Analysis Details
Category Package Started Completed Duration Options Logs
URL edge 2026-05-28 19:34:07 2026-05-28 19:35:33 86s
Reports JSON
Options
interactive=1
nohuman=yes
vnc_port=5910
Analysis Log
2026-05-28 19:33:25,382 [root] INFO: Date set to: 20260528T19:34:15, timeout set to: 200
2026-05-28 19:34:15,004 [root] DEBUG: Starting analyzer from: C:\hsngo5k_
2026-05-28 19:34:15,005 [root] DEBUG: Storing results at: C:\nhdjfgMY
2026-05-28 19:34:15,005 [root] DEBUG: Pipe server name: \\.\PIPE\KLuGAxLLsj
2026-05-28 19:34:15,005 [root] DEBUG: Python path: C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64
2026-05-28 19:34:15,005 [root] INFO: analysis running as an admin
2026-05-28 19:34:15,005 [root] INFO: analysis package specified: "edge"
2026-05-28 19:34:15,005 [root] DEBUG: importing analysis package module: "modules.packages.edge"...
2026-05-28 19:34:15,007 [root] DEBUG: imported analysis package "edge"
2026-05-28 19:34:15,007 [root] DEBUG: initializing analysis package "edge"...
2026-05-28 19:34:15,007 [root] DEBUG: New location of moved file: https://badoomovies.com/download/BadooMovies.exe
2026-05-28 19:34:15,007 [root] INFO: Analyzer: Package modules.packages.edge does not specify a dll option
2026-05-28 19:34:15,008 [root] INFO: Analyzer: Package modules.packages.edge does not specify a dll_64 option
2026-05-28 19:34:15,008 [root] INFO: Analyzer: Package modules.packages.edge does not specify a loader option
2026-05-28 19:34:15,008 [root] INFO: Analyzer: Package modules.packages.edge does not specify a loader_64 option
2026-05-28 19:34:15,021 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser"
2026-05-28 19:34:15,042 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig"
2026-05-28 19:34:15,052 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise"
2026-05-28 19:34:15,057 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human"
2026-05-28 19:34:15,059 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops'
2026-05-28 19:34:15,060 [lib.api.screenshot] ERROR: No module named 'PIL'
2026-05-28 19:34:15,060 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots"
2026-05-28 19:34:15,061 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump"
2026-05-28 19:34:15,061 [root] DEBUG: Initialized auxiliary module "Browser"
2026-05-28 19:34:15,061 [root] DEBUG: attempting to configure 'Browser' from data
2026-05-28 19:34:15,062 [root] DEBUG: module Browser does not support data configuration, ignoring
2026-05-28 19:34:15,062 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"...
2026-05-28 19:34:15,063 [root] DEBUG: Started auxiliary module modules.auxiliary.browser
2026-05-28 19:34:15,063 [root] DEBUG: Initialized auxiliary module "DigiSig"
2026-05-28 19:34:15,063 [root] DEBUG: attempting to configure 'DigiSig' from data
2026-05-28 19:34:15,064 [root] DEBUG: module DigiSig does not support data configuration, ignoring
2026-05-28 19:34:15,064 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"...
2026-05-28 19:34:15,064 [modules.auxiliary.digisig] DEBUG: Skipping authenticode validation, analysis is not a file
2026-05-28 19:34:15,064 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig
2026-05-28 19:34:15,064 [root] DEBUG: Initialized auxiliary module "Disguise"
2026-05-28 19:34:15,064 [root] DEBUG: attempting to configure 'Disguise' from data
2026-05-28 19:34:15,065 [root] DEBUG: module Disguise does not support data configuration, ignoring
2026-05-28 19:34:15,065 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"...
2026-05-28 19:34:15,067 [modules.auxiliary.disguise] INFO: Launched background process notepad.exe hidden (PID: 680)
2026-05-28 19:34:15,067 [modules.auxiliary.disguise] INFO: Disguising GUID to b9707053-9b47-434e-80d6-fdf06c9a7deb
2026-05-28 19:34:15,067 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise
2026-05-28 19:34:15,068 [root] DEBUG: Initialized auxiliary module "Human"
2026-05-28 19:34:15,068 [root] DEBUG: attempting to configure 'Human' from data
2026-05-28 19:34:15,068 [root] DEBUG: module Human does not support data configuration, ignoring
2026-05-28 19:34:15,068 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"...
2026-05-28 19:34:15,069 [root] DEBUG: Started auxiliary module modules.auxiliary.human
2026-05-28 19:34:15,069 [root] DEBUG: Initialized auxiliary module "Screenshots"
2026-05-28 19:34:15,069 [root] DEBUG: attempting to configure 'Screenshots' from data
2026-05-28 19:34:15,070 [root] DEBUG: module Screenshots does not support data configuration, ignoring
2026-05-28 19:34:15,070 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"...
2026-05-28 19:34:15,070 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled
2026-05-28 19:34:15,070 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots
2026-05-28 19:34:15,070 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets"
2026-05-28 19:34:15,070 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data
2026-05-28 19:34:15,071 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring
2026-05-28 19:34:15,071 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"...
2026-05-28 19:34:15,072 [modules.auxiliary.tlsdump] WARNING: Unable to find lsass.exe process
2026-05-28 19:34:15,073 [root] DEBUG: Started auxiliary module modules.auxiliary.tlsdump
2026-05-28 19:34:15,073 [root] INFO: Interactive mode enabled - injecting into explorer shell
2026-05-28 19:34:15,096 [lib.api.process] INFO: Monitor config for process 4692: C:\hsngo5k_\dll\4692.ini
2026-05-28 19:34:15,097 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:34:15,099 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:34:15,189 [root] DEBUG: Loader: Injecting process 4692 with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:15,364 [root] DEBUG: 4692: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-28 19:34:15,365 [root] DEBUG: 4692: Disabling sleep skipping.
2026-05-28 19:34:15,365 [root] DEBUG: 4692: Interactive desktop enabled.
2026-05-28 19:34:15,365 [root] DEBUG: 4692: Dropped file limit defaulting to 100.
2026-05-28 19:34:15,366 [root] DEBUG: 4692: Interactive desktop - injecting Explorer Shell
2026-05-28 19:34:15,370 [root] DEBUG: 4692: YaraInit: Compiled 44 rule files
2026-05-28 19:34:15,371 [root] DEBUG: 4692: YaraInit: Compiled rules saved to file C:\hsngo5k_\data\yara\capemon.yac
2026-05-28 19:34:15,473 [root] DEBUG: 4692: RtlInsertInvertedFunctionTable 0x00007FFBC7B6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFBC7CBD4F0
2026-05-28 19:34:15,476 [root] DEBUG: 4692: YaraScan: Scanning 0x00007FF627610000, size 0x545316
2026-05-28 19:34:15,545 [root] DEBUG: 4692: Monitor initialised: 64-bit capemon loaded in process 4692 at 0x00007FFB863A0000, thread 5576, image base 0x00007FF627610000, stack from 0x0000000010B51000-0x0000000010B60000
2026-05-28 19:34:15,547 [root] DEBUG: 4692: Commandline: C:\Windows\Explorer.EXE
2026-05-28 19:34:15,557 [root] DEBUG: 4692: Hooked 69 out of 69 functions
2026-05-28 19:34:15,586 [root] DEBUG: 4692: Syscall hook installed, syscall logging level 1
2026-05-28 19:34:15,599 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2026-05-28 19:34:15,600 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:15,601 [lib.api.process] INFO: Injected into 64-bit <Process 4692 explorer.exe>
2026-05-28 19:34:18,791 [root] DEBUG: 4692: caller_dispatch: Added region at 0x00007FF627610000 to tracked regions list (ntdll::NtDuplicateObject returns to 0x00007FF62762C161, thread 4696).
2026-05-28 19:34:18,792 [root] DEBUG: 4692: YaraScan: Scanning 0x00007FF627610000, size 0x545316
2026-05-28 19:34:18,830 [root] DEBUG: 4692: ProcessImageBase: Main module image at 0x00007FF627610000 unmodified (entropy change 0.000000e+00)
2026-05-28 19:34:20,246 [root] DEBUG: 4692: DLL loaded at 0x00007FFBB9D80000: C:\Windows\System32\dlnashext (0x56000 bytes).
2026-05-28 19:34:20,251 [root] DEBUG: 4692: DLL loaded at 0x00007FFB881F0000: C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.3636_none_91a19322cc8a92a3\gdiplus (0x1a5000 bytes).
2026-05-28 19:34:20,251 [root] DEBUG: 4692: DLL loaded at 0x00007FFBB4520000: C:\Windows\system32\wpdshext (0xa1000 bytes).
2026-05-28 19:34:20,296 [root] DEBUG: 4692: api-rate-cap: CoCreateInstance hook disabled due to rate
2026-05-28 19:34:21,553 [root] DEBUG: 4692: DLL loaded at 0x00007FFBB5020000: C:\Windows\System32\execmodelclient (0x63000 bytes).
2026-05-28 19:34:21,569 [root] DEBUG: 4692: DLL loaded at 0x00007FFBBA650000: C:\Windows\SYSTEM32\ploptin (0x13000 bytes).
2026-05-28 19:34:21,575 [root] DEBUG: 4692: DLL loaded at 0x00007FFBBA650000: C:\Windows\SYSTEM32\ploptin (0x13000 bytes).
2026-05-28 19:34:21,580 [root] DEBUG: 4692: DLL loaded at 0x00007FFBBA650000: C:\Windows\SYSTEM32\ploptin (0x13000 bytes).
2026-05-28 19:34:22,702 [root] DEBUG: 4692: DLL loaded at 0x00007FFBAC200000: C:\Windows\System32\windows.internal.shell.broker (0xdd000 bytes).
2026-05-28 19:34:22,732 [root] INFO: Restarting WMI Service
2026-05-28 19:34:24,767 [root] DEBUG: package modules.packages.edge does not support configure, ignoring
2026-05-28 19:34:24,767 [root] WARNING: configuration error for package modules.packages.edge: error importing data.packages.edge: No module named 'data.packages'
2026-05-28 19:34:24,768 [lib.core.compound] INFO: C:\Users\admin\AppData\Local\Temp already exists, skipping creation
2026-05-28 19:34:24,770 [lib.api.process] INFO: Successfully executed process from path "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" with arguments ""https://badoomovies.com/download/BadooMovies.exe"" with pid 5704
2026-05-28 19:34:24,770 [lib.api.process] INFO: Monitor config for process 5704: C:\hsngo5k_\dll\5704.ini
2026-05-28 19:34:24,771 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:34:24,772 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:34:24,776 [root] DEBUG: Loader: Injecting process 5704 (thread 3916) with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:24,777 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-28 19:34:24,777 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:24,778 [lib.api.process] INFO: Injected into 64-bit <Process 5704 msedge.exe>
2026-05-28 19:34:26,786 [lib.api.process] INFO: Successfully resumed process with pid 5704
2026-05-28 19:34:26,837 [root] DEBUG: 5704: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-28 19:34:26,838 [root] DEBUG: 5704: Disabling sleep skipping.
2026-05-28 19:34:26,838 [root] DEBUG: 5704: Interactive desktop enabled.
2026-05-28 19:34:26,839 [root] DEBUG: 5704: Dropped file limit defaulting to 100.
2026-05-28 19:34:26,847 [root] DEBUG: 5704: Edge-specific hook-set enabled.
2026-05-28 19:34:26,850 [root] DEBUG: 5704: YaraInit: Compiled rules loaded from existing file C:\hsngo5k_\data\yara\capemon.yac
2026-05-28 19:34:26,861 [root] DEBUG: 5704: RtlInsertInvertedFunctionTable 0x00007FFBC7B6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFBC7CBD4F0
2026-05-28 19:34:26,862 [root] DEBUG: 5704: Monitor initialised: 64-bit capemon loaded in process 5704 at 0x00007FFB863A0000, thread 3916, image base 0x00007FF66C3B0000, stack from 0x00000095AB5F4000-0x00000095AB600000
2026-05-28 19:34:26,862 [root] DEBUG: 5704: Commandline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" "https://badoomovies.com/download/BadooMovies.exe"
2026-05-28 19:34:26,871 [root] DEBUG: 5704: Hooked 2 out of 2 functions
2026-05-28 19:34:27,026 [root] DEBUG: 5704: Syscall hook installed, syscall logging level 1
2026-05-28 19:34:27,031 [root] DEBUG: 5704: RestoreHeaders: Restored original import table.
2026-05-28 19:34:27,032 [root] INFO: Loaded monitor into process with pid 5704
2026-05-28 19:34:27,034 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC5750000: C:\Windows\System32\bcryptprimitives (0x82000 bytes).
2026-05-28 19:34:27,039 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB4F50000: C:\Windows\SYSTEM32\version (0xa000 bytes).
2026-05-28 19:34:27,040 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC5C20000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-28 19:34:27,041 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4BF0000: C:\Windows\SYSTEM32\Wldp (0x2d000 bytes).
2026-05-28 19:34:27,042 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC3310000: C:\Windows\SYSTEM32\windows.storage (0x79b000 bytes).
2026-05-28 19:34:27,042 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC5C20000: C:\Windows\System32\SHCORE (0xad000 bytes).
2026-05-28 19:34:27,043 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4350000: C:\Windows\SYSTEM32\ntmarta (0x33000 bytes).
2026-05-28 19:34:27,289 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB35A0000: C:\Windows\SYSTEM32\WINMM (0x27000 bytes).
2026-05-28 19:34:27,290 [root] DEBUG: 5704: DLL loaded at 0x00007FFB71750000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\msedge (0x136be000 bytes).
2026-05-28 19:34:27,296 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB33A0000: C:\Windows\SYSTEM32\KBDUS (0x9000 bytes).
2026-05-28 19:34:27,300 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC2BF0000: C:\Windows\system32\uxtheme (0x9e000 bytes).
2026-05-28 19:34:27,306 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC3110000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-28 19:34:27,307 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 4136: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:27,307 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 4136
2026-05-28 19:34:27,308 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC7A60000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-28 19:34:27,308 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 4136
2026-05-28 19:34:27,309 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB1AA0000: C:\Windows\System32\Windows.System.Profile.PlatformDiagnosticsAndUsageDataSettings (0x16000 bytes).
2026-05-28 19:34:27,310 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC42C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-28 19:34:27,310 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBF330000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-28 19:34:27,316 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC5120000: C:\Windows\SYSTEM32\USERENV (0x2e000 bytes).
2026-05-28 19:34:27,318 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC3AC0000: C:\Windows\SYSTEM32\gpapi (0x23000 bytes).
2026-05-28 19:34:27,319 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4390000: C:\Windows\SYSTEM32\wkscli (0x19000 bytes).
2026-05-28 19:34:27,321 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4700000: C:\Windows\SYSTEM32\netutils (0xc000 bytes).
2026-05-28 19:34:27,322 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC42C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-28 19:34:27,322 [root] DEBUG: 5704: DLL loaded at 0x00007FFBAD7D0000: C:\Windows\SYSTEM32\MDMRegistration (0x68000 bytes).
2026-05-28 19:34:27,324 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4FE0000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-28 19:34:27,325 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4AF0000: C:\Windows\SYSTEM32\CRYPTSP (0x18000 bytes).
2026-05-28 19:34:27,325 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4C60000: C:\Windows\SYSTEM32\ncrypt (0x27000 bytes).
2026-05-28 19:34:27,326 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC6800000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-28 19:34:27,326 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBCE20000: C:\Windows\SYSTEM32\tbs (0x1b000 bytes).
2026-05-28 19:34:27,328 [root] DEBUG: 5704: DLL loaded at 0x00007FFBAD720000: C:\Windows\SYSTEM32\DMCmnUtils (0x7c000 bytes).
2026-05-28 19:34:27,329 [root] DEBUG: 5704: DLL loaded at 0x00007FFBAD950000: C:\Windows\SYSTEM32\omadmapi (0x3a000 bytes).
2026-05-28 19:34:27,330 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4FC0000: C:\Windows\SYSTEM32\UMPDC (0x12000 bytes).
2026-05-28 19:34:27,330 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4C20000: C:\Windows\SYSTEM32\NTASN1 (0x3b000 bytes).
2026-05-28 19:34:27,332 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB3170000: C:\Windows\SYSTEM32\netapi32 (0x19000 bytes).
