay
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\UseDeviceTsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Branding
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\AllowPersonalCoverPages
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\QueueAgeLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\StartCheapTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\StopCheapTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\UseArchive
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ArchiveFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\SizeQuotaWarn
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\HighWatermark
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\LowWatermark
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ArchiveAgeLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\AutoCreateAccountOnConnect
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\IncomingFaxesArePublic
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\RecipientsLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\NextJobNumber
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\LastUniqueLineId
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\MaxLineCloseTime
- HKEY_LOCAL_MACHINE\Software\Microsoft\Fax\Client
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Client\DebugLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\QueueDirectory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\AllowRemote
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\APIVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\ImageName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\ProviderName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\FriendlyName
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
- HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\MuiCache\6d\52C64B7E
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\LanguageList
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1130
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\GUID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\ImageName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\FriendlyName
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1134
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Email
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Email\Function Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Email\Guid
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Email\Priority
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Email\FriendlyName
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1131
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Folder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Folder\Function Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Folder\Guid
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Folder\Priority
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Folder\FriendlyName
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1132
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Printing
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Printing\Function Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Printing\Guid
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Printing\Priority
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Routing Extensions\Microsoft Routing Extension\Routing Methods\Printing\FriendlyName
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1133
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Devices
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\Port
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\UseForMsRoute
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\SMTPAuth
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\Type
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\Server
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\From
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\User
- HKEY_LOCAL_MACHINE\Software\Microsoft\Fax\ActivityLogging
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogIncoming
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogOutgoing
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogLimitCriteria
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogSizeLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogAgeLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\LogLimitReachedAction
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ActivityLogging\DBFile
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ManualAnswerDevice
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Accounts
- HKEY_LOCAL_MACHINE\Software\Microsoft\Fax\Accounts
- HKEY_LOCAL_MACHINE\Software\Microsoft\Fax\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Security\Descriptor
- HKEY_CURRENT_USER\Software\Classes\AppID\taskhost.exe
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WDI\DiagnosticModules
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{15fba3b8-a37a-4f91-bdba-fbb98fe804bf}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{282396b2-6c46-4d66-b413-70b0445df33c}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{284ddb2f-beea-4c9d-91e8-e3670ed91517}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{3EA6B3DF-393E-41C3-9885-29EC5A701926}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{45DE1EA9-10BC-4f96-9B21-4B6B83DBF476}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{4d21da64-fd02-4b82-a0a5-783266e430ab}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{50e3b0eb-5780-49de-9eb5-8d53a51fd146}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5C85A128-86F7-41a4-B655-BEE3F2ADEF46}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{5EE64AFB-398D-4edb-AF71-3B830219ABF7}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{63e0d0f7-ac2f-493b-a7f2-2f3ccdb66fca}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{67f1ec80-6c5b-43bb-860b-d47ae85242b1}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{72dbb5ac-6a91-46e6-885b-d429828bea2e}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{7a54f16f-a73a-4258-ba46-a1e998a6aa74}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{85e0acd9-809a-482b-b60b-bcad1f8d0cd7}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{88d4896f-f553-446a-9c75-9dec124ff8b7}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8CC29128-0B57-4a2b-A7B9-A74A70BA6FA1}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{8d39bd5b-81f8-4b94-a608-6a50bbff5d15}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{95c162b7-5b71-44f8-82e4-abfd3108f40f}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{9c5a40da-b965-4fc3-8781-88dd50a6299d}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a0d86e0d-3f06-411b-9dd5-35bc5666ff3e}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{a59f0643-a6ca-48e0-a7c4-4cdd258439e2}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{abd0ea66-a840-44a9-97b1-fb74fddaa8c8}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{b171ab1c-60e9-4301-a338-beab1c70b3e9}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{bf2de437-b736-48fb-84a0-5f0c389a068e}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{C0F51D84-11B9-4e74-B083-99F11BA2DB0A}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c70949f5-bda4-4bf3-8121-af0bc174925f}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{c8544339-5be9-4f25-862e-485f1b1a6935}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{d8bcedf8-46c3-440e-bc65-dfa6a5094054}\NameResource
