分析任务

分析类型 虚拟机标签 开始时间 结束时间 持续时间
URL win7-sp1-x64-shaapp03-1 2020-09-24 15:36:37 2020-09-24 15:38:43 126 秒

魔盾分数

2.39

可疑的

URL详细信息

URL
URL专业沙箱检测 -> http://retracker.slvnet.ru

登录查看威胁特征

运行截图


访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
www.gstatic.com A 203.208.41.66
acroipm.adobe.com A 23.223.195.201
CNAME acroipm.adobe.com.edgesuite.net
CNAME a1983.dscd.akamai.net
A 23.223.195.194

摘要

C:\Windows\System32\ntshrui.dll
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D11.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D12.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D13.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons
C:\Users\test\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\*
C:\Users\test\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\*
C:\Users\test\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\*
C:\Windows\System32\p2pcollab.dll
C:\Windows\System32\qagentrt.dll
C:\Windows\System32\dnsapi.dll
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DF49.tmp
C:\Users
C:\Users\test
C:\Users\test\AppData
C:\Users\test\AppData\Local
C:\Users\test\AppData\Local\Google
C:\Users\test\AppData\Local\Google\Chrome
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Top Sites-wal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DFC7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DFC8.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
C:\
C:\Program Files (x86)
C:\Program Files (x86)\Google
C:\Program Files (x86)\Google\Chrome
C:\Program Files (x86)\Google\Chrome\Application
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\98STYHM26P5CP21S0UQ4.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8acb3.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data
C:\Users\test\AppData\Local\Google\Chrome\User Data\E0C3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State
C:\Users\test\AppData\Local\Google\Chrome\User Data\
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFa8ad10.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E102.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings~RFa8ad3f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E132.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFa8b0fc.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E20D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E20E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\4IVJNMCVSNR1CM4ROQSI.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8b6d7.TMP
C:\Windows\System32\spool\drivers\color\D65.camp
C:\Windows\System32\spool\drivers\color\Photo.gmmp
C:\Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Index
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old~RFaf6f38.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOCK
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000034
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\*
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000036.log
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000038.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000039.log
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000037
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000037.dbtmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT~RFaf716a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000026.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000032.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000035.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000023.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000011.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000014.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000029.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000005.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000008.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000020.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000017.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000040.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08-wal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index *
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2017-09
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2017-09-journal
C:\Users\desktop.ini
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\index
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\ECAA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFb63493.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\ECF9.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFb63740.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\A9.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc3d10c.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DF49.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DFC7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DFC8.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\396.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\397.tmp
C:\Program Files (x86)\desktop.ini
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Z5TN5OVP9ZJYZMZ9ZO70.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49915.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\415.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc49ca5.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E20D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E20E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\4D1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\4D2.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1SH2DJTL4JK40UR9J1RA.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49fe1.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\396.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\397.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\57F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\580.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23ZB8Y75KOSAOW4E4OEP.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc51862.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\4D1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\4D2.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6F7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6F8.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\S9MK5BZ1LOPUMKAQZQX6.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFcbacd0.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\7A5.tmp
C:\Users\test\AppData\Local\Temp\etilqs_1VT8zt0JiEA9PG7
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd22df6.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\580.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DE.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DF.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\R9SL9QGL3CX1FJVI48JF.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd233c0.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\1EE0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd2d149.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6F7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6F8.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\1F6D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\1F6E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\P25DRIG9IV88T31DCNTO.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd2d5f4.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DE.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DF.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\203A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\203B.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\32S7MVLXX54OW348E9Z3.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd95f97.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\2099.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFdfecbe.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\1F6D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\1F6E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2117.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2128.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3SIN2SER52R7MG8M793C.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFdff407.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\28F6.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFe01852.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\203A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\203B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2A6D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2ABC.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZG6228L4ILDP9I12F37L.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe156d4.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2117.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2128.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2D4C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2D4D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BZJMV6YP7MUONTBEYKB8.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe160f6.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2A6D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2ABC.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\300C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\300D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\EU5UNRKHUFDX106HKYDI.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe72516.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\31C3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedb163.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2D4C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2D4D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\33A8.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\33A9.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3GV3WR1OT0TAG8Q08CIU.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFedbdbe.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\3D89.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedd606.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\300C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\300D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3F7D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3FCC.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\O3TYHD92VOY61AHMDCGJ.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFee5108.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\33A8.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\33A9.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\41B1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\41B2.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RO88LEWJRT4D65D7T3U8.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFf4e485.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\42CB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfb6e47.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3F7D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3FCC.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\44A0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\44B1.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9NZT9DK2B1XV4LPRILFY.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfb702b.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\518E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfc598a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\41B1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\41B2.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53B1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53C1.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ARTIGHYC4KXCGMI2FVBE.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfc5cb5.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\44A0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\44B1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\574B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\574C.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7EB5QYWLREGYFPEC75V4.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfcd5bf.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53B1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53C1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5A0B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5A6A.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RLR4JATVQDM55BI4F9YI.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10368a6.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\5B93.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF109f25c.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\574B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\574C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5E04.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5E63.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RYUK73UVFASCJAFUSJTH.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF109f53a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\68FE.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF10a94cb.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5A0B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5A6A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6B11.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6B22.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DYSV6Q9LZATZCW75QQV6.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10a9806.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5E04.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5E63.