2026-05-28 19:34:27,332 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC42C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-28 19:34:27,333 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4AF0000: C:\Windows\SYSTEM32\cryptsp (0x18000 bytes).
2026-05-28 19:34:27,333 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC0F30000: C:\Windows\SYSTEM32\DSREG (0x141000 bytes).
2026-05-28 19:34:27,335 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC5160000: C:\Windows\SYSTEM32\profapi (0x25000 bytes).
2026-05-28 19:34:27,345 [root] DEBUG: 5704: DLL loaded at 0x00007FFBAD970000: C:\Windows\System32\AssignedAccessRuntime (0x14000 bytes).
2026-05-28 19:34:27,346 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC7690000: C:\Windows\System32\MSCTF (0x114000 bytes).
2026-05-28 19:34:27,347 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBA6F0000: C:\Windows\System32\SystemSettings.DataModel (0x74000 bytes).
2026-05-28 19:34:27,348 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4FE0000: C:\Windows\SYSTEM32\powrprof (0x4b000 bytes).
2026-05-28 19:34:27,349 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4FC0000: C:\Windows\SYSTEM32\UMPDC (0x12000 bytes).
2026-05-28 19:34:27,351 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB7F30000: C:\Windows\SYSTEM32\DWrite (0x27f000 bytes).
2026-05-28 19:34:27,353 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBE780000: C:\Windows\System32\OneCoreUAPCommonProxyStub (0x7d0000 bytes).
2026-05-28 19:34:27,354 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB1750000: C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.3636_none_60b6a03d71f818d5\COMCTL32 (0x29a000 bytes).
2026-05-28 19:34:27,356 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4FB0000: C:\Windows\SYSTEM32\DPAPI (0xa000 bytes).
2026-05-28 19:34:27,357 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC45F0000: C:\Windows\SYSTEM32\IPHLPAPI (0x3b000 bytes).
2026-05-28 19:34:27,357 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC09B0000: C:\Windows\system32\NLAapi (0x1d000 bytes).
2026-05-28 19:34:27,358 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC58E0000: C:\Windows\System32\CFGMGR32 (0x4e000 bytes).
2026-05-28 19:34:27,360 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB9B80000: C:\Windows\System32\StructuredQuery (0xa6000 bytes).
2026-05-28 19:34:27,360 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC6CF0000: C:\Windows\System32\NSI (0x8000 bytes).
2026-05-28 19:34:27,361 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBEFD0000: C:\Windows\SYSTEM32\dhcpcsvc6 (0x17000 bytes).
2026-05-28 19:34:27,362 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC0DB0000: C:\Windows\SYSTEM32\PROPSYS (0xf6000 bytes).
2026-05-28 19:34:27,363 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBDC90000: C:\Windows\SYSTEM32\dhcpcsvc (0x1d000 bytes).
2026-05-28 19:34:27,364 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4630000: C:\Windows\SYSTEM32\DNSAPI (0xca000 bytes).
2026-05-28 19:34:27,365 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB5D90000: C:\Windows\System32\Windows.StateRepositoryPS (0x146000 bytes).
2026-05-28 19:34:27,369 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC2820000: C:\Windows\System32\CoreMessaging (0xf2000 bytes).
2026-05-28 19:34:27,370 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC1080000: C:\Windows\SYSTEM32\wintypes (0x155000 bytes).
2026-05-28 19:34:27,370 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC2140000: C:\Windows\System32\CoreUIComponents (0x35b000 bytes).
2026-05-28 19:34:27,371 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB9560000: C:\Windows\SYSTEM32\textinputframework (0xf9000 bytes).
2026-05-28 19:34:27,371 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB5CA0000: C:\Windows\system32\Windows.Storage.Search (0xc6000 bytes).
2026-05-28 19:34:27,375 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBF7E0000: C:\Windows\System32\twinapi.appcore (0x203000 bytes).
2026-05-28 19:34:27,376 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB55B0000: C:\Windows\system32\mssprxy (0x28000 bytes).
2026-05-28 19:34:27,378 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB1AE0000: C:\Windows\system32\twinapi (0xa9000 bytes).
2026-05-28 19:34:27,383 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBF690000: C:\Windows\SYSTEM32\wevtapi (0x65000 bytes).
2026-05-28 19:34:27,384 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB5200000: C:\Windows\SYSTEM32\edputil (0x24000 bytes).
2026-05-28 19:34:27,389 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBFB00000: C:\Windows\System32\WindowManagementAPI (0xa1000 bytes).
2026-05-28 19:34:27,390 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB9400000: C:\Windows\System32\InputHost (0x152000 bytes).
2026-05-28 19:34:27,391 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB9660000: C:\Windows\System32\Windows.UI (0x141000 bytes).
2026-05-28 19:34:27,393 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB9F00000: C:\Windows\System32\iertutil (0x2bc000 bytes).
2026-05-28 19:34:27,393 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB5110000: C:\Windows\System32\Windows.Web (0xc3000 bytes).
2026-05-28 19:34:27,396 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC0EE0000: C:\Windows\SYSTEM32\WTSAPI32 (0x14000 bytes).
2026-05-28 19:34:27,398 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBF590000: C:\Windows\SYSTEM32\ColorAdapterClient (0x11000 bytes).
2026-05-28 19:34:27,398 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBF5B0000: C:\Windows\SYSTEM32\mscms (0xae000 bytes).
2026-05-28 19:34:27,399 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4B90000: C:\Windows\SYSTEM32\WINSTA (0x5b000 bytes).
2026-05-28 19:34:27,432 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBF9F0000: C:\Windows\SYSTEM32\WINHTTP (0x10a000 bytes).
2026-05-28 19:34:27,440 [root] DEBUG: 5704: DLL loaded at 0x00007FFB6FDF0000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\oneauth (0x5c4000 bytes).
2026-05-28 19:34:27,451 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB81B0000: C:\Windows\System32\Windows.UI.Immersive (0x139000 bytes).
2026-05-28 19:34:27,454 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 8524: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:27,454 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB6910000: C:\Windows\SYSTEM32\Secur32 (0xc000 bytes).
2026-05-28 19:34:27,455 [root] DEBUG: 5704: caller_dispatch: Added region at 0x00007FF66C3B0000 to tracked regions list (kernel32::CreateProcessInternalW returns to 0x00007FF66C4A7D66, thread 8224).
2026-05-28 19:34:27,455 [root] DEBUG: 5704: caller_dispatch: Added region at 0x00007FF66C3B0000 to tracked regions list (kernel32::CreateProcessInternalW returns to 0x00007FF66C4A7D66, thread 8224).
2026-05-28 19:34:27,456 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 8524
2026-05-28 19:34:27,460 [root] DEBUG: 5704: ProcessImageBase: Main module image at 0x00007FF66C3B0000 unmodified (entropy change 0.000000e+00)
2026-05-28 19:34:27,462 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 8560: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:27,462 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 8560
2026-05-28 19:34:27,473 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 8560
2026-05-28 19:34:27,475 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 8604: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:27,475 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC5030000: C:\Windows\SYSTEM32\sxs (0xa2000 bytes).
2026-05-28 19:34:27,479 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 8604
2026-05-28 19:34:27,480 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB4F60000: C:\Windows\SYSTEM32\LINKINFO (0xd000 bytes).
2026-05-28 19:34:27,491 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 8604
2026-05-28 19:34:27,511 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC0580000: C:\Windows\SYSTEM32\usermgrcli (0x16000 bytes).
2026-05-28 19:34:27,514 [root] DEBUG: 5704: DLL loaded at 0x00007FFBAE420000: C:\Windows\System32\Windows.Internal.UI.Shell.WindowTabManager (0x6d000 bytes).
2026-05-28 19:34:27,564 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC3AF0000: C:\Windows\system32\dxgi (0xf3000 bytes).
2026-05-28 19:34:27,565 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC1C00000: C:\Windows\system32\d3d11 (0x263000 bytes).
2026-05-28 19:34:27,565 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC1E70000: C:\Windows\system32\dcomp (0x1e3000 bytes).
2026-05-28 19:34:27,566 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB1D70000: C:\Windows\system32\dataexchange (0x3e000 bytes).
2026-05-28 19:34:27,596 [root] DEBUG: 5704: DLL loaded at 0x00007FFBAD7D0000: C:\Windows\System32\Windows.System.Profile.RetailInfo (0x28000 bytes).
2026-05-28 19:34:27,613 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC2D40000: C:\Windows\SYSTEM32\dwmapi (0x2f000 bytes).
2026-05-28 19:34:27,621 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB0FD0000: C:\Windows\SYSTEM32\OLEACC (0x66000 bytes).
2026-05-28 19:34:27,621 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 8900: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:27,622 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 8908: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:27,622 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 8900
2026-05-28 19:34:27,622 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 8908
2026-05-28 19:34:27,623 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB6C40000: C:\Windows\system32\directmanipulation (0x9d000 bytes).
2026-05-28 19:34:27,623 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 8900
2026-05-28 19:34:27,623 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 8908
2026-05-28 19:34:27,730 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB2FE0000: C:\Windows\System32\Windows.Security.Authentication.Web.Core (0x11d000 bytes).
2026-05-28 19:34:27,737 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB6E10000: C:\Windows\System32\OneCoreCommonProxyStub (0x7f000 bytes).
2026-05-28 19:34:27,745 [root] DEBUG: 5704: DLL loaded at 0x00007FFBAD430000: C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains (0x9e000 bytes).
2026-05-28 19:34:27,756 [root] DEBUG: 5704: DLL loaded at 0x00007FFBA7AE0000: C:\Windows\System32\vaultcli (0x51000 bytes).
2026-05-28 19:34:27,760 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4D80000: C:\Windows\SYSTEM32\MSASN1 (0x12000 bytes).
2026-05-28 19:34:27,763 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4AF0000: C:\Windows\SYSTEM32\CRYPTSP (0x18000 bytes).
2026-05-28 19:34:27,765 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4230000: C:\Windows\system32\rsaenh (0x34000 bytes).
2026-05-28 19:34:27,814 [root] DEBUG: 5704: DLL loaded at 0x00007FFB6D120000: C:\Windows\System32\MicrosoftAccountWAMExtension (0x8c000 bytes).
2026-05-28 19:34:28,997 [root] DEBUG: 5704: DLL loaded at 0x00007FFBAD2F0000: C:\Windows\System32\ShellCommonCommonProxyStub (0xe4000 bytes).
2026-05-28 19:34:29,317 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC42C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-28 19:34:29,322 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBF330000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-28 19:34:29,328 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB0A40000: C:\Windows\system32\explorerframe (0x244000 bytes).
2026-05-28 19:34:29,350 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC6820000: C:\Windows\System32\SETUPAPI (0x46e000 bytes).
2026-05-28 19:34:29,356 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 9208: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:29,359 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 8552: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:29,361 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC0660000: C:\Windows\System32\netprofm (0x3f000 bytes).
2026-05-28 19:34:29,362 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 8552
2026-05-28 19:34:29,364 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 9208
2026-05-28 19:34:29,367 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 8552
2026-05-28 19:34:29,369 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 9208
2026-05-28 19:34:29,387 [root] DEBUG: 5704: DLL loaded at 0x00007FFB6CD30000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\telclient (0x3ed000 bytes).
2026-05-28 19:34:29,406 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4F50000: C:\Windows\SYSTEM32\DEVOBJ (0x33000 bytes).
2026-05-28 19:34:29,407 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBD900000: C:\Windows\System32\npmproxy (0x10000 bytes).
2026-05-28 19:34:29,408 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB0E60000: C:\Windows\System32\Windows.FileExplorer.Common (0x61000 bytes).
2026-05-28 19:34:29,413 [root] DEBUG: 5704: DLL loaded at 0x00007FFB6C6D0000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\oneds (0x33f000 bytes).
2026-05-28 19:34:29,420 [root] DEBUG: 5704: DLL loaded at 0x00007FFB6F800000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\ffmpeg (0x467000 bytes).
2026-05-28 19:34:29,422 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC5930000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-28 19:34:29,423 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC3E50000: C:\Windows\System32\FirewallAPI (0x96000 bytes).
2026-05-28 19:34:29,424 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC3E10000: C:\Windows\System32\fwbase (0x36000 bytes).
2026-05-28 19:34:29,426 [root] DEBUG: 5704: DLL loaded at 0x00007FFBAD6F0000: C:\Windows\system32\TenantRestrictionsPlugin (0x1b000 bytes).
2026-05-28 19:34:29,430 [root] DEBUG: 5704: DLL loaded at 0x00007FFB6C650000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\microsoft_shell_integration (0x78000 bytes).
2026-05-28 19:34:29,436 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC6DE0000: C:\Windows\System32\coml2 (0x79000 bytes).
2026-05-28 19:34:29,440 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 7488: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\identity_helper.exe, ImageBase: 0x00007FF64B540000
2026-05-28 19:34:29,441 [root] INFO: Announced 64-bit process name: identity_helper.exe pid: 7488
2026-05-28 19:34:29,442 [lib.api.process] INFO: Monitor config for process 7488: C:\hsngo5k_\dll\7488.ini
2026-05-28 19:34:29,446 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC2F30000: C:\Windows\System32\RMCLIENT (0x2a000 bytes).
2026-05-28 19:34:29,447 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC0D70000: C:\Windows\System32\XmlLite (0x36000 bytes).
2026-05-28 19:34:29,447 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 9228: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:29,449 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB08E0000: C:\Windows\System32\wpnapps (0x15b000 bytes).
2026-05-28 19:34:29,451 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:34:29,452 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 9228
2026-05-28 19:34:29,453 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 9260: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:29,456 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 9260
2026-05-28 19:34:29,457 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 9228
2026-05-28 19:34:29,461 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 9260
2026-05-28 19:34:29,482 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBFEB0000: C:\Windows\SYSTEM32\WindowsCodecs (0x1b4000 bytes).
2026-05-28 19:34:29,491 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB0100000: C:\Windows\System32\thumbcache (0x66000 bytes).
2026-05-28 19:34:29,498 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC42C0000: C:\Windows\SYSTEM32\msvcp110_win (0x8a000 bytes).