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\ImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NeverLowerPagePriority
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\DiagnosticModules\{E4CD2E3E-3852-4952-B76B-23BB8E35D344}\NameResource
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WDI\Config
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WDI\Config\ServerName
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\CLResolutionInterval
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\DisplayInterval
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RADAR\SkipWatson
- HKEY_LOCAL_MACHINE\Software\Microsoft\RADAR\HeapLeakDetection\Settings
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\Settings\ReflectionInterval
- HKEY_LOCAL_MACHINE\Software\Microsoft\DirectUI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\taskhost.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
- HKEY_LOCAL_MACHINE\Software\Microsoft\MSDTC\Tracing
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_MISC
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_CM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_TRACE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_SVC
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_GATEWAY
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_UI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_CONTACT
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_UTIL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_CLUSTER
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_RESOURCE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_TIP
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_XA
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_LOG
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_MTXOCI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_ETWTRACE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_PROXY
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_KTMRM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_VSSBACKUP
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_PERFMON
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_TM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Sources\TRACE_LU
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Output
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Output\TraceFilePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Output\MemoryBufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Tracing\Output\DebugOutEnabled
- HKEY_LOCAL_MACHINE\Software\Microsoft\MSDTC
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\DisableTerminationOnHeapCorruption
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\SysprepInProgress
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\MaxRecoveryTimePerMbInMinutes
- HKEY_LOCAL_MACHINE\Software\Classes\CID.Local
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Description\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Svcid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Svcid\(Default)
- HKEY_LOCAL_MACHINE\Software\Classes\SVCID.Local
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\488091f0-bff6-11ce-9de8-00aa00a3f464
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Host
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Host\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Clsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Clsid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\488091f0-bff6-11ce-9de8-00aa00a3f464\DefaultProvider
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\488091f0-bff6-11ce-9de8-00aa00a3f464\DefaultProvider\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Protocol
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Protocol\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Endpoint
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\Endpoint\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\CustomProperties
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\CustomProperties\LOG
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\CustomProperties\LOG\Size
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\CustomProperties\LOG\Size\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\AccountName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\SuppressDuplicateDuration
- HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CurrentVersion\ASR\RestoreSession
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\NetworkDtcAccess
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\NetworkDtcAccessAdmin
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\NetworkDtcAccessClients
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\NetworkDtcAccessTransactions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\NetworkDtcAccessTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\AllowOnlySecureRpcCalls
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\XaTransactions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\LuTransactions
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\CustomProperties\LOG\Path
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\07b18b67-1b76-4a85-8df8-37392cb40241\CustomProperties\LOG\Path\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\LoggingOptions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\LoggingOptions\RequestSessionUp
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\LoggingOptions\MaxBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\LoggingOptions\MinBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\LoggingOptions\BufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\LoggingOptions\MaxFileSize
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MiniNT
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\UniqueId
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Active
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\ControlFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Transaction_Transitions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Transaction_Transitions\UniqueId
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Transaction_Transitions\Active
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Transaction_Transitions\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Modules\Transaction_Transitions\ControlFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\MSDTC\Changed
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\DtcMaxSessions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\DoNotGoIdle
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\DisableTipPassThruCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\MinCheckpointInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\MaxCheckpointInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\WaitForAllXaBranchPrepares