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6E4E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6E4F.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1DLNMOYXPYWDMHUBVIG9.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF117b3dd.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\78CC.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1188f44.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6B11.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6B22.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\79F5.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\79F6.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\FH1M4UBSYEFR4FS7RLT0.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11893dc.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6E4E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6E4F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7BCB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7BEB.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Q86DF4URE8M26PWVA1PE.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1190cd3.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\79F5.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\79F6.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7DEF.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7DF0.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6E65WXOFEVJFIX2WE8HO.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11f9fed.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\7FC5.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF126248a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7BCB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7BEB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8207.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8208.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\AHSK2AI91WQJBUHXIDJ4.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1262aae.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\8C65.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1264d98.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7DEF.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7DF0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8D7F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DDE.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M6GC05CI2A4XR3QDOHZS.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF12d55e3.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\8E4C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF133e28f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8207.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8208.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8FC3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8FC4.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\YDEMW3MTYTBF0MDCW421.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF133e89a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\98DA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1340ac8.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8D7F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DDE.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9A70.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9A71.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZI4XP2IUKW4WYIE773ME.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF13b17ac.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\9B5C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF141a319.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8FC3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8FC4.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9C38.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9C39.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZAC98Q7SK9GD3WHUPTY7.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF141a3e4.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\A03F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1427893.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9A70.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9A71.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A197.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A198.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IZ0FBSBB98GK9BU8DIQP.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1427f39.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9C38.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9C39.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A3DB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A3DC.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\69QC5PN59VAO7AB20PXK.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF142f6a7.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A197.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A198.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A6AA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A6AB.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\SKGI2XVTX7KKKSHD0IES.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF14987ff.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\A777.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1500d89.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A3DB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A3DC.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A93C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A94D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\C26W8BAMKZNDS9KH93MM.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1500f4e.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\B790.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15036e5.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A6AA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A6AB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\B937.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\B986.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X70ID6VNQDG641UJ14XC.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF150b54f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A93C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A94D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\BC93.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\BC94.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9HD43JQS61ZSGIATIKFB.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1574117.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\BED6.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15dcc8f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\B937.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\B986.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C04D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C04E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\999FR0QVJVG827PG57PU.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15dd3c3.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\C7ED.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15ea2b5.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\BC93.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\BC94.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C974.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C975.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0YEXX8CEQG1I45SK6N3E.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15ea4e7.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C04D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C04E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CB98.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CB99.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DDGVS9SZ0O7B79NBJ1LM.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15f1e4b.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C974.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C975.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CE1A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CE69.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XFC2HG8FNVRETZYT04CW.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF165b0eb.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\CFE0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF16c384a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CB98.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CB99.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\D1F4.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\D1F5.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\U3XJFUEQZXSNRNE9QFCS.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF16c3ad9.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\738.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1743d03.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\95B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RF1743f16.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CE1A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CE69.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DA0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E0E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZSG1HL9E1D3MOKZJ9RQE.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17446b4.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\1292.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17aca66.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\D1F4.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\D1F5.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\16D7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\16D8.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IEXNGUNH1W32YWTT7HY4.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17ad5d1.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\2B81.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17af14e.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DA0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E0E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2E31.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2E32.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X1W0U6EHPVR927SBFQ0H.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1894e7f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\16D7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\16D8.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2EFD.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2F1E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DJOA2UCMK2O19W7YD2BZ.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18952ca.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\3047.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF18955dc.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2E31.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2E32.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\320C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\320D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\JJSND4CWJGYK65WVD75P.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18958b9.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2EFD.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2F1E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3549.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\354A.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\CTRYAARUCKZUWK86BM26.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF189cf9b.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\320C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\320D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3848.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3849.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M1TMLGNVNIABNBPKTJTG.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1905b9c.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\3905.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF196e3e0.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3549.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\354A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3A7C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3ACB.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\K1G6S64AKQRRWO2IC366.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF196e66f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\507E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1970e3a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3848.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3849.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\539A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53E9.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0XD8UQPR108DXX2E9WNQ.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19e1e95.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3A7C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3ACB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\567A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\568A.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2YI52EJ1VDWMD5BLOZSL.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee3b9.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\5727.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF19ee6ea.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\539A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53E9.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\58DD.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\58DE.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PEI7Z6S1QGTD52DTB6QG.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee9a8.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\567A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\568A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5DEE.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5DEF.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3Q75OTC4T4HUQLUZ0GYG.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1a4a76e.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\73FF.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1a54378.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\58DD.tmp