2026-05-28 19:34:29,498 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBF330000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-28 19:34:29,944 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-28 19:34:29,944 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-28 19:34:29,948 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:34:29,953 [root] DEBUG: Loader: Injecting process 7488 (thread 2544) with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:29,953 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-28 19:34:29,954 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:29,955 [lib.api.process] INFO: Injected into 64-bit <Process 7488 identity_helper.exe>
2026-05-28 19:34:29,964 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBCF40000: C:\Windows\SYSTEM32\capauthz (0x51000 bytes).
2026-05-28 19:34:29,965 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBBA60000: C:\Windows\SYSTEM32\windows.staterepositorycore (0x11000 bytes).
2026-05-28 19:34:29,966 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 9452: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\identity_helper.exe, ImageBase: 0x00007FF64B540000
2026-05-28 19:34:29,968 [root] INFO: Announced 64-bit process name: identity_helper.exe pid: 9452
2026-05-28 19:34:29,968 [lib.api.process] INFO: Monitor config for process 9452: C:\hsngo5k_\dll\9452.ini
2026-05-28 19:34:29,969 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:34:29,984 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBD0C0000: C:\Windows\system32\wlanapi (0x74000 bytes).
2026-05-28 19:34:29,992 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB3900000: C:\Windows\System32\Windows.ApplicationModel (0xe9000 bytes).
2026-05-28 19:34:29,993 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBE410000: C:\Windows\System32\AppXDeploymentClient (0x102000 bytes).
2026-05-28 19:34:30,015 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4C60000: C:\Windows\SYSTEM32\ncrypt (0x27000 bytes).
2026-05-28 19:34:30,016 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4C20000: C:\Windows\SYSTEM32\NTASN1 (0x3b000 bytes).
2026-05-28 19:34:30,017 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB3170000: C:\Windows\SYSTEM32\NETAPI32 (0x19000 bytes).
2026-05-28 19:34:30,017 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBCFA0000: C:\Windows\system32\PCPKsp (0x118000 bytes).
2026-05-28 19:34:30,018 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC6800000: C:\Windows\System32\imagehlp (0x1d000 bytes).
2026-05-28 19:34:30,019 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBCE20000: C:\Windows\SYSTEM32\tbs (0x1b000 bytes).
2026-05-28 19:34:30,020 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB23C0000: C:\Windows\system32\ncryptprov (0x5a000 bytes).
2026-05-28 19:34:30,028 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC4900000: C:\Windows\system32\mswsock (0x6a000 bytes).
2026-05-28 19:34:30,045 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-28 19:34:30,046 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-28 19:34:30,049 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:34:30,054 [root] DEBUG: Loader: Injecting process 9452 (thread 9456) with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:30,054 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-28 19:34:30,055 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:30,056 [lib.api.process] INFO: Injected into 64-bit <Process 9452 identity_helper.exe>
2026-05-28 19:34:30,058 [root] INFO: Announced 64-bit process name: identity_helper.exe pid: 9452
2026-05-28 19:34:30,058 [lib.api.process] INFO: Monitor config for process 9452: C:\hsngo5k_\dll\9452.ini
2026-05-28 19:34:30,058 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:34:30,126 [lib.api.process] INFO: Potential dll side-loading detected in local directory: d3dcompiler_47.dll
2026-05-28 19:34:30,126 [lib.api.process] INFO: Potential dll side-loading detected in local directory: onnxruntime.dll
2026-05-28 19:34:30,128 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:34:30,132 [root] DEBUG: Loader: Injecting process 9452 (thread 9456) with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:30,132 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-28 19:34:30,133 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:30,134 [lib.api.process] INFO: Injected into 64-bit <Process 9452 identity_helper.exe>
2026-05-28 19:34:30,144 [root] DEBUG: 9452: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-28 19:34:30,145 [root] DEBUG: 9452: Interactive desktop enabled.
2026-05-28 19:34:30,145 [root] DEBUG: 9452: Dropped file limit defaulting to 100.
2026-05-28 19:34:30,152 [root] DEBUG: 9452: Disabling sleep skipping.
2026-05-28 19:34:30,153 [root] DEBUG: 9452: YaraInit: Compiled rules loaded from existing file C:\hsngo5k_\data\yara\capemon.yac
2026-05-28 19:34:30,164 [root] DEBUG: 9452: RtlInsertInvertedFunctionTable 0x00007FFBC7B6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFBC7CBD4F0
2026-05-28 19:34:30,164 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FF64B540000, size 0x28b4d8
2026-05-28 19:34:30,181 [root] DEBUG: 9452: Monitor initialised: 64-bit capemon loaded in process 9452 at 0x00007FFB863A0000, thread 9456, image base 0x00007FF64B540000, stack from 0x000000445D724000-0x000000445D730000
2026-05-28 19:34:30,181 [root] DEBUG: 9452: Commandline: "C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=windows_package_identity --skip-read-main-dll --metrics-shmem-handle=5816,i,7984218614831481947,5522388298470254199,524288 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510
2026-05-28 19:34:30,182 [root] DEBUG: 9452: add_all_dlls_to_dll_ranges: skipping C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\msedge_elf.dll
2026-05-28 19:34:30,194 [root] DEBUG: 9452: hook_api: LdrpCallInitRoutine export address 0x00007FFBC7B699BC obtained via GetFunctionAddress
2026-05-28 19:34:30,216 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-28 19:34:30,217 [root] DEBUG: 9452: set_hooks: Unable to hook LockResource
2026-05-28 19:34:30,223 [root] DEBUG: 9452: Hooked 627 out of 628 functions
2026-05-28 19:34:30,238 [root] DEBUG: 9452: Syscall hook installed, syscall logging level 1
2026-05-28 19:34:30,242 [root] DEBUG: 9452: RestoreHeaders: Restored original import table.
2026-05-28 19:34:30,243 [root] INFO: Loaded monitor into process with pid 9452
2026-05-28 19:34:30,244 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FFB84E10000, size 0x4b9994
2026-05-28 19:34:30,284 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FFB84E10000, size 0x4b9994
2026-05-28 19:34:30,308 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FFB84E10000, size 0x4b9994
2026-05-28 19:34:30,333 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FFB84E10000, size 0x4b9994
2026-05-28 19:34:30,357 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FFB84E10000, size 0x4b9994
2026-05-28 19:34:30,382 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FFB84E10000, size 0x4b9994
2026-05-28 19:34:30,406 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FFB84E10000, size 0x4b9994
2026-05-28 19:34:30,434 [root] DEBUG: 9452: caller_dispatch: Added region at 0x00007FFB84E10000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x00007FFB8500F156, thread 9456).
2026-05-28 19:34:30,435 [root] DEBUG: 9452: caller_dispatch: Scanning calling region at 0x00007FFB84E10000...
2026-05-28 19:34:30,439 [root] DEBUG: 9452: ProcessTrackedRegion: Region at 0x00007FFB84E10000 mapped as \Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\msedge_elf.dll appears unmodified, skipping
2026-05-28 19:34:30,441 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC5750000: C:\Windows\System32\bcryptprimitives (0x82000 bytes).
2026-05-28 19:34:30,465 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FF64B540000, size 0x28b4d8
2026-05-28 19:34:30,480 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FF64B540000, size 0x28b4d8
2026-05-28 19:34:30,496 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FF64B540000, size 0x28b4d8
2026-05-28 19:34:30,511 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FF64B540000, size 0x28b4d8
2026-05-28 19:34:30,526 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FF64B540000, size 0x28b4d8
2026-05-28 19:34:30,542 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FF64B540000, size 0x28b4d8
2026-05-28 19:34:30,559 [root] DEBUG: 9452: caller_dispatch: Added region at 0x00007FF64B540000 to tracked regions list (ntdll::NtProtectVirtualMemory returns to 0x00007FF64B634096, thread 9456).
2026-05-28 19:34:30,560 [root] DEBUG: 9452: YaraScan: Scanning 0x00007FF64B540000, size 0x28b4d8
2026-05-28 19:34:30,576 [root] DEBUG: 9452: ProcessImageBase: Main module image at 0x00007FF64B540000 unmodified (entropy change 0.000000e+00)
2026-05-28 19:34:30,579 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC5C20000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-28 19:34:30,611 [root] DEBUG: 9452: DLL loaded at 0x000001BCEB000000: C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\msedge (0x136be000 bytes).
2026-05-28 19:34:30,614 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC2BF0000: C:\Windows\system32\uxtheme (0x9e000 bytes).
2026-05-28 19:34:30,618 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC7690000: C:\Windows\System32\MSCTF (0x114000 bytes).
2026-05-28 19:34:30,652 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC3110000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-28 19:34:30,657 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC7A60000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-28 19:34:30,713 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC5C20000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-28 19:34:30,717 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC0DB0000: C:\Windows\System32\PROPSYS (0xf6000 bytes).
2026-05-28 19:34:30,718 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC2820000: C:\Windows\System32\CoreMessaging (0xf2000 bytes).
2026-05-28 19:34:30,720 [root] DEBUG: 9452: DLL loaded at 0x00007FFBB5020000: C:\Windows\System32\execmodelclient (0x63000 bytes).
2026-05-28 19:34:30,802 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC1080000: C:\Windows\SYSTEM32\wintypes (0x155000 bytes).
2026-05-28 19:34:30,803 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC2F30000: C:\Windows\System32\RMCLIENT (0x2a000 bytes).
2026-05-28 19:34:30,804 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC0D70000: C:\Windows\System32\XmlLite (0x36000 bytes).
2026-05-28 19:34:30,804 [root] DEBUG: 9452: DLL loaded at 0x00007FFBBF7E0000: C:\Windows\System32\twinapi.appcore (0x203000 bytes).
2026-05-28 19:34:30,805 [root] DEBUG: 9452: DLL loaded at 0x00007FFBB08E0000: C:\Windows\System32\wpnapps (0x15b000 bytes).
2026-05-28 19:34:30,923 [root] DEBUG: 9452: DLL loaded at 0x00007FFBB6E10000: C:\Windows\System32\OneCoreCommonProxyStub (0x7f000 bytes).
2026-05-28 19:34:30,932 [root] DEBUG: 9452: DLL loaded at 0x00007FFBB3400000: C:\Windows\system32\execmodelproxy (0x18000 bytes).
2026-05-28 19:34:30,938 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC42C0000: C:\Windows\System32\msvcp110_win (0x8a000 bytes).
2026-05-28 19:34:30,939 [root] DEBUG: 9452: DLL loaded at 0x00007FFBBF330000: C:\Windows\SYSTEM32\policymanager (0xa1000 bytes).
2026-05-28 19:34:30,957 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC0580000: C:\Windows\SYSTEM32\usermgrcli (0x16000 bytes).
2026-05-28 19:34:30,973 [root] DEBUG: 9452: DLL loaded at 0x00007FFBBE780000: C:\Windows\System32\OneCoreUAPCommonProxyStub (0x7d0000 bytes).
2026-05-28 19:34:30,984 [root] DEBUG: 9452: DLL loaded at 0x00007FFBB5D90000: C:\Windows\System32\Windows.StateRepositoryPS (0x146000 bytes).
2026-05-28 19:34:30,992 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC5930000: C:\Windows\System32\WINTRUST (0x67000 bytes).
2026-05-28 19:34:30,993 [root] DEBUG: 9452: DLL loaded at 0x00007FFBBCF40000: C:\Windows\SYSTEM32\capauthz (0x51000 bytes).
2026-05-28 19:34:31,014 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC4D80000: C:\Windows\System32\MSASN1 (0x12000 bytes).
2026-05-28 19:34:31,040 [root] DEBUG: 9452: DLL loaded at 0x00007FFBB3900000: C:\Windows\System32\Windows.ApplicationModel (0xe9000 bytes).
2026-05-28 19:34:31,115 [root] DEBUG: 9452: DLL loaded at 0x00007FFB888B0000: C:\Windows\System32\CryptoWinRT (0x61000 bytes).
2026-05-28 19:34:31,176 [lib.api.process] INFO: Monitor config for process 844: C:\hsngo5k_\dll\844.ini
2026-05-28 19:34:31,180 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:34:31,183 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:34:31,193 [root] DEBUG: Loader: Injecting process 844 with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:31,198 [root] DEBUG: 844: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-28 19:34:31,201 [root] DEBUG: 844: Disabling sleep skipping.
2026-05-28 19:34:31,204 [root] DEBUG: 844: Interactive desktop enabled.
2026-05-28 19:34:31,206 [root] DEBUG: 844: Dropped file limit defaulting to 100.
2026-05-28 19:34:31,232 [root] DEBUG: 844: Services hook set enabled
2026-05-28 19:34:31,234 [root] DEBUG: 844: YaraInit: Compiled rules loaded from existing file C:\hsngo5k_\data\yara\capemon.yac
2026-05-28 19:34:31,246 [root] DEBUG: 844: RtlInsertInvertedFunctionTable 0x00007FFBC7B6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFBC7CBD4F0
2026-05-28 19:34:31,247 [root] DEBUG: 844: Monitor initialised: 64-bit capemon loaded in process 844 at 0x00007FFB863A0000, thread 9968, image base 0x00007FF6A8E20000, stack from 0x00000092395F4000-0x0000009239600000
2026-05-28 19:34:31,247 [root] DEBUG: 844: Commandline: C:\Windows\system32\svchost.exe -k DcomLaunch -p
2026-05-28 19:34:31,261 [root] DEBUG: 844: Hooked 69 out of 69 functions
2026-05-28 19:34:31,262 [root] INFO: Loaded monitor into process with pid 844
2026-05-28 19:34:31,262 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2026-05-28 19:34:31,263 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:31,264 [lib.api.process] INFO: Injected into 64-bit <Process 844 svchost.exe>
2026-05-28 19:34:33,323 [root] DEBUG: 9452: DLL loaded at 0x00007FFBBAD00000: C:\Windows\System32\StateRepository.Core (0xb1000 bytes).
2026-05-28 19:34:33,327 [root] DEBUG: 9452: DLL loaded at 0x00007FFBBADC0000: C:\Windows\System32\Windows.StateRepository (0x58e000 bytes).
2026-05-28 19:34:33,328 [root] DEBUG: 9452: DLL loaded at 0x00007FFBB0CC0000: C:\Windows\System32\TileDataRepository (0x99000 bytes).
2026-05-28 19:34:33,329 [root] DEBUG: 9452: DLL loaded at 0x00007FFBAC310000: C:\Windows\System32\biwinrt (0x53000 bytes).
2026-05-28 19:34:33,339 [root] DEBUG: 9452: DLL loaded at 0x00007FFBBDCB0000: C:\Windows\System32\usermgrproxy (0x54000 bytes).
2026-05-28 19:34:33,412 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC3AF0000: C:\Windows\System32\dxgi (0xf3000 bytes).
2026-05-28 19:34:33,414 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC1C00000: C:\Windows\System32\d3d11 (0x263000 bytes).
2026-05-28 19:34:33,439 [root] DEBUG: 9452: DLL loaded at 0x00007FFBB7020000: C:\Windows\System32\WININET (0x4d6000 bytes).
2026-05-28 19:34:33,442 [root] DEBUG: 9452: DLL loaded at 0x00007FFBAC200000: C:\Windows\System32\windows.internal.shell.broker (0xdd000 bytes).
2026-05-28 19:34:33,623 [root] DEBUG: 9452: DLL loaded at 0x00007FFBAD3E0000: C:\Windows\System32\PCShellCommonProxyStub (0x13000 bytes).
2026-05-28 19:34:33,739 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC5120000: C:\Windows\System32\USERENV (0x2e000 bytes).
2026-05-28 19:34:33,742 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC4BF0000: C:\Windows\System32\Wldp (0x2d000 bytes).
2026-05-28 19:34:33,743 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC3310000: C:\Windows\SYSTEM32\windows.storage (0x79b000 bytes).
2026-05-28 19:34:33,744 [root] DEBUG: 9452: DLL loaded at 0x00007FFBBB460000: C:\Windows\System32\Bcp47Langs (0x5b000 bytes).
2026-05-28 19:34:33,746 [root] DEBUG: 9452: DLL loaded at 0x00007FFBB1090000: C:\Windows\System32\StartTileData (0x58a000 bytes).
2026-05-28 19:34:34,024 [root] DEBUG: 9452: DLL loaded at 0x00007FFBAC570000: C:\Windows\System32\Windows.Storage.ApplicationData (0x66000 bytes).
2026-05-28 19:34:34,072 [root] DEBUG: 9452: DLL loaded at 0x00007FFBB55B0000: C:\Windows\system32\mssprxy (0x28000 bytes).