- HKEY_LOCAL_MACHINE\Software\Microsoft\MSDTC\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\SnapshotSecurityDisabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\ServerTcpPort
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\CmCancelRpcAfter
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\CmMaxNumberBindRetries
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\CmMaxIdlePings
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\CmPingFreqSecs
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\CmVerbose
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\RpcQosCapabilities
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\RpcQosIdentity
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\RpcAuthnSvc
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\NumCCcimHistoryEntries
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\11aca493-fed3-47fc-b70f-e87aa0689f70
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\11aca493-fed3-47fc-b70f-e87aa0689f70\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\11aca493-fed3-47fc-b70f-e87aa0689f70\Description\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Description\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Description\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Svcid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Svcid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\ced2de40-bff6-11ce-9de8-00aa00a3f464
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Host
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Host\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Clsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Clsid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\ced2de40-bff6-11ce-9de8-00aa00a3f464\DefaultProvider
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\ced2de40-bff6-11ce-9de8-00aa00a3f464\DefaultProvider\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Protocol
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Protocol\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Endpoint
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\Endpoint\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\NoTracking
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\SecurityService\9
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LsaExtensionConfig\SspiCli
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureDll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\LsaExtensionConfig\SspiCli\CheckSignatureRoutine
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurityProviders\SecurityProviders
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\SspiCache
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Name
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Comment
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Capabilities
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\RpcId
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Version
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\SspiCache\credssp.dll\TokenSize
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SaslProfiles
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\CustomProperties
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\b7e5772a-bb68-4033-8a3e-a7da6cc56eb1\CustomProperties\DAC
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Description\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Svcid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Svcid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\01366d42-c04e-11d1-b1c0-00c04fc2f3ef
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Host
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Host\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Clsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Clsid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\01366d42-c04e-11d1-b1c0-00c04fc2f3ef\DefaultProvider
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\01366d42-c04e-11d1-b1c0-00c04fc2f3ef\DefaultProvider\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Protocol
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Protocol\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Endpoint
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\f4ea83d5-f487-477e-881d-99efde6e1f84\Endpoint\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\OverrideTipHostname
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Svcid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Svcid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\6407e780-7e5d-11d0-8ce6-00c04fdc877e
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Host
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Host\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Clsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Clsid\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\6407e780-7e5d-11d0-8ce6-00c04fdc877e\DefaultProvider
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SVCID.Local\6407e780-7e5d-11d0-8ce6-00c04fdc877e\DefaultProvider\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Protocol
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Protocol\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Endpoint
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CID.Local\85d3da72-90e4-4f87-909d-cfe5d5f8f2d0\Endpoint\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\XaTmMinWarmRecoveryInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\XaTmMaxWarmRecoveryInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\TransactionBridge
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\LogWarnEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\SHARED_MEMORY_MUTEX_TIMEOUT
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\SupportNs
- HKEY_LOCAL_MACHINE\Software\Debug\ehRec.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ehRec.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ehRec.EXE\AppId
- Policy\Standards
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\Standards
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\standards\v2.0.50727
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\GCStressStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\GCStressStartAtJit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\DisableConfigCache
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\AppPatch\v4.0.30319.00000\mscorwks.dll
- HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ehRec.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
- HKEY_CURRENT_USER\Software\Microsoft\Fusion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\VersioningLog
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
- HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\Internet
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Security\Policy\Extensions\NamedPermissionSets\LocalIntranet
- HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v2.0.50727\Security\Policy
- HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\LatestIndex