C:\Program Files (x86)\Google\Chrome\Application\chrome.dll
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\OLEACC.dll
C:\Windows\System32\oleacc.dll
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe.Local\
C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2
C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\Secur32.dll
C:\Windows\System32\secur32.dll
C:\Program Files (x86)\Google\Chrome\Application\OLEACCRC.DLL
C:\Windows\System32\oleaccrc.dll
C:\Windows\WindowsShell.Manifest
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome_100_percent.pak
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\Locales
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\Locales\zh-CN.pak
C:\Windows\System32\tzres.dll
\Device\KsecDD
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
\??\pipe\chrome.2396.0.40193509
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
C:\Windows\System32\ntshrui.dll
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DF49.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DFC7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DFC8.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
C:\
C:\Program Files (x86)
C:\Program Files (x86)\Google
C:\Program Files (x86)\Google\Chrome
C:\Program Files (x86)\Google\Chrome\Application
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\98STYHM26P5CP21S0UQ4.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\E0C3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E102.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E132.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences
C:\Users
C:\Users\test
C:\Users\test\AppData
C:\Users\test\AppData\Local
C:\Users\test\AppData\Local\Google
C:\Users\test\AppData\Local\Google\Chrome
C:\Users\test\AppData\Local\Google\Chrome\User Data
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E20D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E20E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\4IVJNMCVSNR1CM4ROQSI.temp
C:\Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOCK
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000034
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000036.log
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000038.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000037.dbtmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000026.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000032.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000035.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000023.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000011.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000014.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000029.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000005.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000008.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000020.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000017.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000040.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
C:\Users\desktop.ini
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\index
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\ECAA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\ECF9.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\A9.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\396.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\397.tmp
C:\Program Files (x86)\desktop.ini
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Z5TN5OVP9ZJYZMZ9ZO70.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\415.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\4D1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\4D2.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1SH2DJTL4JK40UR9J1RA.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\57F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\580.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23ZB8Y75KOSAOW4E4OEP.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6F7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6F8.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\S9MK5BZ1LOPUMKAQZQX6.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\7A5.tmp
C:\Users\test\AppData\Local\Temp\etilqs_1VT8zt0JiEA9PG7
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DE.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DF.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\R9SL9QGL3CX1FJVI48JF.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\1EE0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\1F6D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\1F6E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\P25DRIG9IV88T31DCNTO.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\203A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\203B.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\32S7MVLXX54OW348E9Z3.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\2099.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2117.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2128.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3SIN2SER52R7MG8M793C.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\28F6.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2A6D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2ABC.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZG6228L4ILDP9I12F37L.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2D4C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2D4D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BZJMV6YP7MUONTBEYKB8.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\300C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\300D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\EU5UNRKHUFDX106HKYDI.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\31C3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\33A8.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\33A9.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3GV3WR1OT0TAG8Q08CIU.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\3D89.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3F7D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3FCC.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\O3TYHD92VOY61AHMDCGJ.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\41B1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\41B2.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RO88LEWJRT4D65D7T3U8.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\42CB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\44A0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\44B1.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9NZT9DK2B1XV4LPRILFY.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\518E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53B1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53C1.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ARTIGHYC4KXCGMI2FVBE.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\574B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\574C.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7EB5QYWLREGYFPEC75V4.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5A0B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5A6A.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RLR4JATVQDM55BI4F9YI.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\5B93.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5E04.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5E63.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RYUK73UVFASCJAFUSJTH.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\68FE.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6B11.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6B22.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DYSV6Q9LZATZCW75QQV6.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6E4E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6E4F.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1DLNMOYXPYWDMHUBVIG9.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\78CC.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\79F5.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\79F6.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\FH1M4UBSYEFR4FS7RLT0.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7BCB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7BEB.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Q86DF4URE8M26PWVA1PE.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7DEF.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7DF0.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6E65WXOFEVJFIX2WE8HO.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\7FC5.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8207.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8208.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\AHSK2AI91WQJBUHXIDJ4.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\8C65.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8D7F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DDE.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M6GC05CI2A4XR3QDOHZS.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\8E4C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8FC3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8FC4.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\YDEMW3MTYTBF0MDCW421.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\98DA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9A70.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9A71.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZI4XP2IUKW4WYIE773ME.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\9B5C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9C38.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9C39.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZAC98Q7SK9GD3WHUPTY7.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\A03F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A197.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A198.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IZ0FBSBB98GK9BU8DIQP.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A3DB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A3DC.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\69QC5PN59VAO7AB20PXK.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A6AA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A6AB.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\SKGI2XVTX7KKKSHD0IES.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\A777.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A93C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A94D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\C26W8BAMKZNDS9KH93MM.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\B790.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\B937.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\B986.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X70ID6VNQDG641UJ14XC.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\BC93.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\BC94.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9HD43JQS61ZSGIATIKFB.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\BED6.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C04D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C04E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\999FR0QVJVG827PG57PU.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\C7ED.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C974.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C975.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0YEXX8CEQG1I45SK6N3E.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CB98.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CB99.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DDGVS9SZ0O7B79NBJ1LM.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CE1A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CE69.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XFC2HG8FNVRETZYT04CW.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\CFE0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\D1F4.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\D1F5.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\U3XJFUEQZXSNRNE9QFCS.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\738.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\95B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DA0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E0E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZSG1HL9E1D3MOKZJ9RQE.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\1292.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\16D7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\16D8.