2026-05-28 19:34:34,102 [root] DEBUG: 9452: DLL loaded at 0x00007FFBC58E0000: C:\Windows\System32\CFGMGR32 (0x4e000 bytes).
2026-05-28 19:34:44,198 [root] INFO: Process with pid 9452 has terminated
2026-05-28 19:34:44,201 [root] DEBUG: 9452: NtTerminateProcess hook: Attempting to dump process 9452
2026-05-28 19:34:44,205 [root] DEBUG: 9452: DoProcessDump: Skipping process dump as code is identical on disk.
2026-05-28 19:34:50,749 [root] DEBUG: 5704: DLL loaded at 0x00007FFBAC470000: C:\Windows\System32\Windows.Security.Authentication.OnlineId (0xf4000 bytes).
2026-05-28 19:34:50,932 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 9560: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:50,933 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 9560
2026-05-28 19:34:50,934 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 9560
2026-05-28 19:34:56,647 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 7760: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:56,648 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 7760
2026-05-28 19:34:56,649 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 7760
2026-05-28 19:34:57,312 [root] DEBUG: 5704: DLL loaded at 0x00007FFBC0960000: C:\Windows\System32\Windows.System.UserProfile.DiagnosticsSettings (0x15000 bytes).
2026-05-28 19:34:57,406 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 2224: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:34:57,407 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 2224
2026-05-28 19:34:57,407 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 2224
2026-05-28 19:34:58,400 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBA6C0000: C:\Windows\SYSTEM32\srvcli (0x28000 bytes).
2026-05-28 19:34:58,401 [root] DEBUG: 5704: DLL loaded at 0x00007FFBBA360000: C:\Windows\SYSTEM32\urlmon (0x1ed000 bytes).
2026-05-28 19:34:58,404 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB3880000: C:\Windows\SYSTEM32\FLTLIB (0xb000 bytes).
2026-05-28 19:34:58,405 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB6ED0000: C:\Windows\SYSTEM32\virtdisk (0x13000 bytes).
2026-05-28 19:34:58,406 [root] DEBUG: 5704: DLL loaded at 0x00007FFBB6CF0000: C:\Windows\System32\smartscreenps (0x52000 bytes).
2026-05-28 19:34:58,407 [root] DEBUG: 5704: DLL loaded at 0x00007FFBAA3E0000: C:\Windows\SYSTEM32\shdocvw (0x41000 bytes).
2026-05-28 19:34:58,739 [root] DEBUG: 4692: DLL loaded at 0x00007FFBB4B60000: C:\Windows\System32\Windows.Shell.ServiceHostBuilder (0x1d000 bytes).
2026-05-28 19:34:58,753 [root] DEBUG: 4692: AllocationHandler: Adding allocation to tracked region list: 0x00007DF4C7561000, size: 0x1000.
2026-05-28 19:34:58,756 [root] DEBUG: 4692: AllocationHandler: Adding allocation to tracked region list: 0x00007DF4C7551000, size: 0x1000.
2026-05-28 19:34:58,756 [root] DEBUG: 4692: AllocationHandler: Adding allocation to tracked region list: 0x00007DF4C7541000, size: 0x1000.
2026-05-28 19:34:58,757 [root] DEBUG: 4692: AllocationHandler: Adding allocation to tracked region list: 0x00007DF4C7531000, size: 0x1000.
2026-05-28 19:34:58,764 [root] DEBUG: 4692: AllocationHandler: Adding allocation to tracked region list: 0x00007DF4C7521000, size: 0x1000.
2026-05-28 19:34:58,770 [root] DEBUG: 4692: DLL loaded at 0x00007FFBBD8B0000: C:\Windows\system32\activationclient (0x12000 bytes).
2026-05-28 19:34:58,783 [root] DEBUG: 844: CreateProcessHandler: Injection info set for new process 4404: C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe, ImageBase: 0x00007FF630AD0000
2026-05-28 19:34:58,784 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 4404
2026-05-28 19:34:58,784 [lib.api.process] INFO: Monitor config for process 4404: C:\hsngo5k_\dll\4404.ini
2026-05-28 19:34:58,785 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:34:58,786 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:34:58,790 [root] DEBUG: Loader: Injecting process 4404 (thread 4268) with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:58,791 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-28 19:34:58,791 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:58,793 [lib.api.process] INFO: Injected into 64-bit <Process 4404 CHXSmartScreen.exe>
2026-05-28 19:34:58,794 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 4404
2026-05-28 19:34:58,794 [lib.api.process] INFO: Monitor config for process 4404: C:\hsngo5k_\dll\4404.ini
2026-05-28 19:34:58,794 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:34:58,795 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:34:58,801 [root] DEBUG: Loader: Injecting process 4404 (thread 4268) with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:58,801 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-28 19:34:58,802 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:58,803 [lib.api.process] INFO: Injected into 64-bit <Process 4404 CHXSmartScreen.exe>
2026-05-28 19:34:58,805 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 4404
2026-05-28 19:34:58,805 [lib.api.process] INFO: Monitor config for process 4404: C:\hsngo5k_\dll\4404.ini
2026-05-28 19:34:58,805 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:34:58,806 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:34:58,811 [root] DEBUG: Loader: Injecting process 4404 with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:58,812 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 4268, handle 0x120
2026-05-28 19:34:58,813 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-28 19:34:58,813 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:34:58,815 [lib.api.process] INFO: Injected into 64-bit <Process 4404 CHXSmartScreen.exe>
2026-05-28 19:35:00,458 [root] DEBUG: 5704: CreateProcessHandler: Injection info set for new process 9420: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe, ImageBase: 0x00007FF66C3B0000
2026-05-28 19:35:00,459 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 9420
2026-05-28 19:35:00,460 [root] DEBUG: 5704: ProcessMessage: Skipping monitoring process 9420
2026-05-28 19:35:00,575 [root] INFO: Announced starting service "b'MicrosoftEdgeElevationService'"
2026-05-28 19:35:00,578 [lib.api.process] INFO: Monitor config for process 632: C:\hsngo5k_\dll\632.ini
2026-05-28 19:35:00,587 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:35:00,588 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:35:00,602 [root] DEBUG: Loader: Injecting process 632 with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:00,614 [root] DEBUG: Loader: Copied config file C:\hsngo5k_\dll\632.ini to system path C:\632.ini
2026-05-28 19:35:00,618 [root] DEBUG: Loader: Unable to open process, launched: PPLinject64.exe 632 C:\hsngo5k_\dll\gIlsNlf.dll
2026-05-28 19:35:00,621 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:00,625 [lib.api.process] INFO: Injected into 64-bit <Process 632 services.exe>
2026-05-28 19:35:01,140 [root] INFO: Process with pid 5704 appears to have terminated
2026-05-28 19:35:04,215 [root] DEBUG: 4692: DLL loaded at 0x00007FFBAF610000: C:\Windows\system32\twext (0x33000 bytes).
2026-05-28 19:35:04,286 [root] DEBUG: 4692: DLL loaded at 0x00007FFBAA9A0000: C:\Windows\SYSTEM32\MsftEdit (0x34d000 bytes).
2026-05-28 19:35:04,293 [root] DEBUG: 4692: DLL loaded at 0x00007FFB6D450000: C:\Program Files\Common Files\microsoft shared\ink\tiptsf (0xa9000 bytes).
2026-05-28 19:35:04,310 [root] DEBUG: 4692: DLL loaded at 0x00007FFB6D060000: C:\Windows\system32\UIRibbon (0x3ec000 bytes).
2026-05-28 19:35:04,531 [root] DEBUG: 844: CreateProcessHandler: Injection info set for new process 8996: C:\Windows\system32\DllHost.exe, ImageBase: 0x00007FF69BCF0000
2026-05-28 19:35:04,532 [root] INFO: Announced 64-bit process name: dllhost.exe pid: 8996
2026-05-28 19:35:04,533 [lib.api.process] INFO: Monitor config for process 8996: C:\hsngo5k_\dll\8996.ini
2026-05-28 19:35:04,534 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:35:04,539 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:35:04,544 [root] DEBUG: Loader: Injecting process 8996 (thread 9004) with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:04,545 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-28 19:35:04,546 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:04,550 [lib.api.process] INFO: Injected into 64-bit <Process 8996 dllhost.exe>
2026-05-28 19:35:04,554 [root] INFO: Announced 64-bit process name: dllhost.exe pid: 8996
2026-05-28 19:35:04,554 [lib.api.process] INFO: Monitor config for process 8996: C:\hsngo5k_\dll\8996.ini
2026-05-28 19:35:04,555 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:35:04,558 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:35:04,562 [root] DEBUG: Loader: Injecting process 8996 (thread 9004) with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:04,563 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-28 19:35:04,564 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:04,565 [lib.api.process] INFO: Injected into 64-bit <Process 8996 dllhost.exe>
2026-05-28 19:35:04,589 [root] DEBUG: 8996: Python path set to 'C:\Users\admin\AppData\Local\Python\pythoncore-3.14-64'.
2026-05-28 19:35:04,590 [root] DEBUG: 8996: Interactive desktop enabled.
2026-05-28 19:35:04,590 [root] DEBUG: 8996: Dropped file limit defaulting to 100.
2026-05-28 19:35:04,596 [root] DEBUG: 8996: Disabling sleep skipping.
2026-05-28 19:35:04,598 [root] DEBUG: 8996: YaraInit: Compiled rules loaded from existing file C:\hsngo5k_\data\yara\capemon.yac
2026-05-28 19:35:04,611 [root] DEBUG: 8996: RtlInsertInvertedFunctionTable 0x00007FFBC7B6090E, LdrpInvertedFunctionTableSRWLock 0x00007FFBC7CBD4F0
2026-05-28 19:35:04,612 [root] DEBUG: 8996: YaraScan: Scanning 0x00007FF69BCF0000, size 0x8026
2026-05-28 19:35:04,614 [root] DEBUG: 8996: Monitor initialised: 64-bit capemon loaded in process 8996 at 0x00007FFB863A0000, thread 9004, image base 0x00007FF69BCF0000, stack from 0x000000790B0F4000-0x000000790B100000
2026-05-28 19:35:04,618 [root] DEBUG: 8996: Commandline: C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
2026-05-28 19:35:04,630 [root] DEBUG: 8996: hook_api: LdrpCallInitRoutine export address 0x00007FFBC7B699BC obtained via GetFunctionAddress
2026-05-28 19:35:04,652 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-05-28 19:35:04,653 [root] DEBUG: 8996: set_hooks: Unable to hook LockResource
2026-05-28 19:35:04,658 [root] DEBUG: 8996: Hooked 627 out of 628 functions
2026-05-28 19:35:04,659 [root] DEBUG: 8996: Syscall hook installed, syscall logging level 1
2026-05-28 19:35:04,666 [root] DEBUG: 8996: RestoreHeaders: Restored original import table.
2026-05-28 19:35:04,667 [root] INFO: Loaded monitor into process with pid 8996
2026-05-28 19:35:04,668 [root] DEBUG: 8996: caller_dispatch: Added region at 0x00007FF69BCF0000 to tracked regions list (ntdll::NtAllocateVirtualMemory returns to 0x00007FF69BCF12F2, thread 9004).
2026-05-28 19:35:04,668 [root] DEBUG: 8996: YaraScan: Scanning 0x00007FF69BCF0000, size 0x8026
2026-05-28 19:35:04,669 [root] DEBUG: 8996: ProcessImageBase: Main module image at 0x00007FF69BCF0000 unmodified (entropy change 0.000000e+00)
2026-05-28 19:35:04,672 [root] DEBUG: 8996: DLL loaded at 0x00007FFBC3110000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-05-28 19:35:04,675 [root] DEBUG: 8996: DLL loaded at 0x00007FFBC5750000: C:\Windows\System32\bcryptPrimitives (0x82000 bytes).
2026-05-28 19:35:04,677 [root] DEBUG: 8996: DLL loaded at 0x00007FFBC7A60000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-05-28 19:35:04,691 [root] DEBUG: 8996: DLL loaded at 0x00007FFBC2BF0000: C:\Windows\system32\uxtheme (0x9e000 bytes).
2026-05-28 19:35:04,706 [root] DEBUG: 8996: DLL loaded at 0x00007FFBC5C20000: C:\Windows\System32\shcore (0xad000 bytes).
2026-05-28 19:35:04,706 [root] DEBUG: 8996: DLL loaded at 0x00007FFBB0100000: C:\Windows\System32\thumbcache (0x66000 bytes).
2026-05-28 19:35:04,712 [root] DEBUG: 8996: DLL loaded at 0x00007FFBC0DB0000: C:\Windows\system32\propsys (0xf6000 bytes).
2026-05-28 19:35:07,182 [root] DEBUG: 4692: DLL loaded at 0x00007FFBB4BE0000: C:\Windows\SYSTEM32\MPR (0x1d000 bytes).
2026-05-28 19:35:07,205 [root] DEBUG: 4692: DLL loaded at 0x00007FFBC0930000: C:\Windows\System32\drprov (0xb000 bytes).
2026-05-28 19:35:07,228 [root] DEBUG: 4692: DLL loaded at 0x00007FFBB4AC0000: C:\Windows\System32\ntlanman (0x1f000 bytes).
2026-05-28 19:35:07,237 [root] DEBUG: 4692: DLL loaded at 0x00007FFBBD8A0000: C:\Windows\System32\DAVHLPR (0xd000 bytes).
2026-05-28 19:35:07,237 [root] DEBUG: 4692: DLL loaded at 0x00007FFBB4500000: C:\Windows\System32\davclnt (0x1e000 bytes).
2026-05-28 19:35:07,260 [root] DEBUG: 4692: DLL loaded at 0x00007FFB6CFF0000: C:\Windows\System32\PlayToDevice (0x64000 bytes).
2026-05-28 19:35:07,274 [root] DEBUG: 4692: DLL loaded at 0x00007FFBB2520000: C:\Windows\System32\EhStorAPI (0x26000 bytes).
2026-05-28 19:35:09,300 [root] DEBUG: 4692: AllocationHandler: Allocation already in tracked region list: 0x00007DF4C7560000.
2026-05-28 19:35:09,301 [root] DEBUG: 4692: AllocationHandler: Allocation already in tracked region list: 0x00007DF4C7550000.
2026-05-28 19:35:09,302 [root] DEBUG: 4692: AllocationHandler: Allocation already in tracked region list: 0x00007DF4C7540000.
2026-05-28 19:35:09,303 [root] DEBUG: 4692: AllocationHandler: Allocation already in tracked region list: 0x00007DF4C7530000.
2026-05-28 19:35:09,325 [root] DEBUG: 844: CreateProcessHandler: Injection info set for new process 8836: C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe, ImageBase: 0x00007FF630AD0000
2026-05-28 19:35:09,326 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 8836
2026-05-28 19:35:09,326 [lib.api.process] INFO: Monitor config for process 8836: C:\hsngo5k_\dll\8836.ini
2026-05-28 19:35:09,329 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:35:09,332 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:35:09,337 [root] DEBUG: Loader: Injecting process 8836 (thread 10052) with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:09,337 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-28 19:35:09,338 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:09,340 [lib.api.process] INFO: Injected into 64-bit <Process 8836 CHXSmartScreen.exe>
2026-05-28 19:35:09,341 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 8836
2026-05-28 19:35:09,342 [lib.api.process] INFO: Monitor config for process 8836: C:\hsngo5k_\dll\8836.ini
2026-05-28 19:35:09,342 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:35:09,344 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:35:09,348 [root] DEBUG: Loader: Injecting process 8836 (thread 10052) with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:09,349 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-05-28 19:35:09,350 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:09,351 [lib.api.process] INFO: Injected into 64-bit <Process 8836 CHXSmartScreen.exe>
2026-05-28 19:35:09,352 [root] INFO: Announced 64-bit process name: CHXSmartScreen.exe pid: 8836
2026-05-28 19:35:09,354 [lib.api.process] INFO: Monitor config for process 8836: C:\hsngo5k_\dll\8836.ini
2026-05-28 19:35:09,354 [lib.api.process] INFO: Option 'interactive' with value '1' sent to monitor
2026-05-28 19:35:09,356 [lib.api.process] INFO: 64-bit DLL to inject is C:\hsngo5k_\dll\gIlsNlf.dll, loader C:\hsngo5k_\bin\vouhCgRr.exe
2026-05-28 19:35:09,362 [root] DEBUG: Loader: Injecting process 8836 with C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:09,363 [root] DEBUG: InjectDll: No thread ID supplied, initial thread ID 10052, handle 0x120
2026-05-28 19:35:09,363 [root] DEBUG: InjectDllViaIAT: This image has already been patched.
2026-05-28 19:35:09,364 [root] DEBUG: Successfully injected DLL C:\hsngo5k_\dll\gIlsNlf.dll.
2026-05-28 19:35:09,365 [lib.api.process] INFO: Injected into 64-bit <Process 8836 CHXSmartScreen.exe>
2026-05-28 19:35:12,406 [root] INFO: Process with pid 8996 has terminated
2026-05-28 19:35:12,407 [root] DEBUG: 8996: NtTerminateProcess hook: Attempting to dump process 8996
2026-05-28 19:35:12,408 [root] DEBUG: 8996: DoProcessDump: Skipping process dump as code is identical on disk.
Process Log