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\index14a
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\index14a\NIUsageMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\index14a\ILUsageMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\ConfigMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\ConfigString
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\MVID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\EvalationData
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\Status
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\ILDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\NIDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\181938c6\7950e2c5\82\MissingDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\7950e2c5\19b8f67f\82
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\7950e2c5\19b8f67f\82\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\7950e2c5\19b8f67f\82\Status
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\7950e2c5\19b8f67f\82\Modules
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\7950e2c5\19b8f67f\82\SIG
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\7950e2c5\19b8f67f\82\LastModTime
- HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\GACChangeNotification\Default
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\mscorlib,2.0.0.0,,b77a5c561934e089,AMD64
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5CC76543-0F98-47A8-AFA2-208562EF9454}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5CC76543-0F98-47A8-AFA2-208562EF9454}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5CC76543-0F98-47A8-AFA2-208562EF9454}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5CC76543-0F98-47A8-AFA2-208562EF9454}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5CC76543-0F98-47A8-AFA2-208562EF9454}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5CC76543-0F98-47A8-AFA2-208562EF9454}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5CC76543-0F98-47A8-AFA2-208562EF9454}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5CC76543-0F98-47A8-AFA2-208562EF9454}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7F6316B4-4D69-4765-B0A3-B2598F2FA80A}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\5D480935
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95142BF8-5F09-452B-B384-44AF84A500C6}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95142BF8-5F09-452B-B384-44AF84A500C6}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95142BF8-5F09-452B-B384-44AF84A500C6}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95142BF8-5F09-452B-B384-44AF84A500C6}\ProgID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95142BF8-5F09-452B-B384-44AF84A500C6}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95142BF8-5F09-452B-B384-44AF84A500C6}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95142BF8-5F09-452B-B384-44AF84A500C6}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95142BF8-5F09-452B-B384-44AF84A500C6}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{004965CF-B85C-4207-8703-37B499041028}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{004965CF-B85C-4207-8703-37B499041028}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{004965CF-B85C-4207-8703-37B499041028}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FA01D54E-D0C5-418C-8D72-C0976DA13A56}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FA01D54E-D0C5-418C-8D72-C0976DA13A56}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FA01D54E-D0C5-418C-8D72-C0976DA13A56}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Media Center\Service\Recording
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Recording\UpdatedPowerPolicy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\ConfigMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\ConfigString
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\MVID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\EvalationData
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\Status
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\ILDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\NIDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\NI\10d9352a\554b7c7f\97\MissingDependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3d590c3f\59f3b67b\89
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3d590c3f\59f3b67b\89\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3d590c3f\59f3b67b\89\Status
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3d590c3f\59f3b67b\89\Modules
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3d590c3f\59f3b67b\89\SIG
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3d590c3f\59f3b67b\89\LastModTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3b249b34\157e0c82\78
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3b249b34\157e0c82\78\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3b249b34\157e0c82\78\Status
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3b249b34\157e0c82\78\Modules
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3b249b34\157e0c82\78\SIG
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64\IL\3b249b34\157e0c82\78\LastModTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.2.0.System.Transactions__b77a5c561934e089
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\System.Transactions,2.0.0.0,,b77a5c561934e089,AMD64
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.8.0.Microsoft.VisualC__b03f5f7f11d50a3a
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default\Microsoft.VisualC,8.0.0.0,,b03f5f7f11d50a3a,MSIL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\EPG.fullPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\EPG.instance
- HKEY_LOCAL_MACHINE\Software\Debug\mcstore
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\CseOn
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\TailCallOpt
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\PInvokeInline
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\PInvokeCalliOpt
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\NewGCCalc
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\TURNOFFDEBUGINFO
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\DisableHotCold
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\internal\jit\Perf
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\clientid
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\DBPOOL
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\DBMAXSIZE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\FLUSHINTERVAL
- HKEY_CLASSES_ROOT\CLSID
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer\Debug
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Secure
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData
- HKEY_LOCAL_MACHINE\Software\Classes\Installer
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Components
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Dependencies
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Patches