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IEXNGUNH1W32YWTT7HY4.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\2B81.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2E31.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2E32.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X1W0U6EHPVR927SBFQ0H.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2EFD.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2F1E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DJOA2UCMK2O19W7YD2BZ.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\3047.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\320C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\320D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\JJSND4CWJGYK65WVD75P.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3549.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\354A.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\CTRYAARUCKZUWK86BM26.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3848.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3849.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M1TMLGNVNIABNBPKTJTG.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\3905.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3A7C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3ACB.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\K1G6S64AKQRRWO2IC366.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\507E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\539A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53E9.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0XD8UQPR108DXX2E9WNQ.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\567A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\568A.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2YI52EJ1VDWMD5BLOZSL.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\5727.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\58DD.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\58DE.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PEI7Z6S1QGTD52DTB6QG.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5DEE.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5DEF.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3Q75OTC4T4HUQLUZ0GYG.temp
C:\Users\test\AppData\Local\Google\Chrome\User Data\73FF.tmp
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll
C:\Windows\System32\oleacc.dll
C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
C:\Windows\System32\secur32.dll
C:\Windows\System32\oleaccrc.dll
C:\Windows\WindowsShell.Manifest
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome_100_percent.pak
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\Locales\zh-CN.pak
C:\Windows\System32\tzres.dll
\Device\KsecDD
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
\??\pipe\chrome.2396.0.40193509
C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DF49.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\98STYHM26P5CP21S0UQ4.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8acb3.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\E0C3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFa8ad10.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E102.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings~RFa8ad3f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E132.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFa8b0fc.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\4IVJNMCVSNR1CM4ROQSI.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8b6d7.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old~RFaf6f38.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOCK
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000038.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000039.log
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000037
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000037.dbtmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT~RFaf716a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000040.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\index
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\ECAA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFb63493.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\ECF9.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFb63740.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\A9.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc3d10c.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Z5TN5OVP9ZJYZMZ9ZO70.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49915.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\415.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc49ca5.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1SH2DJTL4JK40UR9J1RA.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49fe1.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23ZB8Y75KOSAOW4E4OEP.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc51862.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\S9MK5BZ1LOPUMKAQZQX6.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFcbacd0.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\7A5.tmp
C:\Users\test\AppData\Local\Temp\etilqs_1VT8zt0JiEA9PG7
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd22df6.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\R9SL9QGL3CX1FJVI48JF.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd233c0.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\1EE0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd2d149.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\P25DRIG9IV88T31DCNTO.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd2d5f4.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\32S7MVLXX54OW348E9Z3.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd95f97.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\2099.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFdfecbe.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3SIN2SER52R7MG8M793C.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFdff407.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\28F6.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFe01852.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZG6228L4ILDP9I12F37L.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe156d4.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BZJMV6YP7MUONTBEYKB8.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe160f6.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\EU5UNRKHUFDX106HKYDI.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe72516.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\31C3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedb163.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3GV3WR1OT0TAG8Q08CIU.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFedbdbe.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\3D89.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedd606.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\O3TYHD92VOY61AHMDCGJ.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFee5108.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RO88LEWJRT4D65D7T3U8.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFf4e485.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\42CB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfb6e47.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9NZT9DK2B1XV4LPRILFY.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfb702b.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\518E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfc598a.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ARTIGHYC4KXCGMI2FVBE.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfc5cb5.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7EB5QYWLREGYFPEC75V4.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfcd5bf.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RLR4JATVQDM55BI4F9YI.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10368a6.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\5B93.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF109f25c.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RYUK73UVFASCJAFUSJTH.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF109f53a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\68FE.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF10a94cb.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DYSV6Q9LZATZCW75QQV6.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10a9806.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1DLNMOYXPYWDMHUBVIG9.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF117b3dd.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\78CC.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1188f44.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\FH1M4UBSYEFR4FS7RLT0.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11893dc.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Q86DF4URE8M26PWVA1PE.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1190cd3.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6E65WXOFEVJFIX2WE8HO.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11f9fed.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\7FC5.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF126248a.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\AHSK2AI91WQJBUHXIDJ4.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1262aae.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\8C65.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1264d98.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M6GC05CI2A4XR3QDOHZS.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF12d55e3.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\8E4C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF133e28f.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\YDEMW3MTYTBF0MDCW421.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF133e89a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\98DA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1340ac8.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZI4XP2IUKW4WYIE773ME.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF13b17ac.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\9B5C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF141a319.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZAC98Q7SK9GD3WHUPTY7.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF141a3e4.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\A03F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1427893.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IZ0FBSBB98GK9BU8DIQP.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1427f39.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\69QC5PN59VAO7AB20PXK.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF142f6a7.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\SKGI2XVTX7KKKSHD0IES.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF14987ff.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\A777.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1500d89.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\C26W8BAMKZNDS9KH93MM.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1500f4e.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\B790.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15036e5.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X70ID6VNQDG641UJ14XC.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF150b54f.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9HD43JQS61ZSGIATIKFB.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1574117.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\BED6.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15dcc8f.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\999FR0QVJVG827PG57PU.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15dd3c3.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\C7ED.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15ea2b5.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0YEXX8CEQG1I45SK6N3E.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15ea4e7.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DDGVS9SZ0O7B79NBJ1LM.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15f1e4b.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XFC2HG8FNVRETZYT04CW.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF165b0eb.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\CFE0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF16c384a.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\U3XJFUEQZXSNRNE9QFCS.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF16c3ad9.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\738.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1743d03.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\95B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RF1743f16.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZSG1HL9E1D3MOKZJ9RQE.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17446b4.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\1292.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17aca66.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IEXNGUNH1W32YWTT7HY4.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17ad5d1.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\2B81.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17af14e.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X1W0U6EHPVR927SBFQ0H.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1894e7f.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DJOA2UCMK2O19W7YD2BZ.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18952ca.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\3047.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF18955dc.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\JJSND4CWJGYK65WVD75P.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18958b9.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\CTRYAARUCKZUWK86BM26.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF189cf9b.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M1TMLGNVNIABNBPKTJTG.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1905b9c.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\3905.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF196e3e0.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\K1G6S64AKQRRWO2IC366.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF196e66f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\507E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1970e3a.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0XD8UQPR108DXX2E9WNQ.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19e1e95.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2YI52EJ1VDWMD5BLOZSL.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee3b9.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\5727.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF19ee6ea.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PEI7Z6S1QGTD52DTB6QG.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee9a8.TMP