        

    


    

        

            
Pre-Script Log

            

        

    


    

        

            
During-Script Log

            

        

    







    

        

            

                
 Machine Information

            

            

                

                    
                        

                            Name
                            Label
                            Manager
                            Started On
                            Shutdown On
                            Route
                        

                    
                    
                        

                            cuckoo1
                            cuckoo1
                            KVM
                            2026-05-28 19:34:07
                            2026-05-28 19:35:32
                            
                                none
                            
                        

                    
                

            

        

    









    

    

        

            
 URL Details

        

        

            

                
                
            

        

    
















    
    
    

        

            

                
            

        

        

            

                
                    
                

                

                    
                    

                        

                            

                                Processing 3.73s
                            

                            
    
                                
                                    
                                    
  • 
                                        1.833s UrlAnalysis
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        1.693s NetworkAnalysis
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.183s BehaviorAnalysis
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.017s AnalysisInfo
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.001s Debug
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.001s script_log_processing
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.001s ProcessMemory
                                    
    • 
                                    
                                
                                    
                                
                            

                        

                    

                    

                    
                    

                        

                            

                                Signatures 0.45s
                            

                            
    
                                
                                    
                                    
  • 
                                        0.154s antiav_detectreg
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.053s infostealer_ftp
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.051s territorial_disputes_sigs
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.032s antianalysis_detectreg
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.03s infostealer_im
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.017s antivm_vbox_keys
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.011s antivm_vmware_keys
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.009s antivm_parallels_keys
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.008s antivm_xen_keys
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.008s uses_windows_utilities
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.007s suspicious_command_tools
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.006s antivm_generic_diskreg
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.006s antivm_vpc_keys
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.006s infostealer_mail
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.005s masquerade_process_name
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.004s antiav_detectfile
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.003s antivm_bochs_keys
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.003s antivm_hyperv_keys
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.003s odbcconf_bypass
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.003s bypass_firewall
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.003s ransomware_files
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.002s antianalysis_detectfile
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.002s antivm_generic_bios
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.002s antivm_vbox_files
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.002s disables_windows_defender_logging
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.002s removes_windows_defender_contextmenu
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.002s infostealer_bitcoin
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.002s network_dns_url_shortener
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.002s suspicious_tld
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.002s ransomware_extensions_known
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.002s recon_fingerprint
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.001s network_dyndns
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.001s antidebug_devices
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.001s antivm_vmware_files
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.001s ketrican_regkeys
                                    
    • 
                                    
                                
                                    
                                    
  • 
                                        0.001s uac_bypass_cmstpcom
                                    
    • 
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                                    
                                
                            

                        

                    

                    

                    
                    

                        

                            

                                Reporting 0.01s
                            

                            
    
                                
                                    
                                    
  • 
                                        0.011s JsonDump
                                    
    • 
                                    
                                
                                    
                                
                            

                        

                    

                    
                

            

        

    






    




    

        

            
 Signatures

        

        

            
                                

                                
                                    

                    
                                    

                                        

                                            
                                                

                                                
                                                    
                                                        
ip: 23.202.166.56

                                                    
                                                
                                                    
                                                        
ip: 162.159.137.232

                                                    
                                                
                                                    
                                                        
ip: 162.159.130.235

                                                    
                                                
                                                    
                                                        
ip: 199.232.83.82

                                                    
                                                
                                                    
                                                        
ip: 150.171.109.17

                                                    
                                                
                                                    
                                                        
ip: 199.232.210.172

                                                    
                                                
                                                    
                                                        
ip: 23.202.165.215

                                                    
                                                
                                                    
                                                        
ip: 23.216.117.82

                                                    
                                                
                                                    
                                                        
ip: 40.115.75.193

                                                    
                                                
                                                    
                                                        
ip: 199.232.215.52

                                                    
                                                
                                                    
                                                        
ip: 23.211.129.205

                                                    
                                                
                                                    
                                                        
ip: 162.159.135.234

                                                    
                                                
                                                    
                                                        
ip: 199.232.211.52

                                                    
                                                
                                                    
                                                        
ip: 13.107.246.31

                                                    
                                                
                                                    
                                                        
ip: 23.216.106.59

                                                    
                                                
                                                    
                                                        
ip: 162.159.128.235

                                                    
                                                
                                                    
                                                        
ip: 185.247.139.200

                                                    
                                                
                                                    
                                                        
ip: 149.135.84.155

                                                    
                                                
                                                    
                                                        
ip: 162.159.134.233

                                                    
                                                
                                                    
                                                        
ip: 103.10.125.22

                                                    
                                                
                                                    
                                                        
ip: 172.172.255.216

                                                    
                                                
                                                    
                                                        
ip: 162.254.194.57

                                                    
                                                
                                                    
                                                        
ip: 162.254.195.75

                                                    
                                                
                                                    
                                                        
ip: 162.254.195.69

                                                    
                                                
                                                    
                                                        
ip: 103.10.125.23

                                                    
                                                
                                                    
                                                        
ip: 162.159.133.233

                                                    
                                                
                                                    
                                                        
domain: badoomovies.com

                                                    
                                                
                                                    
                                                        
domain: latency.discord.media

                                                    
                                                
                                                    
                                                        
domain: dns.google

                                                    
                                                
                                                    
                                                        
domain: disabled.invalid

                                                    
                                                
                                                    
                                                        
domain: gateway-us-east1-d.discord.gg

                                                    
                                                
                                                    
                                                        
domain: p2p-syd1.discovery.steamserver.net

                                                    
                                                
                                                

                                            
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                    

                                                        
                                                            
                                                        
                                                    

                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                
                                                    
                                                        
file: C:\Users\Public\Desktop\desktop.ini

                                                    
                                                
                                                    
                                                        
file: C:\Users\Public\Desktop

                                                    
                                                
                                                

                                            
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                    

                                                        
                                                            
                                                        
                                                    

                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                
                                                    
                                                        
process: dllhost.exe, PID 8996

                                                    
                                                
                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                
                                                    
                                                        
regkey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-AU

                                                    
                                                
                                                    
                                                        
regkey: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-AU

                                                    
                                                
                                                

                                            
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                    

                                                        
                                                            
                                                        
                                                    

                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                
                                                    
                                                        
behavioral_fips_reconnaissance: ["dllhost.exe (PID: 8996) probed FIPS encryption policy at 'HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\STE'", "dllhost.exe (PID: 8996) probed FIPS encryption policy at 'HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\FipsAlgorithmPolicy'", "dllhost.exe (PID: 8996) probed FIPS encryption policy at 'HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\Enabled'", "dllhost.exe (PID: 8996) probed FIPS encryption policy at 'HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy'", "dllhost.exe (PID: 8996) probed FIPS encryption policy at 'HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\MDMEnabled'"]

                                                    
                                                
                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                    

                                                        
                                                            
                                                        
                                                    

                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                
                                                    
                                                        
suspicious_dll_load: Process msedge.exe loaded a DLL from a suspicious directory, this is possibly indicative of DLL side loading/search order hijacking

                                                    
                                                
                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                    

                                                        
                                                            
                                                        
                                                    

                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                    

                                                        
                                                            
                                                        
                                                    

                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                
                                                    
                                                        
thread_resumed: Process svchost.exe with process ID 844 resumed a thread in another process with the process ID 4404

                                                    
                                                
                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                
                                                    
                                                        
file: C:\$Recycle.Bin\S-1-5-21-3968686040-3210279463-847977608-1001

                                                    
                                                
                                                    
                                                        
file: C:\$Recycle.Bin\S-1-5-21-3968686040-3210279463-847977608-1001\desktop.ini

                                                    
                                                
                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                                    

                    
                                    

                                        

                                            
                                                

                                                
                                                    
                                                        
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-100000000000}\Generation

                                                    
                                                
                                                    
                                                        
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-300300000000}\Data

                                                    
                                                
                                                    
                                                        
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-300300000000}\Generation

                                                    
                                                
                                                    
                                                        
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-100000000000}\

                                                    
                                                
                                                    
                                                        
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-300300000000}\

                                                    
                                                
                                                    
                                                        
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-100000000000}\Data

                                                    
                                                
                                                    
                                                        
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-c0dd0e000000}\

                                                    
                                                
                                                

                                            
                                            
                                        

                                    

                                    

                
                                    
                
                                    

                    
                                    

                                        

                                            
                                                

                                                
                                                    
                                                        
unhook: function_name: CommandLineToArgvW, type: restored

                                                    
                                                
                                                

                                            
                                            
                                                

                                                
                                                    
                                                    
                                                
                                            
                                        

                                    

                                    

                
                

            
        

    

















    

        

            
        

    

    

        

            
                

                    
                    

                        
                        

                            

                                

                                    

                                        Seek in progress...
                                        
                                    

                                

                            

                        

                        
                        

                            
                            
                            00:00
                            /
                            00:00
                        

                    

                    
                    
                

            
        

    










    

        
        

            

                
 Hosts

                

                    

    
        

            

                Direct
                IP
                Country Name
                ASN
                
            

            
            
                

                    
                        Y
                    
                    23.202.166.56 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    162.159.137.232 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        N
                    
                    162.159.130.235 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    199.232.83.82 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    150.171.109.17 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    199.232.210.172 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    23.202.165.215 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    23.216.117.82 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    40.115.75.193 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    199.232.215.52 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    23.211.129.205 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        N
                    
                    162.159.135.234 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    199.232.211.52 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    13.107.246.31 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    23.216.106.59 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        N
                    
                    162.159.128.235 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        N
                    
                    185.247.139.200 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    149.135.84.155 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    162.159.134.233 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    103.10.125.22 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    172.172.255.216 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    162.254.194.57 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    162.254.195.75 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    162.254.195.69 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    103.10.125.23 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
            
                

                    
                        Y
                    
                    162.159.133.233 [VT]
                    
                    
                    
                    unknown
                    
                        -
                    
                    
                

            
            
        

    



                

            

        

        
        
        

            

                
 DNS

                

                    

    
        

            

                Name
                Response
                Post-Analysis Lookup
                
            

            
                

                badoomovies.com  [VT]
                
                
                
                    
                        
                            A 185.247.139.200
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                        
                    
                    
                        185.247.139.200
                        [VT]
                        
                        
                        
                    
                    
                