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\msiexec.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{000C101C-0000-0000-C000-000000000046}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{000C101C-0000-0000-C000-000000000046}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{000C101C-0000-0000-C000-000000000046}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{000C101C-0000-0000-C000-000000000046}\ProgId\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{000C101C-0000-0000-C000-000000000046}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{000C101C-0000-0000-C000-000000000046}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{000C101C-0000-0000-C000-000000000046}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{000C101C-0000-0000-C000-000000000046}\InprocHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\13BAD134
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceDll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceManifest
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Parameters\ServiceMain
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\LogFileMinMemory
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS\Performance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Counter
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\First Help
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Counter
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\Last Help
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\PerfMMFileName
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\BackupRestore\FilesNotToBackup
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToBackup\BITS_metadata
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\BITS
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobInactivityTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TimeQuantaLength
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobNoProgressTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\JobMinimumRetryDelay
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TransferBufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackBegin
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackEnd
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\SleepAtCallbackDuration
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\TestFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\ForceFileFlush
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\UseLmCompat
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS\IGDSearcherDLL
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2085F28-FEB7-404A-B8E7-E659BDEAAA02}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2085F28-FEB7-404A-B8E7-E659BDEAAA02}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADDA3D55-6F72-4319-BFF9-18600A539B10}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADDA3D55-6F72-4319-BFF9-18600A539B10}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADDA3D55-6F72-4319-BFF9-18600A539B10}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{00020424-0000-0000-C000-000000000046}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocHandler
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\BITS\Throttling
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADDA3D55-6F72-4319-BFF9-18600A539B10}\Forward
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADDA3D55-6F72-4319-BFF9-18600A539B10}\TypeLib
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADDA3D55-6F72-4319-BFF9-18600A539B10}\TypeLib\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ADDA3D55-6F72-4319-BFF9-18600A539B10}\TypeLib\Version
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DB3442A7-A2E9-4A59-9CB5-F5C1A5D901E5}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DB3442A7-A2E9-4A59-9CB5-F5C1A5D901E5}\1.0
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DB3442A7-A2E9-4A59-9CB5-F5C1A5D901E5}\1.0\0
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DB3442A7-A2E9-4A59-9CB5-F5C1A5D901E5}\1.0\0\win64
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DB3442A7-A2E9-4A59-9CB5-F5C1A5D901E5}\1.0\0\win32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DB3442A7-A2E9-4A59-9CB5-F5C1A5D901E5}\1.0\0\win32\(Default)
Show More 2595

Executed Commands

C:\Windows\System32\alg.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc
- "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE"
- "C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
- "C:\Program Files (x86)\WinPcap\rpcapd.exe" -d -f "C:\Program Files (x86)\WinPcap\rpcapd.ini"
- C:\Windows\System32\svchost.exe -k WerSvcGroup
- C:\Windows\system32\svchost.exe -k netsvcs
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
- C:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
- C:\Windows\ehome\ehRecvr.exe
- C:\Windows\ehome\ehsched.exe
- C:\Windows\system32\fxssvc.exe
- C:\Windows\System32\msdtc.exe
- C:\Windows\system32\msiexec.exe /V
- C:\Windows\System32\svchost.exe -k netsvcs
- C:\Windows\SysWow64\perfhost.exe
- C:\Windows\system32\locator.exe
- C:\Windows\System32\snmptrap.exe
- C:\Windows\System32\vds.exe
- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
- "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /cr
- "C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe"
- "C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe"
- "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ua /installsource core
- C:\Windows\system32\WerFault.exe -u -p 2472 -s 352
- C:\Windows\system32\wbem\wmiprvse.exe -Embedding
- C:\Windows\ehome\ehRec.exe -Embedding
- C:\Windows\ehome\ehtray.exe /nav:-2
Show More 27

Read Files

C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\sysnative\alg.exe
C:\Windows\Fonts\staticcache.dat
C:\Windows\sysnative\imageres.dll
\Device\KsecDD
- C:\Windows\sysnative\LogFiles\Scm\fb3c354d-297a-4eb2-9b58-090f6361906b
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
- C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
- C:\Program Files (x86)\WinPcap\rpcapd.exe
- C:\bevevnhfi\bin\execsc.exe
- C:\bevevnhfi\bin\fQWmJDsb.exe
- C:\bevevnhfi\bin\loader.exe
- C:\bevevnhfi\bin\loader_x64.exe
- C:\bevevnhfi\bin\yFFKvqC.exe
- C:\mctrlc\bin\execsc.exe
- C:\mctrlc\bin\FoNQWrug.exe
- C:\mctrlc\bin\loader.exe
- C:\mctrlc\bin\loader_x64.exe
- C:\mctrlc\bin\qyCwoNN.exe
- C:\nidguu\bin\execsc.exe
- C:\nidguu\bin\loader.exe
- C:\nidguu\bin\loader_x64.exe
- C:\nidguu\bin\nURNEMUK.exe
- C:\nidguu\bin\rhfuTcC.exe
- C:\Program Files\7-Zip\7z.exe
- C:\Program Files\7-Zip\7zFM.exe
- C:\Program Files\7-Zip\7zG.exe
- C:\Program Files\7-Zip\Uninstall.exe
- C:\Program Files\DVD Maker\DVDMaker.exe
- C:\Program Files\Internet Explorer\ieinstal.exe
- C:\Program Files\Internet Explorer\ielowutil.exe
- C:\Program Files\Internet Explorer\iexplore.exe
- C:\Program Files\MPC-HC\CrashReporter\sendrpt.exe
- C:\Program Files\MPC-HC\mpc-hc64.exe
- C:\Program Files\MPC-HC\unins000.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\uninst.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxControl.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxDrvInst.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxTray.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions\VBoxWHQLFake.exe
- C:\Program Files\Sandboxie\32\SbieSvc.exe
- C:\Program Files\Sandboxie\License.exe