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3Q75OTC4T4HUQLUZ0GYG.temp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1a4a76e.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\73FF.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1a54378.TMP
\??\pipe\chrome.2396.0.40193509
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D11.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D12.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D13.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8acb3.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\E0C3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFa8ad10.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E102.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings~RFa8ad3f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E132.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFa8b0fc.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8b6d7.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old~RFaf6f38.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000037.dbtmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT~RFaf716a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000036.log
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000034
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000011.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000014.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000023.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000026.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000029.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000038.sst
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2017-09
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2017-09-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\ECAA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFb63493.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\ECF9.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFb63740.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08-journal
C:\Users\test\AppData\Local\Google\Chrome\User Data\A9.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc3d10c.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DF49.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DFC7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DFC8.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49915.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\415.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc49ca5.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E20D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E20E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49fe1.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\396.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\397.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc51862.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\4D1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\4D2.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFcbacd0.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\7A5.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd22df6.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\580.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd233c0.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\1EE0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd2d149.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6F7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6F8.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd2d5f4.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DE.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DF.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd95f97.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\2099.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFdfecbe.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\1F6D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\1F6E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFdff407.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\28F6.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFe01852.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\203A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\203B.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe156d4.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2117.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2128.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe160f6.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2A6D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2ABC.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe72516.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\31C3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedb163.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2D4C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2D4D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFedbdbe.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\3D89.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedd606.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\300C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\300D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFee5108.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\33A8.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\33A9.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFf4e485.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\42CB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfb6e47.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3F7D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3FCC.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfb702b.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\518E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfc598a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\41B1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\41B2.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfc5cb5.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\44A0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\44B1.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfcd5bf.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53B1.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53C1.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10368a6.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\5B93.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF109f25c.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\574B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\574C.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF109f53a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\68FE.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF10a94cb.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5A0B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5A6A.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10a9806.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5E04.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5E63.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF117b3dd.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\78CC.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1188f44.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6B11.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6B22.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11893dc.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6E4E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6E4F.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1190cd3.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\79F5.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\79F6.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11f9fed.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\7FC5.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF126248a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7BCB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7BEB.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1262aae.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\8C65.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1264d98.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7DEF.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7DF0.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF12d55e3.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\8E4C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF133e28f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8207.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8208.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF133e89a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\98DA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1340ac8.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8D7F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DDE.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF13b17ac.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\9B5C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF141a319.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8FC3.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8FC4.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF141a3e4.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\A03F.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1427893.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9A70.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9A71.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1427f39.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9C38.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9C39.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF142f6a7.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A197.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A198.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF14987ff.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\A777.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1500d89.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A3DB.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A3DC.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1500f4e.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\B790.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15036e5.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A6AA.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A6AB.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF150b54f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A93C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A94D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1574117.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\BED6.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15dcc8f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\B937.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\B986.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15dd3c3.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\C7ED.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15ea2b5.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\BC93.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\BC94.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15ea4e7.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C04D.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C04E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15f1e4b.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C974.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C975.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF165b0eb.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\CFE0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF16c384a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CB98.