            
                

                latency.discord.media  [VT]
                
                
                
                    
                        
                            A 162.159.128.235
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                                

                            
                        
                            A 162.159.138.234
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                                

                            
                        
                            A 162.159.137.234
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                                

                            
                        
                            A 162.159.130.235
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                                

                            
                        
                            A 162.159.129.235
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                        
                    		
                    
                        162.159.129.235
                        [VT]
                        
                        
                        
                    
                    
                

            
                

                dns.google  [VT]
                
                
                
                    
                        
                            A 8.8.4.4
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                                

                            
                        
                            A 8.8.8.8
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                        
                    		
                    
                        8.8.8.8
                        [VT]
                        
                        
                        
                    
                    
                

            
                

                disabled.invalid  [VT]
                
                
                
                    
                        
                            NXDOMAIN 
                            
                            
                        
                    
                    
                    
                    
                

            
                

                gateway-us-east1-d.discord.gg  [VT]
                
                
                
                    
                        
                            A 162.159.133.234
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                                

                            
                        
                            A 162.159.134.234
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                                

                            
                        
                            A 162.159.130.234
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                                

                            
                        
                            A 162.159.135.234
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                                

                            
                        
                            A 162.159.136.234
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                        
                    		
                    
                        162.159.130.234
                        [VT]
                        
                        
                        
                    
                    
                

            
                

                p2p-syd1.discovery.steamserver.net  [VT]
                
                
                
                    
                        
                            A 103.10.125.24
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                                

                            
                        
                            A 103.10.125.42
                            
                                
                                [VT]
                                
                                
                                
                            
                            
                        
                    		
                    
                        103.10.125.42
                        [VT]
                        
                        
                        
                    
                    
                

            
        

    



                

            

        

        
    







    


    

        

            
 Summary

        

        

            

                

                    
                

                

                    

                        

                            

                                
                                    
    
                                    
                                        
  • \Device\Bam
    • 
                                    
                                        
  • C:\
    • 
                                    
                                        
  • C:\Users\desktop.ini
    • 
                                    
                                        
  • C:\Users
    • 
                                    
                                        
  • C:\Users\admin
    • 
                                    
                                        
  • C:\Users\admin\AppData
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\desktop.ini
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
    • 
                                    
                                        
  • C:\ProgramData\Microsoft\Windows\Start Menu\Programs
    • 
                                    
                                        
  • C:\ProgramData\Microsoft\Windows\Start Menu
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Burn
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Network Shortcuts
    • 
                                    
                                        
  • C:\Users\Public\Desktop
    • 
                                    
                                        
  • C:\Users\admin\Desktop
    • 
                                    
                                        
  • C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\S-1-5-21-3968686040-3210279463-847977608-1001.pckgdep
    • 
                                    
                                        
  • C:\Windows\apppatch\sysmain.sdb
    • 
                                    
                                        
  • C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Search_1.14.10.19041_neutral_neutral_cw5n1h2txyewy\S-1-5-21-3968686040-3210279463-847977608-1001.pckgdep
    • 
                                    
                                        
  • C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.StartMenuExperienceHost_10.0.19041.3636_neutral_neutral_cw5n1h2txyewy\S-1-5-21-3968686040-3210279463-847977608-1001.pckgdep
    • 
                                    
                                        
  • C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.19041.3636_neutral_neutral_cw5n1h2txyewy\S-1-5-21-3968686040-3210279463-847977608-1001.pckgdep
    • 
                                    
                                        
  • C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecHealthUI_10.0.19041.3636_neutral__cw5n1h2txyewy\S-1-5-21-3968686040-3210279463-847977608-1001.pckgdep
    • 
                                    
                                        
  • C:\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy\S-1-5-21-3968686040-3210279463-847977608-1001.pckgdep
    • 
                                    
                                        
  • C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftWindows.Client.CBS_1000.19053.1000.0_x64__cw5n1h2txyewy\S-1-5-21-3968686040-3210279463-847977608-1001.pckgdep
    • 
                                    
                                        
  • C:\Windows\
    • 
                                    
                                        
  • C:\Windows\System32\
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk
    • 
                                    
                                        
  • C:\Windows
    • 
                                    
                                        
  • C:\Windows\System32\WindowsPowerShell\
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
    • 
                                    
                                        
  • C:\Windows\System32\windowspowershell\v1.0\powershell.exe
    • 
                                    
                                        
  • C:\Windows\System32\windowspowershell\SystemResources\powershell.exe.mun
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\
    • 
                                    
                                        
  • C:\program files (x86)\microsoft\Edge\application\msedge.exe
    • 
                                    
                                        
  • C:\program files (x86)\microsoft\Edge\SystemResources\msedge.exe.mun
    • 
                                    
                                        
  • C:\Windows\System32\twinui.pcshell.dll
    • 
                                    
                                        
  • C:\Windows\System32\SecurityHealthSSO.dll
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-LIGHT.svg
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ShellFeeds\GLEAM-DARK.svg
    • 
                                    
                                        
  • C:\Windows\explorer.exe
    • 
                                    
                                        
  • C:\Windows\System32\d3d10warp.dll
    • 
                                    
                                        
  • C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\resources.pri
    • 
                                    
                                        
  • C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\pris\
    • 
                                    
                                        
  • C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\
    • 
                                    
                                        
  • C:\Windows\rescache\_merged\92721896\3889361505.pri
    • 
                                    
                                        
  • C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\pris\resources.en-US.pri
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk
    • 
                                    
                                        
  • C:\Windows\System32\ieframe.dll
    • 
                                    
                                        
  • C:\Windows\System32\UIRibbonRes.dll
    • 
                                    
                                        
  • C:\Windows\System32\en-US\UIRibbon.dll.mui
    • 
                                    
                                        
  • C:\Windows\SystemResources\UIRibbon.dll.mun
    • 
                                    
                                        
  • C:\Windows\System32\en-US\UIAutomationCore.DLL.mui
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\5f7b5f1e01b83767.automaticDestinations-ms
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms
    • 
                                    
                                        
  • C:\Windows\resources\Themes\aero\Shell\NormalColor\ShellStyle.dll
    • 
                                    
                                        
  • C:\Windows\System32\imageres.dll
    • 
                                    
                                        
  • C:\Windows\SystemResources\imageres.dll.mun
    • 
                                    
                                        
  • C:\Users\admin\Desktop\desktop.ini
    • 
                                    
                                        
  • C:\Users\admin\Downloads\desktop.ini
    • 
                                    
                                        
  • C:\Users\admin\Documents\desktop.ini
    • 
                                    
                                        
  • C:\Users\admin\Pictures\desktop.ini
    • 
                                    
                                        
  • C:\Users\admin\Music\desktop.ini
    • 
                                    
                                        
  • C:\Users\admin\Videos\desktop.ini
    • 
                                    
                                        
  • C:\Users\Public\Desktop\desktop.ini
    • 
                                    
                                        
  • ::\
    • 
                                    
                                        
  • C:\Users\admin\OneDrive\desktop.ini
    • 
                                    
                                        
  • \??\STORAGE#Volume#{e32a9442-5af2-11f1-ae2c-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
    • 
                                    
                                        
  • \??\MountPointManager
    • 
                                    
                                        
  • \??\STORAGE#Volume#{e32a9442-5af2-11f1-ae2c-806e6f6e6963}#0000000003300000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
    • 
                                    
                                        
  • C:\Users\admin\OneDrive
    • 
                                    
                                        
  • C:\Users\admin\OneDrive\
    • 
                                    
                                        
  • C:\Users\admin\
    • 
                                    
                                        
  • C:\Users\
    • 
                                    
                                        
  • C:
    • 
                                    
                                        
  • C:\Users\admin\Downloads
    • 
                                    
                                        
  • C:\Users\admin\Documents
    • 
                                    
                                        
  • C:\Users\admin\Pictures
    • 
                                    
                                        
  • C:\Users\admin\Music
    • 
                                    
                                        
  • C:\Users\admin\Videos
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db
    • 
                                    
                                        
  • C:\Users\admin\Documents\
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db
    • 
                                    
                                        
  • C:\Windows\System32\mpr.dll
    • 
                                    
                                        
  • C:\Windows\System32\en-US\MPR.dll.mui
    • 
                                    
                                        
  • \??\PIPE\wkssvc
    • 
                                    
                                        
  • \Device\DfsClient
    • 
                                    
                                        
  • \??\PIPE\DAV RPC SERVICE
    • 
                                    
                                        
  • C:\Users\admin\3D Objects\desktop.ini
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db
    • 
                                    
                                        
  • C:\Windows\System32\en-US\imageres.dll.mui
    • 
                                    
                                        
  • C:\Windows\System32\SystemResources\imageres.dll.mui.mun
    • 
                                    
                                        
  • \Device\DeviceApi\Dev\Query
    • 
                                    
                                        
  • C:\Users\admin\AppData\Roaming\Microsoft\Windows\Network Shortcuts\desktop.ini
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db
    • 
                                    
                                        
  • C:\Users\admin\Downloads\
    • 
                                    
                                        
  • C:\Users\admin\Downloads\BadooMovies.exe
    • 
                                    
                                        
  • C:\Users\admin\Downloads\BadooMovies.exe.Config
    • 
                                    
                                        
  • C:\Users\admin\SystemResources\BadooMovies.exe.mun
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db
    • 
                                    
                                        
  • C:\$Recycle.Bin\S-1-5-21-3968686040-3210279463-847977608-1001
    • 
                                    
                                        
  • C:\$Recycle.Bin\S-1-5-21-3968686040-3210279463-847977608-1001\desktop.ini
    • 
                                    
                                        
  • C:\Users\admin\Downloads\BadooMovies.exe:Zone.Identifier
    • 
                                    
                                        
  • C:\Users\admin\Downloads\BadooMovies.exe\
    • 
                                    
                                        
  • \??\Volume{528c102f-0000-0000-0000-300300000000}
    • 
                                    
                                        
  • C:\Windows\System32\UIAutomationCore.dll\5
    • 
                                    
                                        
  • C:\Windows\System32\UIAutomationCore.dll
    • 
                                    
                                        
  • C:\Windows\System32\stdole2.tlb
    • 
                                    
                                        
  • C:\Windows\System32\usp10.dll
    • 
                                    
                                        
  • C:\Windows\Globalization\Sorting\sortdefault.nls
    • 
                                    
                                        
  • \??\pipe\crashpad_5704_NNHQBWYIOOVGEUEH
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\148.0.3967.83\msedge.dll
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\msedge.dll
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\icudtl.dat
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\v8_context_snapshot.bin
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\msedge_100_percent.pak
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\msedge_200_percent.pak
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\Locales
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\Locales\en-US.pak
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\resources.pak
    • 
                                    
                                        
  • C:\Windows\System32\policymanager.dll
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\msvcp110_win.dll
    • 
                                    
                                        
  • C:\Windows\System32\msvcp110_win.dll
    • 
                                    
                                        
  • C:\Windows\System32\usermgrcli.dll
    • 
                                    
                                        
  • C:\Windows\System32\capauthz.dll
    • 
                                    
                                        
  • C:\Program Files (x86)\Microsoft\Edge\Application\MSASN1.dll
    • 
                                    
                                        
  • C:\Windows\System32\msasn1.dll
    • 
                                    
                                        
  • C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe\S-1-5-21-3968686040-3210279463-847977608-1001.pckgdep
    • 
                                    
                                        
  • C:\Windows\System32\en-US\KERNELBASE.dll.mui
    • 
                                    
                                        
  • C:\Windows\SysWOW64\propsys.dll
    • 
                                    
                                        
  • C:\Windows\System32\propsys.dll
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Packages
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Packages\
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\
    • 
                                    
                                        
  • C:\Users\admin\AppData\
    • 
                                    
                                        
  • \Device\DeviceApi\CMApi
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Packages\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\LocalState\ToastCollectionIcons\*
    • 
                                    
                                        
  • \??\PhysicalDrive0
    • 
                                    
                                        
  • C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Search_1.14.10.19041_neutral_neutral_cw5n1h2txyewy\S-1-5-18.pckgdep
    • 
                                    
                                        
  • C:\Windows\System32\kernel.appcore.dll
    • 
                                    
                                        
  • \Device\CNG
    • 
                                    
                                    

                                
                            

                        

                        

                            

                                
                            

                        

                        

                            

                                
                                    
    
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db
    • 
                                    
                                        
  • \??\PIPE\wkssvc
    • 
                                    
                                        
  • \??\PIPE\DAV RPC SERVICE
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db
    • 
                                    
                                        
  • C:\Users\admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db
    • 
                                    
                                        
  • \??\pipe\crashpad_5704_NNHQBWYIOOVGEUEH
    • 
                                    
                                    

                                
                            

                        

                        

                            

                                
                            

                        

                        

                            

                                
                                    
    
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\EdgeUpdate\Clients\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\channel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\ap
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\WOW6432Node\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\cohort
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\cohort\name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-AU
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-AU
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Sorting\Ids
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-AU
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\OEM
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\OEM\DeviceForm
    • 
                                    