- C:\Program Files\Sandboxie\SandboxieBITS.exe
- C:\Program Files\Sandboxie\SandboxieCrypto.exe
- C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe
- C:\Program Files\Sandboxie\SandboxieRpcSs.exe
- C:\Program Files\Sandboxie\SandboxieWUAU.exe
- C:\Program Files\Sandboxie\SbieCtrl.exe
- C:\Program Files\Sandboxie\SbieIni.exe
- C:\Program Files\Sandboxie\SbieSvc.exe
- C:\Program Files\Sandboxie\Start.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\A3DUtility.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroBroker.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32Info.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroTextExtractor.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeCollabSync.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Eula.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\LogTransport2.exe
- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AcrobatUpdater.exe
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe
- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\ReaderUpdater.exe
- C:\Program Files (x86)\Common Files\Adobe\Updater6\AdobeUpdaterInstallMgr.exe
- C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe
- C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe
- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
- C:\Program Files (x86)\Common Files\microsoft shared\DW\DW20.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\DW\DWTRIG20.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\ink\mip.exe
- C:\Program Files (x86)\Common Files\microsoft shared\ink\pipanel.exe
- C:\Program Files (x86)\Common Files\microsoft shared\ink\TabTip32.exe
- C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\msinfo32.exe
- C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\OINFOP12.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\ACECNFLT.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSE7.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOICONS.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOXMLED.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\ODSERV.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\OFFDIAG.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\ODEPLOY.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\Office Setup Controller\SETUP.EXE
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\armv4i\dxcap.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\armv4i\vsgraphicsremoteengine.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\x86\dxcap.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\12.0\Debugger\target\x86\vsgraphicsremoteengine.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\SmartTagInstall.exe
- C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\delegate_execute.exe
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Installer\chrmstp.exe
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Installer\setup.exe
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\nacl64.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdate.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateBroker.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateComRegisterShell64.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateOnDemand.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateSetup.exe
- C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleUpdateWebPlugin.exe
- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\48.0.2564.103\48.0.2564.103_chrome_installer.exe
- C:\Program Files (x86)\IDA\idag.exe
- C:\Program Files (x86)\IDA\idau.exe
- C:\Program Files (x86)\IDA\idaw.exe
- C:\Program Files (x86)\IDA\unins000.exe
- C:\Program Files (x86)\IDA\win32_remote.exe
- C:\Program Files (x86)\IDA\wingraph32.exe
- C:\Program Files (x86)\Internet Explorer\ExtExport.exe
- C:\Program Files (x86)\Internet Explorer\ieinstal.exe
- C:\Program Files (x86)\Internet Explorer\ielowutil.exe
- C:\Program Files (x86)\Internet Explorer\iexplore.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\jabswitch.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\java-rmi.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\java.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\javacpl.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\javaw.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\javaws.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\jjs.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2launcher.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\keytool.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\kinit.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\klist.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\ktab.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\orbd.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\pack200.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\policytool.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\rmid.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\rmiregistry.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\servertool.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssvagent.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\tnameserv.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\unpack200.exe
- C:\Program Files (x86)\Mozilla Firefox\crashreporter.exe
- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
- C:\Program Files (x86)\Mozilla Firefox\maintenanceservice.exe
- C:\Program Files (x86)\Mozilla Firefox\maintenanceservice_installer.exe
- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
- C:\Program Files (x86)\Mozilla Firefox\plugin-hang-ui.exe
- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
- C:\Program Files (x86)\Mozilla Firefox\updater.exe
- C:\Program Files (x86)\Mozilla Firefox\webapp-uninstaller.exe
- C:\Program Files (x86)\Mozilla Firefox\webapprt-stub.exe
- C:\Program Files (x86)\Mozilla Firefox\wow_helper.exe
- C:\Program Files (x86)\Notepad++\notepad++.exe
- C:\Program Files (x86)\Notepad++\nppIExplorerShell.exe
- C:\Program Files (x86)\Notepad++\uninstall.exe
- C:\Program Files (x86)\Notepad++\updater\gpup.exe
- C:\Program Files (x86)\Safer Networking\FileAlyzer 2\FileAlyzer2.exe
- C:\Program Files (x86)\Safer Networking\FileAlyzer 2\unins000.exe
- C:\Program Files (x86)\Universal Extractor\bin\7z.exe
- C:\Program Files (x86)\Universal Extractor\bin\arc.exe
- C:\Program Files (x86)\Universal Extractor\bin\arj.exe
- C:\Program Files (x86)\Universal Extractor\bin\AspackDie.exe
- C:\Program Files (x86)\Universal Extractor\bin\bin2iso.exe
- C:\Program Files (x86)\Universal Extractor\bin\BOOZ.EXE
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet.config
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll
- C:\Program Files (x86)\Google\Update\1.3.29.5\goopdate.dll
- C:\Windows\System32\IPHLPAPI.DLL
- C:\Windows\System32\winnsi.dll
- C:\Windows\System32\netapi32.dll
- C:\Windows\System32\netutils.dll
- C:\Windows\System32\srvcli.dll
- C:\Windows\System32\rasapi32.dll
- C:\Windows\System32\rasman.dll
- C:\Windows\System32\version.dll
- C:\Windows\System32\userenv.dll
- C:\Windows\System32\profapi.dll