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CB99.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF16c3ad9.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\738.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1743d03.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\95B.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RF1743f16.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CE1A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CE69.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17446b4.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\1292.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17aca66.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\D1F4.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\D1F5.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17ad5d1.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\2B81.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17af14e.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DA0.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E0E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1894e7f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\16D7.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\16D8.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18952ca.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\3047.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF18955dc.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2E31.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2E32.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18958b9.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2EFD.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2F1E.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF189cf9b.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\320C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\320D.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1905b9c.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\3905.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF196e3e0.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3549.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\354A.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF196e66f.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\507E.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1970e3a.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3848.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3849.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19e1e95.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3A7C.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3ACB.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee3b9.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\5727.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF19ee6ea.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\539A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53E9.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee9a8.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\567A.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\568A.tmp
C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1a4a76e.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\73FF.tmp
C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1a54378.TMP
C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\58DD.tmp
HKEY_LOCAL_MACHINE\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
ap
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{40DD6E20-7C17-11CE-A804-00AA003CA9F6}
HKEY_CLASSES_ROOT\CLSID\{40DD6E20-7C17-11CE-A804-00AA003CA9F6}\InProcServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{40DD6E20-7C17-11CE-A804-00AA003CA9F6}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\WinSCPCopyHook
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\WinSCPCopyHook\(Default)
HKEY_CLASSES_ROOT\CLSID\{E15E1D68-0D1C-49F7-BEB8-812B1E00FA60}\InProcServer32
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\PROFILELIST
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1001
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1001\ProfileImagePath
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Sharing
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe\DontUseDesktopChangeRouter
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.tmp
HKEY_CLASSES_ROOT\.tmp
HKEY_CLASSES_ROOT\.tmp\OpenWithProgids
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp\OpenWithProgids
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp
HKEY_CLASSES_ROOT\Unknown
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\ShellEx\PropertyHandler
HKEY_CLASSES_ROOT\SystemFileAssociations\.tmp
HKEY_CLASSES_ROOT\*
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\ShellEx\PropertyHandler
HKEY_CLASSES_ROOT\AllFilesystemObjects
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\PropertyHandler
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root\ProtectedRoots
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\#16
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\Ldap
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllOpenStoreProv
HKEY_USERS\S-1-5-21-2280033686-3172497658-3481507381-1000
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\Keys
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\CTLs
HKEY_CURRENT_USER\
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\475BA6DA2AFD5AE3ADAE78A261CA0E3E548B9532
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\475BA6DA2AFD5AE3ADAE78A261CA0E3E548B9532\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPublisher\Safer
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\039EEDB80BE7A03C6953893B20D2D9323A4C2AFD
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\039EEDB80BE7A03C6953893B20D2D9323A4C2AFD\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\03A5B14663EB12023091B84A6D6A68BC871DE66B
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\03A5B14663EB12023091B84A6D6A68BC871DE66B\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\07E032E020B72C3F192F0628A2593A19A70F069E
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\07E032E020B72C3F192F0628A2593A19A70F069E\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\36527D4FA26A68F9EB4596F1D99ABB2C0EA76DFA
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\36527D4FA26A68F9EB4596F1D99ABB2C0EA76DFA\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\58E8ABB0361533FB80F79B1B6D29D3FF8D5F00F0
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\58E8ABB0361533FB80F79B1B6D29D3FF8D5F00F0\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\9F744E9F2B4DBAEC0F312C50B6563B8E2D93C311
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\9F744E9F2B4DBAEC0F312C50B6563B8E2D93C311\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\AFE5D244A8D1194230FF479FE2F897BBCD7A8CB4
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\AFE5D244A8D1194230FF479FE2F897BBCD7A8CB4\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B31EB1B740E36C8402DADC37D44DF5D4674952F9
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B31EB1B740E36C8402DADC37D44DF5D4674952F9\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B94294BF91EA8FB64BE61097C7FB001359B676CB
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B94294BF91EA8FB64BE61097C7FB001359B676CB\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\D69B561148F01C77C54578C10926DF5B856976AD
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DF3C24F9BFD666761B268073FE06D1CC8D4F82A4\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A7217F919843199C958C128449DD52D2723B0A8A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A7217F919843199C958C128449DD52D2723B0A8A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D85213E038F309D02A40917B59E142368AE6B1C0
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D85213E038F309D02A40917B59E142368AE6B1C0\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DBB84423C928ABE889D0E368FC3191D151DDB1AB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DBB84423C928ABE889D0E368FC3191D151DDB1AB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3679CA35668772304D30A5FB873B0FA77BB70D54
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3679CA35668772304D30A5FB873B0FA77BB70D54\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\6252DC40F71143A22FDE9EF7348E064251B18118
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\6252DC40F71143A22FDE9EF7348E064251B18118\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\SmartCardRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CTLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\PhysicalStores
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\Certificates
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\CRLs
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\CTLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\Certificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CRLs
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust\PhysicalStores
HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CRLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CTLs
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
HKEY_LOCAL_MACHINE\System\Setup
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates
HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_CURRENT_USER
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4b\AAF68885
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\LanguageList
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\@%SystemRoot%\system32\p2pcollab.dll,-8042
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Time Zones\China Standard Time\Dynamic DST
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\UrlDllGetObjectUrl
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\UrlDllGetObjectUrl
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\AuthRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot\DisableRootAutoUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllVerifyEncodedSignature
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllVerifyEncodedSignature
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllImportPublicKeyInfoEx2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllImportPublicKeyInfoEx2
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllVerifyCertificateChainPolicy
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllVerifyCertificateChainPolicy
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.NamespaceCLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_JumpListItems
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\Start_JumpListItems
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a4-1bd9-11e5-9838-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a4-1bd9-11e5-9838-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\KnownFolders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsHistory
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsHistory
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_TrackDocs
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\Start_TrackDocs
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\NoFileFolderConnection
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MaxUndoItems
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\MaxUndoItems
HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions
HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\\xe5\xae\x8b\xe4\xbd\x93
HKEY_CURRENT_USER\Control Panel\Desktop
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\Win
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\camp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\rip
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\Location Awareness
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane16
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\brand
HKEY_CLASSES_ROOT\.
HKEY_CLASSES_ROOT\.\OpenWithProgids
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\OpenWithProgids
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\UserChoice
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\ShellEx\IconHandler
HKEY_CLASSES_ROOT\SystemFileAssociations\.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\Clsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\NeverShowExt
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome
HKEY_CURRENT_USER\SOFTWARE\Policies\Google\Chrome
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\Recommended
HKEY_CURRENT_USER\SOFTWARE\Policies\Google\Chrome\Recommended
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions
HKEY_CURRENT_USER\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_LOCAL_MACHINE\Software\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
HKEY_CURRENT_USER\Control Panel\International
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DebugHeapFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLEAUT
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\State
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\Preference
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\metricsid
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\dr
HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{8A69D345-D564-463c-AFF1-A69D9E530F96}
UserDataDir
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\GMT