                                        
  • HKEY_CURRENT_USER
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\UBR
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DisplayVersion
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\COM3
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsRuntime
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\Diagnosis
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\MaxSxSHashCount
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx\AllowDevelopmentWithoutDevLicense
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseActivationAuthenticationLevel
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\AppID\identity_helper.exe
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseDefaultAuthnLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\DefaultAccessPermission
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{E1CDD77A-65D3-4DB0-B339-21F6A48CC2FF}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E1CDD77A-65D3-4db0-B339-21F6A48CC2FF}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E1CDD77A-65D3-4db0-B339-21F6A48CC2FF}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{00000035-0000-0000-C000-000000000046}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000035-0000-0000-C000-000000000046}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000035-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AF86E2E0-B12D-4c6a-9C5A-D7AA65101E90}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AF86E2E0-B12D-4c6a-9C5A-D7AA65101E90}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{428D4DDD-3462-43DF-9395-1EFF13AE7A4B}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{428D4DDD-3462-43DF-9395-1EFF13AE7A4B}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{B03C2205-F02E-4D77-80DF-E1747AFDD39C}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{50AC103F-D235-4598-BBEF-98FE4D1A3AD4}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\InprocServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\InprocServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{50ac103f-d235-4598-bbef-98fe4d1a3ad4}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{6DB7CD52-E3B7-4ECC-BB1F-388AEEF6BB50}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\InprocServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\TreatAs
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\InprocHandler32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\InprocServer32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InprocHandler32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InprocHandler32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\LocalServer32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\Elevation
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{B03C2205-F02E-4D77-80DF-E1747AFDD39C}
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InprocHandler
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\LocalServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\LocalServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\AppID
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\Elevation
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{7AB93C52-0E48-4750-BA9D-1A4113981847}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7ab93c52-0e48-4750-ba9d-1a4113981847}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7ab93c52-0e48-4750-ba9d-1a4113981847}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{5CADDC63-01D3-4C97-986F-0533483FEE14}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5caddc63-01d3-4c97-986f-0533483fee14}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5caddc63-01d3-4c97-986f-0533483fee14}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3bc3d253-2f31-4092-9129-8ad5abf067da}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{0C9281F9-6DA1-4006-8729-DE6E6B61581C}
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{0c9281f9-6da1-4006-8729-de6e6b61581c}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c9281f9-6da1-4006-8729-de6e6b61581c}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c9281f9-6da1-4006-8729-de6e6b61581c}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c9281f9-6da1-4006-8729-de6e6b61581c}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c9281f9-6da1-4006-8729-de6e6b61581c}\InprocServer32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{0c9281f9-6da1-4006-8729-de6e6b61581c}\InprocHandler32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c9281f9-6da1-4006-8729-de6e6b61581c}\InprocHandler32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{0c9281f9-6da1-4006-8729-de6e6b61581c}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c9281f9-6da1-4006-8729-de6e6b61581c}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers\WaitForRestore
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{DF8E9480-CA73-448E-B8F0-DA000F581428}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DF8E9480-CA73-448E-B8F0-DA000F581428}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DF8E9480-CA73-448E-B8F0-DA000F581428}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\PolicyType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\Behavior
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\RegKeyPathRedirectMapped
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\grouppolicyname
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\grouppolicypath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\grouppolicyismultisz
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\grouppolicymultiszSeparatorChar
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\ADMXMetadataDevice
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\ADMXMetadataBoth
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\30Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\AppID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\current\Device\Privacy
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\PolicyType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\MergeAlgorithm
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\RegKeyPathRedirectMapped
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\RegKeyPathRedirect
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\grouppolicyname
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\grouppolicypath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\grouppolicyismultisz
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\grouppolicymultiszSeparatorChar
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\ADMXMetadataUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\ADMXMetadataDevice
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\ADMXMetadataBoth
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\30Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\PolicyType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\Behavior
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\MergeAlgorithm
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\RegKeyPathRedirectMapped
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\RegKeyPathRedirect
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\grouppolicyname
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\grouppolicypath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\grouppolicyismultisz
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\grouppolicymultiszSeparatorChar
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\ADMXMetadataUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\ADMXMetadataDevice
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\ADMXMetadataBoth
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\30Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\PolicyType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\Behavior
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\MergeAlgorithm
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\RegKeyPathRedirectMapped
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\RegKeyPathRedirect
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\grouppolicyname
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\grouppolicypath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\grouppolicyismultisz
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\grouppolicymultiszSeparatorChar
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\ADMXMetadataUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\ADMXMetadataDevice
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\ADMXMetadataBoth
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\30Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ExePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\CommandLine
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\IdentityType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ActivatableClasses
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ServerType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\AppId
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\Identity
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ServiceName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ExplicitPsmActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\CustomAttributes
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{84103CCB-2FD7-4D6C-962E-5D8582B4C720}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{84103ccb-2fd7-4d6c-962e-5d8582b4c720}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{84103ccb-2fd7-4d6c-962e-5d8582b4c720}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{C53E07EC-25F3-4093-AA39-FC67EA22E99D}
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{926516E8-D891-45BC-9DE5-6959FB8ECAC5}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\LocalServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\AppID
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{A819F3DE-60AA-5159-8407-F0A7FB1F6832}
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{a819f3de-60aa-5159-8407-f0a7fb1f6832}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\Elevation
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{a819f3de-60aa-5159-8407-f0a7fb1f6832}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{D6F5F569-D40D-407C-8989-88CAB42CFD14}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D6F5F569-D40D-407C-8989-88CAB42CFD14}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D6F5F569-D40D-407C-8989-88CAB42CFD14}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{5232F8EA-49C7-4840-BFBB-66E785689E88}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5232f8ea-49c7-4840-bfbb-66e785689e88}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{79AB57F6-43FE-487B-8A7F-99567200AE94}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5232f8ea-49c7-4840-bfbb-66e785689e88}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{79ab57f6-43fe-487b-8a7f-99567200ae94}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{679C64B7-81AB-42C2-8819-C958767753F4}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{679C64B7-81AB-42C2-8819-C958767753F4}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{679C64B7-81AB-42C2-8819-C958767753F4}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{0450CE77-AF0D-40AC-93FD-1E5D48C89419}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0450ce77-af0d-40ac-93fd-1e5d48c89419}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0450ce77-af0d-40ac-93fd-1e5d48c89419}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{195F5943-0C04-4EAB-B907-735817FDAC77}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{195f5943-0c04-4eab-b907-735817fdac77}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{195f5943-0c04-4eab-b907-735817fdac77}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{F655B052-348B-4AB0-947B-A7DAFA44D404}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F655B052-348B-4AB0-947B-A7DAFA44D404}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F655B052-348B-4AB0-947B-A7DAFA44D404}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{23EB7394-4610-4807-BAEC-9A72F86FFA0B}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{23EB7394-4610-4807-BAEC-9A72F86FFA0B}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager\CapAuthz
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager\CapAuthz\HasRepaired
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager\CapAuthz\HasRepaired\VolatileChildTest
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager\CapDBRedirect
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe\AppPackageType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe\PackageSid
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe\CapSids
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe\ApplicationFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\MergeAlgorithm
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\RegKeyPathRedirect
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\ADMXMetadataUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\Behavior
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{2A1821FE-179D-49BC-B79D-A527920D3665}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2A1821FE-179D-49BC-B79D-A527920D3665}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2A1821FE-179D-49BC-B79D-A527920D3665}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Appx
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\PackageRepositoryRoot
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\LanguageOverlay\OverlayPackages\en-US
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\AppModel\LimitedAccessFeatures
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\LimitedAccessFeatures\com.microsoft.windows.taskbar.requestPinSecondaryTile
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\LimitedAccessFeatures\com.microsoft.windows.taskbar.requestPinSecondaryTile\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\Server
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{C5543B33-5C73-4DC5-9211-24077D3B06C5}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C5543B33-5C73-4DC5-9211-24077D3B06C5}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C5543B33-5C73-4DC5-9211-24077D3B06C5}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\LimitedAccessFeatures\com.microsoft.windows.taskbar.requestPinSecondaryTile\Expiration
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\XAML
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\XAML\OneCoreTransformsEnabledByDefault
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\IdentityType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ExplicitPsmActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\CustomAttributes
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{350E1244-4575-45EE-8595-0AA8C6506FC7}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{350E1244-4575-45EE-8595-0AA8C6506FC7}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{350E1244-4575-45EE-8595-0AA8C6506FC7}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{252E7F79-ACFA-4EA2-9A7E-FA27A8A4D3D9}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{252E7F79-ACFA-4EA2-9A7E-FA27A8A4D3D9}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{252E7F79-ACFA-4EA2-9A7E-FA27A8A4D3D9}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{01CF8BD4-E3D6-413D-8339-36D46E78D12C}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InprocHandler32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\LocalServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\AppID
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InprocHandler32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\Elevation
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{100EB64B-B24C-4C38-8964-720D926D05A4}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Classes\Interface\{100EB64B-B24C-4C38-8964-720D926D05A4}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{100EB64B-B24C-4C38-8964-720D926D05A4}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{100EB64B-B24C-4C38-8964-720D926D05A4}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{DF9A26C6-E746-4BCD-B5D4-120103C4209B}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DF9A26C6-E746-4BCD-B5D4-120103C4209B}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DF9A26C6-E746-4BCD-B5D4-120103C4209B}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataReader
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataReader\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataReader\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{B3F72108-5C5C-469B-A5E5-3F64D2A39B01}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{b3f72108-5c5c-469b-a5e5-3f64d2a39b01}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{b3f72108-5c5c-469b-a5e5-3f64d2a39b01}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{D81E96F1-A89C-417E-9335-59531026309D}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{d81e96f1-a89c-417e-9335-59531026309d}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{d81e96f1-a89c-417e-9335-59531026309d}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{d81e96f1-a89c-417e-9335-59531026309d}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{3BED20A5-6DEE-4297-B976-3B30DF69A7AA}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3bed20a5-6dee-4297-b976-3b30df69a7aa}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{3bed20a5-6dee-4297-b976-3b30df69a7aa}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3bed20a5-6dee-4297-b976-3b30df69a7aa}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{7F290DA0-75E3-5885-898D-1F5B1ED47ED2}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7f290da0-75e3-5885-898d-1f5b1ed47ed2}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7f290da0-75e3-5885-898d-1f5b1ed47ed2}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{9ED07B24-36FD-543B-948E-B01FE5814B49}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9ed07b24-36fd-543b-948e-b01fe5814b49}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9ed07b24-36fd-543b-948e-b01fe5814b49}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{EFE869FC-5841-55F1-AA56-82C7219AAA09}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{efe869fc-5841-55f1-aa56-82c7219aaa09}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{efe869fc-5841-55f1-aa56-82c7219aaa09}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{2C08602F-40B1-5E97-AE21-5C04D7FB829C}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2C08602F-40B1-5E97-AE21-5C04D7FB829C}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2C08602F-40B1-5E97-AE21-5C04D7FB829C}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{62AE0FDA-B238-554F-A275-1DC16D6CA03A}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{62AE0FDA-B238-554F-A275-1DC16D6CA03A}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{62AE0FDA-B238-554F-A275-1DC16D6CA03A}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{8445D2AE-DD03-5B98-95E4-82B43A3F0D64}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8445D2AE-DD03-5B98-95E4-82B43A3F0D64}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8445D2AE-DD03-5B98-95E4-82B43A3F0D64}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{9BCB843B-221B-5FBE-9B20-7028BC4E8653}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9BCB843B-221B-5FBE-9B20-7028BC4E8653}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9BCB843B-221B-5FBE-9B20-7028BC4E8653}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{7E470A8A-3ACD-5913-AF64-4AB78355BE5F}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7E470A8A-3ACD-5913-AF64-4AB78355BE5F}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7E470A8A-3ACD-5913-AF64-4AB78355BE5F}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InprocHandler32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InprocHandler32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\LocalServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\AppID
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\Elevation
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{155EB23B-242A-45E0-A2E9-3171FC6A7FDD}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{155EB23B-242A-45E0-A2E9-3171FC6A7FDD}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{155EB23B-242A-45E0-A2E9-3171FC6A7FDD}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{E44EA1DF-BB85-5A8C-BDDC-C8E960C355C9}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{e44ea1df-bb85-5a8c-bddc-c8e960c355c9}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{e44ea1df-bb85-5a8c-bddc-c8e960c355c9}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{8CBD762A-1222-5EE5-B745-489E7A42C6EC}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8cbd762a-1222-5ee5-b745-489e7a42c6ec}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8cbd762a-1222-5ee5-b745-489e7a42c6ec}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{6D3BC882-23A4-4706-B8FA-FC7DE2FC325D}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6d3bc882-23a4-4706-b8fa-fc7de2fc325d}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6d3bc882-23a4-4706-b8fa-fc7de2fc325d}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\AppModel\PinnableSurfaces
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\PinnableSurfaces\DefaultStart
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SecurityManager\AdminCapabilities
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities\shellExperience
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\CustomAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_USERS
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\PSR
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\PSR\WnfStateName
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3968686040-3210279463-847977608-1001
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3968686040-3210279463-847977608-1001\ProfileImagePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyComputer
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesRecycleBin
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoInternetIcon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\identity_helper.exe
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\ValidateRegItems
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\MonitorRegistry
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCommonGroups
    • 
                                    
                                        
  • HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\CallForAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\RestrictedAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\FolderValueFlags
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\ValidateRegItems
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\MonitorRegistry
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SyncRootManager
    • 
                                    
                                        
  • HKEY_CLASSES_ROOT\Directory
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\ShellEx\LibraryDescriptionHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Classes\Directory\ShellEx\LibraryDescriptionHandler
    • 
                                    
                                        
  • HKEY_CLASSES_ROOT\Folder
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Folder\ShellEx\LibraryDescriptionHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\LibraryDescriptionHandler
    • 
                                    
                                        
  • HKEY_CLASSES_ROOT\AllFilesystemObjects
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\AllFilesystemObjects\ShellEx\LibraryDescriptionHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\LibraryDescriptionHandler
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF50}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF50}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF50}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF55}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF55}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF55}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-300300000000}\
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-300300000000}\Data
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-300300000000}\Generation
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DontShowSuperHidden
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellState
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWebView
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ClassicShell
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\SeparateProcess
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetCrawling
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowCompColor
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\DontPrettyPath
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowInfoTip
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideIcons
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MapNetDrvBtn
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\WebView
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Filter
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SeparateProcess
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\NoNetCrawling
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AutoCheckSelect
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\IconsOnly
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowTypeOverlay
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowStatusBar
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\ShellEx\IconHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\IconHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\IconHandler
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\DocObject
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\DocObject
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\DocObject
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\BrowseInPlace
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\BrowseInPlace
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\BrowseInPlace
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\Clsid
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\Clsid
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\Clsid
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\IsShortcut
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\IsShortcut
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-100000000000}\Data
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\AlwaysShowExt
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\NeverShowExt
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\NeverShowExt
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-100000000000}\
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-100000000000}\Generation
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\StreamResource
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-c0dd0e000000}\
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\PropertyBag
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\KnownFolders
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Start Menu
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\PropertyBag
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Start Menu
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\PropertyBag
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Recent
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PropertyBag
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PropertyBag
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Personal
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PropertyBag
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\ShellEx\PropertyHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Classes\Directory\ShellEx\PropertyHandler
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Folder\ShellEx\PropertyHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\PropertyHandler
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\AllFilesystemObjects\ShellEx\PropertyHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\PropertyHandler
    • 
                                    
                                        
  • HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions
    • 
                                    
                                        
  • HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\AppID\{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LocalService
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\DllSurrogate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\RunAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ActivateAtStorage
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ROTFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AppIDFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\MGOTFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ProcessMitigationPolicy
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LaunchPermission
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyAuthenticationLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyImpersonationLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AuthenticationLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\RemoteServerName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\SRPTrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\PreferredServerBitness
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LoadUserSettings
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ProtectionLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AccessPermission
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocHandler32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocHandler32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\GipActivityBypass
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LocalServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AppID
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\Elevation
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Interface\{75121952-E0D0-43E5-9380-1D80483ACF72}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{75121952-e0d0-43e5-9380-1d80483acf72}\ProxyStubClsid32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{75121952-e0d0-43e5-9380-1d80483acf72}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\TreatAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocHandler32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocHandler32
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InprocHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\LocalServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\AppID
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\LocalServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\Elevation
    • 
                                    
                                    

                                
                            

                        

                        

                            

                                
                                    