- C:\Windows\System32\wtsapi32.dll
- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
- C:\Windows\System32\msi.dll
- C:\Windows\System32\msimg32.dll
- C:\Windows\System32\uxtheme.dll
- \??\PIPE\wkssvc
- C:\Program Files (x86)\Google\CrashReports
- \??\pipe\GoogleCrashServices\S-1-5-18
- C:\Program Files (x86)\Google\Update\1.3.29.5\goopdateres_en.dll
- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
- C:\Windows\sysnative\dllhost.exe
- C:\Windows\ehome\ehrecvr.exe
- C:\Windows\ehome\ehsched.exe
- C:\Windows\sysnative\FXSSVC.exe
- C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
- C:\Windows\sysnative\msdtc.exe
- C:\Windows\sysnative\msiexec.exe
- C:\Windows\SysWOW64\perfhost.exe
- C:\Windows\sysnative\Locator.exe
- C:\Windows\sysnative\snmptrap.exe
- C:\Windows\sysnative\sppsvc.exe
- C:\Windows\sysnative\vds.exe
- C:\Windows\sysnative\VSSVC.exe
- C:\Windows\sysnative\wbengine.exe
- C:\Windows\sysnative\wbem\WmiApSrv.exe
- C:\Program Files (x86)\WinPcap\rpcapd.ini
- \??\PIPE\srvsvc
- \Device\LanmanDatagramReceiver
- C:\Windows\SysWOW64\net.exe
- C:\Windows\AppPatch\sysmain.sdb
- C:\Windows\SysWOW64\
- C:\Windows\SysWOW64\net1.exe
- C:\Windows\SysWOW64\sc.exe
- C:\Windows\SysWOW64\en-US\sc.exe.mui
- C:\Windows\Temp\fwtsqmfile00.sqm
- C:\Windows\appcompat\Programs\RecentFileCache.bcf
- C:\Windows\AppPatch\AppPatch64\sysmain.sdb
- C:\Windows\ehome\
- C:\Windows\sysnative\Tasks\Microsoft\Windows\Media Center\ehDRMInit
- C:\Windows\sysnative\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath
- C:\Windows\ehome\ehtray.exe
- C:\Windows\sysnative\Tasks\Microsoft\Windows\WDI\ResolutionHost
- C:\Windows\sysnative\
- C:\Windows\ehome\ehrec.exe
- C:\Windows\SysWOW64\en-US\perfhost.exe.mui
- C:\Windows\SoftwareDistribution\DataStore\DataStore.edb
- C:\Windows\Temp\GUR7F31.tmp
- C:\Windows\SysWOW64\shell32.dll
- C:\
- C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
- C:\Users\desktop.ini
- C:\Users
- C:\Users\user
- C:\Users\user\AppData
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\prefs.js
- \??\pipe\GoogleCrashServices\S-1-5-18-x64
- C:\Windows\sysnative\en-US\faultrep.dll.mui
- C:\Windows\sysnative\winxp\triage.ini
- C:\Windows\sysnative\en-US\KERNELBASE.dll.mui
- C:\Windows\sysnative\en-US\wer.dll.mui
- C:\Windows\sysnative\ntdll.dll
- C:\Windows\sysnative\kernel32.dll
- C:\Windows\sysnative\KERNELBASE.dll
- C:\Windows\sysnative\advapi32.dll
- C:\Windows\sysnative\msvcrt.dll
- C:\Windows\sysnative\sechost.dll
- C:\Windows\sysnative\rpcrt4.dll
- C:\Windows\sysnative\atl.dll
- C:\Windows\sysnative\user32.dll
- C:\Windows\sysnative\gdi32.dll
- C:\Windows\sysnative\lpk.dll
- C:\Windows\sysnative\usp10.dll
- C:\Windows\sysnative\ws2_32.dll
- C:\Windows\sysnative\nsi.dll
- C:\Windows\sysnative\ole32.dll
- C:\Windows\sysnative\oleaut32.dll
- C:\Windows\sysnative\wsock32.dll
- C:\Windows\sysnative\mswsock.dll
- C:\Windows\sysnative\imm32.dll
- C:\Windows\sysnative\msctf.dll
- C:\Windows\sysnative\api-ms-win-core-synch-l1-2-0.DLL
- C:\Windows\sysnative\sspicli.dll
- C:\Windows\sysnative\winhttp.dll
- C:\Windows\sysnative\webio.dll
- C:\Windows\sysnative\crypt32.dll
- C:\Windows\sysnative\msasn1.dll
- C:\Windows\sysnative\mpr.dll
- C:\Windows\sysnative\secur32.dll
- C:\Windows\sysnative\shlwapi.dll
- C:\Windows\sysnative\dnsapi.dll
- C:\Windows\sysnative\ntmarta.dll
- C:\Windows\sysnative\Wldap32.dll
- C:\Windows\sysnative\CRYPTBASE.dll
- C:\Windows\sysnative\clbcatq.dll
- C:\Windows\sysnative\cryptsp.dll
- C:\Windows\sysnative\rsaenh.dll
- C:\Windows\sysnative\RpcRtRemote.dll
- C:\Windows\sysnative\IPHLPAPI.DLL
- C:\Windows\sysnative\winnsi.dll
- C:\Windows\sysnative\tzres.dll
- C:\Windows\Registration\R000000000001.clb
- \??\WMIDataDevice
- \??\PIPE\samr
- C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
- C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
- C:\Windows\sysnative\wbem\repository\INDEX.BTR
- \??\pipe\PIPE_EVENTROOT\CIMV2WMI SELF-INSTRUMENTATION EVENT PROVIDER
- \??\pipe\PIPE_EVENTROOT\CIMV2PROVIDERSUBSYSTEM
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe.config
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvc.dll
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe.config
- C:\Windows\sysnative\drivers\acpi.sys
- C:\Windows\sysnative\drivers\ndis.sys
- C:\Windows\sysnative\drivers\mssmbios.sys
- C:\Windows\sysnative\drivers\hdaudbus.sys
- C:\Windows\sysnative\drivers\intelppm.sys
- C:\Windows\sysnative\drivers\portcls.sys
- C:\Windows\sysnative\drivers\monitor.sys
- C:\Windows\sysnative\en-US\advapi32.dll.mui
- C:\Windows\sysnative\drivers\en-US\ACPI.sys.mui
- C:\Windows\sysnative\drivers\en-US\ndis.sys.mui
- C:\Windows\sysnative\drivers\en-US\mssmbios.sys.mui
- C:\Windows\sysnative\drivers\en-US\HDAudBus.sys.mui
- C:\Windows\sysnative\drivers\en-US\intelppm.sys.mui
- C:\Windows\sysnative\drivers\en-US\portcls.SYS.mui
- C:\Windows\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{BB1BBD67-ED8C-4496-88C8-4131F3DAEEF5}.crmlog
- C:\Windows\ehome\ehProxy.dll
- C:\Windows\sysnative\taskhost.exe
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Themes\slideshow.ini
- C:\Windows\ehome\ehres.dll
- C:\Windows\ehome\en-US\EHRes.dll.mui
- \Device\PcwDrv
- C:\ProgramData\Microsoft\Windows NT\MSFax\Queue\TST4777.tmp
- C:\ProgramData\Microsoft\Windows NT\MSFax\TST4A76.tmp
- C:\ProgramData\Microsoft\Windows NT\MSFax
- C:\ProgramData\Microsoft\Windows NT\MSFax\TST4BEE.tmp
- C:\ProgramData\Microsoft\Windows NT\MSFax\SentItems
- C:\ProgramData\Microsoft\Windows NT\MSFax\Inbox
- C:\Windows\sysnative\en-US\radarrs.dll.mui
- C:\Windows\sysnative\radarrs.dll
- C:\Windows\sysnative\en-US\DUser.dll.mui
- C:\Windows\sysnative\en\DUser.dll.mui
- C:\Windows\winsxs\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3\COMCTL32.dll.mui
- C:\Windows\DtcInstall.log
- C:\Windows\sysnative\Msdtc\MSDTC.LOG
- C:\Windows\sysnative\en-US\msdtcVSp1res.dll.mui
- C:\Windows\ehome\ehRec.exe.config
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
- C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\msvcr80.dll
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\machine.config
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\security.config
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\security.config.cch
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\enterprisesec.config
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\enterprisesec.config.cch
- C:\Windows\sysnative\config\systemprofile\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\64bit\security.config
- C:\Windows\sysnative\config\systemprofile\AppData\Roaming\Microsoft\CLR Security Config\v2.0.50727.312\64bit\security.config.cch
- C:\Windows\assembly\NativeImages_v2.0.50727_64\index14a.dat
- C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\9469491f37d9c35b596968b206615309\mscorlib.ni.dll
- C:\Windows\assembly\NativeImages_v2.0.50727_64\mcstoredb\e049a1a3948a031aed69690fc102ea6c\mcstoredb.ni.dll
- C:\Windows\assembly\GAC_64\mcstoredb\6.1.0.0__31bf3856ad364e35\mcstoredb.dll
- C:\Windows\sysnative\rasapi32.dll
- C:\Windows\sysnative\rasman.dll
- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
- C:\programdata\microsoft\eHome\mcepg2-0\Blocks.mem
- C:\programdata\microsoft\eHome\Counter.mem
- C:\programdata\microsoft\eHome\mcepg2-0\Root.mem
- C:\programdata\microsoft\eHome\mcepg2-0.db
- C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll
- C:\Windows\WindowsShell.Manifest
- C:\Windows\sysnative\upnp.dll
Show More 349

Mutexes

Global\Multiarch.m0yv-20503a4e5d0020a4483a4627-b
Global\Multiarch.m0yv-20503a4e5d0020a4-inf
CicLoadWinStaWinSta0
Local\MSCTF.CtfMonitorInstMutexDefault1
Global\Multiarch.m0yv-20503a4e5d0020a49ea72c54-b
- Global\G{D19BAF17-7C87-467E-8D63-6C4B1C836373}
- Global\G{B5665124-2B19-40e2-A7BC-B44321E72C4B}
- Global\OfficeSourceEngineMutex
- Global\G{D0BB2EF1-C183-4cdb-B218-040922092869}
- Global\G{6885AE8E-C070-458d-9711-37B9BEAB65F6}
- Global\G{66CC0160-ABB3-4066-AE47-1CA6AD5065C8}
- Local\WERReportingForProcess2472
- Global\\xe5\x88\x90\xc2\x94
- http://www.microsoft.com/windowsxp/mediacenter/ehtray.exe/singleinstancemutex
- Global\MSDTC_STATS_EVENT
- Global\MSDTC_STATS_FILE
- Global\CLR_CASOFF_MUTEX
- RasPbFile
- Global\MCStoreOpen_b4cae1f9a3aead62bebb934ca33cadb730c8d3ed
- Global\MCStoreSyncMem_5ea381292eeb3ed3e61dc84a3dbd4d7f59767eca
- Global\MCStoreSyncMem_7715dc857070a1523dea43f32f1fe67c1ce58e0b
- Global\MCStoreSyncMem_71bdfe29063ac557a4e7b3205ed180408457fcd4
- Global\eHome_DbMutex_1
- Global\__?_c:_programdata_microsoft_ehome_mcepg2-0.db
- Global\__?_c:_programdata_microsoft_ehome_mcepg2-0.db:x
Show More 20

Started Services

WerSvc
aspnet_state
clr_optimization_v4.0.30319_32
clr_optimization_v4.0.30319_64
gupdate
- odserv
- ose
- rpcapd
- clr_optimization_v2.0.50727_32
- clr_optimization_v2.0.50727_64
- COMSysApp
- ehRecvr
- ehSched
- Fax
- MSDTC
- msiserver
- PerfHost
- RpcLocator
- SNMPTRAP
- vds
- BITS
Show More 16

Modified Registry Keys

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Start
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\ObjectName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\aspnet_state\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_32\Type
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v4.0.30319_64\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\gupdate\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\odserv\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ose\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\rpcapd\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WerSvc\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_32\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\clr_optimization_v2.0.50727_64\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\COMSysApp\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehRecvr\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ehSched\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Fax\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSDTC\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\msiserver\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PerfHost\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\RpcLocator\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\ObjectName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SNMPTRAP\Type
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Start
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\vds\Type
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\LastCodeRedCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PreviousServiceShutdown
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ProcessID
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\LastStartedAU
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\Debug\ExceptionRecord
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ThrottleDrege
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceDllUnloadOnStop
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2\SCM Event Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\IDE\DiskVBOX_HARDDISK___________________________1.0_____\5&33d1638a&0&0.0.0_0-{05901221-D566-11d1-B2F0-00A0C9062910}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\advapi32.dll[MofResourceName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\en-US\advapi32.dll.mui[MofResourceName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\drivers\ACPI.sys[ACPIMOFResource]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\drivers\en-US\ACPI.sys.mui[ACPIMOFResource]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\drivers\ndis.sys[MofResourceName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\drivers\en-US\ndis.sys.mui[MofResourceName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\mssmbios.sys[MofResource]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\en-US\mssmbios.sys.mui[MofResource]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\HDAudBus.sys[HDAudioMofName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\en-US\HDAudBus.sys.mui[HDAudioMofName]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\intelppm.sys[PROCESSORWMI]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\en-US\intelppm.sys.mui[PROCESSORWMI]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\System32\Drivers\portcls.SYS[PortclsMof]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\System32\Drivers\en-US\portcls.SYS.mui[PortclsMof]
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\WDM\C:\Windows\system32\DRIVERS\monitor.sys[MonitorWMI]
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\ServiceStarted
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\Heartbeat
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\WaitingForShutdown
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\ServiceFailures
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler\HeartbeatIntervalMs
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Media Center
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\Password
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\MaxLineCloseTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\AllowRemote
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\APIVersion
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\LanguageList
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1130
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Device Providers\{2172FD8F-11F6-11D3-90BF-006094EB630B}\GUID
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1134
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1131
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1132
- HKEY_USERS\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\6D\52C64B7E\@fxsresm.dll,-1133
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\Server
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\From
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\Receipts\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fax\ManualAnswerDevice
- HKEY_LOCAL_MACHINE\Software\Microsoft\Fax\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\EPG\clientid
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\BITS\Performance\PerfMMFileName
Show More 98

Loading...