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Central Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Central Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Afghanistan Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Afghanistan Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Alaskan Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Alaskan Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arab Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arab Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabian Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabian Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabic Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabic Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Argentina Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Argentina Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Armenian Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Atlantic Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Atlantic Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azerbaijan Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azerbaijan Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azores Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azores Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Bangladesh Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Bangladesh Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Canada Central Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Canada Central Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cape Verde Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cape Verde Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Caucasus Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Caucasus Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cen. Australia Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cen. Australia Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central America Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central America Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Asia Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Asia Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Brazilian Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Brazilian Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Europe Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Europe Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central European Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central European Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Pacific Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Pacific Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time (Mexico)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time (Mexico)\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\China Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\China Standard Time\TZI
HKEY_LOCAL_MACHINE\
HKEY_CLASSES_ROOT\
HKEY_USERS\
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
ap
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{40DD6E20-7C17-11CE-A804-00AA003CA9F6}\InProcServer32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\WinSCPCopyHook\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1001\ProfileImagePath
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe\DontUseDesktopChangeRouter
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\475BA6DA2AFD5AE3ADAE78A261CA0E3E548B9532\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\039EEDB80BE7A03C6953893B20D2D9323A4C2AFD\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\03A5B14663EB12023091B84A6D6A68BC871DE66B\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\07E032E020B72C3F192F0628A2593A19A70F069E\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\36527D4FA26A68F9EB4596F1D99ABB2C0EA76DFA\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\58E8ABB0361533FB80F79B1B6D29D3FF8D5F00F0\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\9F744E9F2B4DBAEC0F312C50B6563B8E2D93C311\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\AFE5D244A8D1194230FF479FE2F897BBCD7A8CB4\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B31EB1B740E36C8402DADC37D44DF5D4674952F9\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B94294BF91EA8FB64BE61097C7FB001359B676CB\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DF3C24F9BFD666761B268073FE06D1CC8D4F82A4\Blob
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A7217F919843199C958C128449DD52D2723B0A8A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D85213E038F309D02A40917B59E142368AE6B1C0\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DBB84423C928ABE889D0E368FC3191D151DDB1AB\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3679CA35668772304D30A5FB873B0FA77BB70D54\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\6252DC40F71143A22FDE9EF7348E064251B18118\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46\Blob
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\@%SystemRoot%\system32\p2pcollab.dll,-8042
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\@%SystemRoot%\system32\dnsapi.dll,-103
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot\DisableRootAutoUpdate
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.NamespaceCLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_JumpListItems
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\Start_JumpListItems
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a4-1bd9-11e5-9838-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsHistory
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsHistory
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_TrackDocs
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\Start_TrackDocs
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\NoFileFolderConnection
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MaxUndoItems
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\MaxUndoItems
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\\xe5\xae\x8b\xe4\xbd\x93
HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\Win
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\camp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\rip
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane2
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane4
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane5
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane6
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane7
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane9
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane10
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane11
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane12
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane13
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane14
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane15
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane16
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\brand
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\DocObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\BrowseInPlace
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\IsShortcut
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\AlwaysShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\NeverShowExt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
HKEY_CURRENT_USER\Control Panel\International\LocaleName
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DebugHeapFlags
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\State
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\metricsid
UserDataDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Central Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Afghanistan Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Alaskan Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arab Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabian Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabic Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Argentina Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Atlantic Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azerbaijan Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azores Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Bangladesh Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Canada Central Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cape Verde Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Caucasus Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cen. Australia Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central America Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Asia Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Brazilian Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Europe Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central European Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Pacific Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time (Mexico)\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\China Standard Time\TZI
HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\LanguageList
HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\dr
ws2_32.dll.freeaddrinfo
ws2_32.dll.getaddrinfo
ws2_32.dll.WSASocketW
ws2_32.dll.#21
ws2_32.dll.WSAIoctl
ws2_32.dll.WSAEventSelect
ws2_32.dll.#4
ole32.dll.CoCreateInstance
comctl32.dll.#328
comctl32.dll.#386
ole32.dll.CreateBindCtx
ole32.dll.CoTaskMemRealloc
shell32.dll.#66
advapi32.dll.GetNamedSecurityInfoW
sechost.dll.ConvertStringSidToSidW
netutils.dll.NetApiBufferFree
ws2_32.dll.WSAEnumNetworkEvents
ws2_32.dll.#6
advapi32.dll.RegOpenKeyExW
ole32.dll.CoTaskMemFree
ws2_32.dll.#16
ws2_32.dll.WSASend
ws2_32.dll.WSAResetEvent
ws2_32.dll.WSARecv
propsys.dll.PropVariantToUInt64
ws2_32.dll.WSAGetOverlappedResult
crypt32.dll.CertAddEncodedCertificateToStore
crypt32.dll.CertDuplicateCertificateContext
crypt32.dll.CryptHashCertificate
crypt32.dll.CryptDecodeObjectEx
crypt32.dll.CertRDNValueToStrW
comctl32.dll.#388
comctl32.dll.#321
crypt32.dll.CertFreeCertificateContext
crypt32.dll.CertOpenStore
crypt32.dll.CertAddCertificateContextToStore
crypt32.dll.CertCloseStore
crypt32.dll.CertGetCertificateChain
userenv.dll.GetUserProfileDirectoryW
userenv.dll.RegisterGPNotification
user32.dll.LoadStringW
ncrypt.dll.BCryptOpenAlgorithmProvider
bcryptprimitives.dll.GetHashInterface
ncrypt.dll.BCryptGetProperty
ncrypt.dll.BCryptCreateHash
ncrypt.dll.BCryptHashData
ncrypt.dll.BCryptFinishHash
ncrypt.dll.BCryptDestroyHash
cryptnet.dll.CryptGetObjectUrl
cryptnet.dll.I_CryptNetGetConnectivity
sensapi.dll.IsNetworkAlive
rpcrt4.dll.RpcBindingFromStringBindingW
rpcrt4.dll.RpcBindingSetAuthInfoExW
rpcrt4.dll.NdrClientCall2
bcryptprimitives.dll.GetAsymmetricEncryptionInterface
ncrypt.dll.BCryptImportKeyPair
ncrypt.dll.BCryptVerifySignature
ncrypt.dll.BCryptDestroyKey
crypt32.dll.CertVerifyCertificateChainPolicy
crypt32.dll.CertFreeCertificateChain
crypt32.dll.CryptFindOIDInfo
crypt32.dll.CertGetPublicKeyLength
bcryptprimitives.dll.GetSignatureInterface
cryptsp.dll.CryptAcquireContextA
cryptsp.dll.CryptGetKeyParam
cryptsp.dll.CryptDestroyKey
ole32.dll.CoGetMalloc
ws2_32.dll.#22
ws2_32.dll.WSACloseEvent
linkinfo.dll.CreateLinkInfoW
user32.dll.IsCharAlphaW
user32.dll.CharPrevW
ntshrui.dll.GetNetResourceFromLocalPathW
shlwapi.dll.PathRemoveFileSpecW
linkinfo.dll.DestroyLinkInfo
comctl32.dll.#387
comctl32.dll.#327
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptGenRandom
cryptsp.dll.CryptReleaseContext
advapi32.dll.GetSecurityInfo
advapi32.dll.SetSecurityInfo
advapi32.dll.GetSecurityDescriptorControl
comctl32.dll.RegisterClassNameW
imm32.dll.ImmIsIME
user32.dll.CreateIconIndirect
user32.dll.DestroyIcon
user32.dll.MoveWindow
user32.dll.GetForegroundWindow
gdi32.dll.GetLayout
advapi32.dll.RegQueryValueExA
advapi32.dll.RegEnumKeyExW
gdi32.dll.GetTextFaceAliasW
gdi32.dll.GetTextExtentExPointWPri
user32.dll.GetSysColorBrush
user32.dll.FrameRect
user32.dll.InflateRect
user32.dll.DrawFrameControl
user32.dll.DrawFocusRect
uxtheme.dll.BufferedPaintInit
uxtheme.dll.BeginBufferedPaint
uxtheme.dll.EndBufferedPaint
user32.dll.OffsetRect
ole32.dll.CoRevokeInitializeSpy
kernel32.dll.FlsAlloc
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.FlsFree
shell32.dll.CommandLineToArgvW
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
advapi32.dll.EventWrite
advapi32.dll.EventRegister
advapi32.dll.EventUnregister
lpk.dll.LpkEditControl
user32.dll.GetSysColor
ntdll.dll.RtlCaptureStackBackTrace
shell32.dll.SHGetFolderPathW
sechost.dll.ConvertSidToStringSidW
chrome.dll.ChromeMain
kernel32.dll.IsWow64Process
user32.dll.OpenInputDesktop
user32.dll.GetProcessWindowStation
user32.dll.OpenWindowStationA
user32.dll.SetProcessWindowStation
user32.dll.CreateWindowExW
uxtheme.dll.EnableThemeDialogTexture
user32.dll.DestroyWindow
user32.dll.CloseWindowStation
icudt.dll.icudt46_dat
user32.dll.PostThreadMessageW
user32.dll.PeekMessageW
advapi32.dll.SystemFunction036
cryptbase.dll.SystemFunction001
cryptbase.dll.SystemFunction002
cryptbase.dll.SystemFunction003
cryptbase.dll.SystemFunction004
cryptbase.dll.SystemFunction005
cryptbase.dll.SystemFunction028
cryptbase.dll.SystemFunction029
cryptbase.dll.SystemFunction034
cryptbase.dll.SystemFunction036
cryptbase.dll.SystemFunction040
cryptbase.dll.SystemFunction041
pdf.dll.PPP_GetInterface
pdf.dll.PPP_InitializeModule
pdf.dll.PPP_ShutdownModule
ppgooglenaclpluginchrome.dll.PPP_GetInterface
ppgooglenaclpluginchrome.dll.PPP_InitializeModule
ppgooglenaclpluginchrome.dll.PPP_ShutdownModule
chrome.exe.SetExperimentList3
ntdll.dll.NtQueryObject
chrome.dll.RelaunchChromeBrowserWithNewCommandLineIfNeeded