    
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\channel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\ap
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\cohort\name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-AU
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-AU
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions\000603xx
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en-AU
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Sorting\Ids\en
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\OEM\DeviceForm
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\UBR
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DisplayVersion
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\Com+Enabled
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundExecutionManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\MaxSxSHashCount
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Diagnostics.AsyncCausalityTracer\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Notifications.ToastNotificationManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx\AllowDevelopmentWithoutDevLicense
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock\AllowDevelopmentWithoutDevLicense
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseActivationAuthenticationLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RaiseDefaultAuthnLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\DefaultAccessPermission
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E1CDD77A-65D3-4db0-B339-21F6A48CC2FF}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000035-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AF86E2E0-B12D-4c6a-9C5A-D7AA65101E90}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\InprocServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\InprocServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{50ac103f-d235-4598-bbef-98fe4d1a3ad4}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b03c2205-f02e-4d77-80df-e1747afdd39c}\InprocServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6db7cd52-e3b7-4ecc-bb1f-388aeef6bb50}\AppID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7ab93c52-0e48-4750-ba9d-1a4113981847}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5caddc63-01d3-4c97-986f-0533483fee14}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c9281f9-6da1-4006-8729-de6e6b61581c}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c9281f9-6da1-4006-8729-de6e6b61581c}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Containers\WaitForRestore
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DF8E9480-CA73-448E-B8F0-DA000F581428}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\PolicyType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\Behavior
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\RegKeyPathRedirectMapped
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\grouppolicyname
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\grouppolicypath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\grouppolicyismultisz
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\grouppolicymultiszSeparatorChar
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\ADMXMetadataDevice
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\ADMXMetadataBoth
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\30Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\AppID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\PolicyType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\MergeAlgorithm
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\RegKeyPathRedirectMapped
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\RegKeyPathRedirect
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\grouppolicyname
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\grouppolicypath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\grouppolicyismultisz
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\grouppolicymultiszSeparatorChar
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\ADMXMetadataUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\ADMXMetadataDevice
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\ADMXMetadataBoth
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\30Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\PolicyType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\Behavior
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\MergeAlgorithm
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\RegKeyPathRedirectMapped
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\RegKeyPathRedirect
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\grouppolicyname
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\grouppolicypath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\grouppolicyismultisz
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\grouppolicymultiszSeparatorChar
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\ADMXMetadataUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\ADMXMetadataDevice
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\ADMXMetadataBoth
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\30Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceDenyTheseApps\Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\PolicyType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\Behavior
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\MergeAlgorithm
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\RegKeyPathRedirectMapped
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\RegKeyPathRedirect
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\grouppolicyname
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\grouppolicypath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\grouppolicyismultisz
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\grouppolicymultiszSeparatorChar
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\ADMXMetadataUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\ADMXMetadataDevice
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\ADMXMetadataBoth
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\30Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground\Value
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.User\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ExePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\CommandLine
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\IdentityType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ActivatableClasses
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ServerType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\AppId
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\Identity
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ServiceName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ExplicitPsmActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{84103ccb-2fd7-4d6c-962e-5d8582b4c720}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{926516E8-D891-45BC-9DE5-6959FB8ECAC5}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\AppID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{a819f3de-60aa-5159-8407-f0a7fb1f6832}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D6F5F569-D40D-407C-8989-88CAB42CFD14}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5232f8ea-49c7-4840-bfbb-66e785689e88}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Package\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{679C64B7-81AB-42C2-8819-C958767753F4}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0450ce77-af0d-40ac-93fd-1e5d48c89419}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{195f5943-0c04-4eab-b907-735817fdac77}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F655B052-348B-4AB0-947B-A7DAFA44D404}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{23EB7394-4610-4807-BAEC-9A72F86FFA0B}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe\AppPackageType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe\PackageSid
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe\CapSids
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\CapAuthz\ApplicationsEx\Microsoft.MicrosoftEdge.Stable_148.0.3967.83_neutral__8wekyb3d8bbwe\ApplicationFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\MergeAlgorithm
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\RegKeyPathRedirect
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_UserInControlOfTheseApps\ADMXMetadataUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Privacy\LetAppsRunInBackground_ForceAllowTheseApps\Behavior
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2A1821FE-179D-49BC-B79D-A527920D3665}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\PackageRepositoryRoot
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.LimitedAccessFeatures\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\LimitedAccessFeatures\com.microsoft.windows.taskbar.requestPinSecondaryTile\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.CryptographicBuffer\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmNames\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C5543B33-5C73-4DC5-9211-24077D3B06C5}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Security.Cryptography.Core.HashAlgorithmProvider\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\LimitedAccessFeatures\com.microsoft.windows.taskbar.requestPinSecondaryTile\Expiration
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Core.CoreApplication\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.PropertySet\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\XAML\OneCoreTransformsEnabledByDefault
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.PropertyValue\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.SecondaryTile\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.SecondaryTileStore\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundTaskRegistration\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.Internal.UserManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\IdentityType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.ApplicationModel.Background.BackgroundWorkManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\UserManager\ExplicitPsmActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{350E1244-4575-45EE-8595-0AA8C6506FC7}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{252E7F79-ACFA-4EA2-9A7E-FA27A8A4D3D9}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BAC8681-2965-4FFC-92D1-170CA4099E01}\AppID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{100EB64B-B24C-4C38-8964-720D926D05A4}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DF9A26C6-E746-4BCD-B5D4-120103C4209B}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Foundation.Collections.ValueSet\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataReader\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataReader\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.SecondaryTileView\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{b3f72108-5c5c-469b-a5e5-3f64d2a39b01}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.Application\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{d81e96f1-a89c-417e-9335-59531026309d}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3bed20a5-6dee-4297-b976-3b30df69a7aa}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7f290da0-75e3-5885-898d-1f5b1ed47ed2}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9ed07b24-36fd-543b-948e-b01fe5814b49}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{efe869fc-5841-55f1-aa56-82c7219aaa09}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2C08602F-40B1-5E97-AE21-5C04D7FB829C}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{62AE0FDA-B238-554F-A275-1DC16D6CA03A}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8445D2AE-DD03-5B98-95E4-82B43A3F0D64}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9BCB843B-221B-5FBE-9B20-7028BC4E8653}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.Shell.TaskbarManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.TaskbarPinnableSurface\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7E470A8A-3ACD-5913-AF64-4AB78355BE5F}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9F1FA092-87AA-C78A-4073-7E873ED1E3CF}\AppID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.UI.StartScreen.StartScreenManager\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.System.User\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{155EB23B-242A-45E0-A2E9-3171FC6A7FDD}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{e44ea1df-bb85-5a8c-bddc-c8e960c355c9}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8cbd762a-1222-5ee5-b745-489e7a42c6ec}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.Tiles.TileStore\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.TileView\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6d3bc882-23a4-4706-b8fa-fc7de2fc325d}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\PinnableSurfaces\DefaultStart
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.ApplicationModel.StartPinnableSurface\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SecurityManager\AdminCapabilities\shellExperience
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\ActivationType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\Server
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\DllPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\Threading
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\TrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\RemoteServer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\ActivateAsUser
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\ActivateInSharedBroker
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\ActivateInBrokerForMediumILContainer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\Permissions
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.ApplicationData\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe\PSR\WnfStateName
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Local AppData
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3968686040-3210279463-847977608-1001\ProfileImagePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyComputer
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesRecycleBin
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoInternetIcon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\ValidateRegItems
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\MonitorRegistry
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCommonGroups
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\CallForAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\RestrictedAttributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\FolderValueFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\ValidateRegItems
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\MonitorRegistry
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF50}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB310581-AC80-11D1-8DF3-00C04FB6EF55}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-300300000000}\Data
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-300300000000}\Generation
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DontShowSuperHidden
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellState
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWebView
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ClassicShell
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\SeparateProcess
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetCrawling
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowCompColor
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\DontPrettyPath
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowInfoTip
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideIcons
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MapNetDrvBtn
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\WebView
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Filter
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SeparateProcess
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\NoNetCrawling
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AutoCheckSelect
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\IconsOnly
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowTypeOverlay
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowStatusBar
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\DocObject
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\DocObject
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\DocObject
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\BrowseInPlace
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\BrowseInPlace
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\IsShortcut
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\IsShortcut
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-100000000000}\Data
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\AlwaysShowExt
    • 
                                    
                                        
  • HKEY_CURRENT_USER\Software\Classes\Directory\NeverShowExt
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\NeverShowExt
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{528c102f-0000-0000-0000-100000000000}\Generation
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Start Menu
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Start Menu
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Recent
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{F38BF404-1D43-42F2-9305-67DE0B28FC23}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FDD39AD0-238F-46AF-ADB4-6C85480369C7}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Personal
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Category
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Name
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\ParentFolder
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Description
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\RelativePath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\ParsingName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\InfoTip
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\LocalizedName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Icon
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Security
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\StreamResource
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\StreamResourceType
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\LocalRedirectOnly
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Roamable
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PreCreate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Stream
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\PublishExpandedPath
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\DefinitionFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\Attributes
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\FolderTypeID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{FD228CB7-AE11-4AE3-864C-16F3910AB8FE}\InitFolderHandler
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LocalService
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\DllSurrogate
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\RunAs
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ActivateAtStorage
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ROTFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AppIDFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\MGOTFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ProcessMitigationPolicy
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LaunchPermission
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyAuthenticationLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\LegacyImpersonationLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AuthenticationLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\RemoteServerName
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\SRPTrustLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\PreferredServerBitness
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\LoadUserSettings
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ProtectionLevel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AccessPermission
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InprocServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\COM3\GipActivityBypass
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\AppID
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{75121952-e0d0-43e5-9380-1d80483acf72}\ProxyStubClsid32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\ActivateOnHostFlags
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\InprocServer32
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\(Default)
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\InProcServer32\ThreadingModel
    • 
                                    
                                        
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F562A2C8-E850-4F05-8E7A-E7192E4E6C23}\AppID
    • 
                                    
                                    

                                
                            

                        

                        

                            

                                
                            

                        

                        

                            

                                
                            

                        

                        

                            

                                
                            

                        

                        

                            

                                
                                    
    
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=148.0.7778.180 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=148.0.3967.83 --initial-client-data=0x354,0x358,0x35c,0x34c,0x364,0x7ffb85295d58,0x7ffb85295d64,0x7ffb85295d70
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --startup-read-main-dll --metrics-shmem-handle=2412,i,9254761530843504222,7616292111383238981,524288 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2588 /prefetch:3
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --startup-read-main-dll --metrics-shmem-handle=2172,i,4642495680772319387,17118116984640679203,262144 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2312 /prefetch:2
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --startup-read-main-dll --metrics-shmem-handle=2672,i,15125762378853465392,758582465602508720,524288 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2676 /prefetch:8
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale=en_AU --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --renderer-client-id=6 --time-ticks-at-unix-epoch=-1780011216982031 --launch-time-ticks=50635969 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=3584,i,14196480617990583521,17268836115555013304,2097152 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3596 /prefetch:1
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale=en_AU --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1780011216982031 --launch-time-ticks=50638248 --skip-read-main-dll --metrics-shmem-handle=3612,i,13922137629094413072,6799869366371709248,2097152 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3696 /prefetch:1
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --skip-read-main-dll --metrics-shmem-handle=5208,i,5495702585828010850,3819205297865186319,524288 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3576 /prefetch:8
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --skip-read-main-dll --metrics-shmem-handle=3960,i,4728933953316391,13056253408553037665,524288 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3568 /prefetch:8
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\148.0.3967.83\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=windows_package_identity --skip-read-main-dll --metrics-shmem-handle=5816,i,7984218614831481947,5522388298470254199,524288 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5860 /prefetch:8
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --skip-read-main-dll --metrics-shmem-handle=5928,i,5358152234413628994,12107027077339134663,524288 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5944 /prefetch:8
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale=en_AU --device-scale-factor=1 --num-raster-threads=3 --enable-main-frame-before-activation --renderer-client-id=11 --time-ticks-at-unix-epoch=-1780011216982031 --launch-time-ticks=52463920 --skip-read-main-dll --metrics-shmem-handle=5996,i,12708371531593665223,15506833222681786947,2097152 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=6000 /prefetch:1
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --skip-read-main-dll --metrics-shmem-handle=6996,i,10244934382733242657,13532683168228175185,524288 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=7000 /prefetch:8
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --skip-read-main-dll --metrics-shmem-handle=7088,i,8913639506253746188,10001621401996875507,524288 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=6996 /prefetch:8
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --skip-read-main-dll --metrics-shmem-handle=6972,i,6352578797868847121,17012287025672144076,524288 --field-trial-handle=2320,i,14929327369621157306,4202929281633177340,262144 --variations-seed-version --pseudonymization-salt-handle=2324,i,18132106635844096711,14831399794136510747,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=6948 /prefetch:8
    • 
                                    
                                        
  • "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
    • 
                                    
                                        
  • "C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe" -ServerName:App.AppXk7vvv12h4qrkhkbvf6j86ja45mzj5km9.mca
    • 
                                    
                                        
  • C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
    • 
                                    
                                    

                                
                            

                        

                        

                            

                                
                                    
    
                                    
                                        
  • Local\SM0:9452:304:WilStaging_02
    • 
                                    
                                        
  • Local\SM0:9452:120:WilError_03
    • 
                                    
                                        
  • Local\SM0:8996:304:WilStaging_02
    • 
                                    
                                    

                                
                            

                        

                        

                            

                                
                            

                        

                        

                            

                                
                                    
    
                                    
                                        
  • MicrosoftEdgeElevationService
    • 
                                    
                                    

                                
                            

                        

                        

                            

                                
                                    
No results found.

                                
                            

                        

                    

                

            

        

    










    

    

        
    

        
        
No behavioral analysis data available.

    



    

    

        
    
Sorry! No strace.



    

    

        

    
    
Sorry! No tracee.

    


    

    

        
    
    

        

    

        

            
Hosts

        

        
            

                
No hosts contacted.

            

        
    





        



    

        

            
TCP Connections

        

        
            

                
No TCP connections recorded.

            

        
    






        



    

        

            
UDP Connections

        

        
            

                
No UDP connections recorded.

            

        
    





        

    

        

            
DNS Requests

        

        
            

                
No domains contacted.

            

        
    





        

    

        
HTTP Requests

    


    

    
No HTTP(s) requests performed.

    






        

    

        
SMTP Traffic

    





No SMTP traffic performed.








        

    

        
IRC Traffic

    





No IRC requests performed.








        

    

        
ICMP Traffic

    





No ICMP traffic performed.








        

    

        

            
CIF Results

        

        
            

                
No CIF Results

            

        
    





        

    

        

            
Suricata Alerts

        

        
            

                
No Suricata Alerts

            

        
    





        

    

        

            
Suricata TLS

        

        
            

                
No Suricata TLS

            

        
    





        

    

        

            
Suricata HTTP

        

        
            

                
No Suricata HTTP

            

        
    





        

    
Sorry! No Suricata Extracted files.




    


    

    

        




    

        
        
No dropped files found.

    





    

    
    

        



    
Sorry! No process dumps.