WHOIS 信息

Name: None
Country: None
State: None
City: None
ZIP Code: None
Address: None

Orginization: Global Internet Telemetry Measurement Collective
Domain Name(s):
    SLVNET.RU
Creation Date:
    2019-03-16 15:33:54
Updated Date:
    None
Expiration Date:
    2021-03-16 15:33:54
Email(s):
    None

Registrar(s):
    101DOMAIN-RU
Name Server(s):
    ns1.csof.net.
    ns2.csof.net.
    ns3.csof.net.
    ns4.csof.net.
Referral URL(s):
    None
没有防病毒引擎扫描信息!

进程树


chrome.exe, PID: 2396, 上一级进程 PID: 2148
chrome.exe, PID: 2820, 上一级进程 PID: 2396

访问主机纪录 (可点击查询WPING实时安全评级)

无主机纪录.

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49163 203.208.41.66 www.gstatic.com 443
192.168.122.201 49202 23.223.195.201 acroipm.adobe.com 80

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 53125 192.168.122.1 53
192.168.122.201 56960 192.168.122.1 53

域名解析 (可点击查询WPING实时安全评级)

域名 安全评级 响应
www.gstatic.com A 203.208.41.66
acroipm.adobe.com A 23.223.195.201
CNAME acroipm.adobe.com.edgesuite.net
CNAME a1983.dscd.akamai.net
A 23.223.195.194

TCP

源地址 源端口 目标地址 目标端口
192.168.122.201 49163 203.208.41.66 www.gstatic.com 443
192.168.122.201 49202 23.223.195.201 acroipm.adobe.com 80

UDP

源地址 源端口 目标地址 目标端口
192.168.122.201 53125 192.168.122.1 53
192.168.122.201 56960 192.168.122.1 53

HTTP 请求

URI HTTP数据
URL专业沙箱检测 -> http://acroipm.adobe.com/11/rdr/CHS/win/nooem/none/message.zip
GET /11/rdr/CHS/win/nooem/none/message.zip HTTP/1.1
Accept: */*
If-Modified-Since: Mon, 08 Nov 2017 08:44:36 GMT
User-Agent: IPM
Host: acroipm.adobe.com
Connection: Keep-Alive
Cache-Control: no-cache

SMTP 流量

无SMTP流量.

IRC 流量

无IRC请求.

ICMP 流量

无ICMP流量.

CIF 报告

无 CIF 结果

网络警报

无警报

TLS

Timestamp Source IP Source Port Destination IP Destination Port Version Issuer Subject Fingerprint
2020-09-24 15:36:56.096755+0800 192.168.122.201 49163 203.208.41.66 443 TLS 1.1 C=US, O=Google Trust Services, CN=GTS CA 1O1 C=US, ST=California, L=Mountain View, O=Google LLC, CN=*.gstatic.com 34:bc:05:ba:72:88:80:08:49:73:7c:02:6c:21:8f:de:ca:cd:e8:11

Suricata HTTP

No Suricata HTTP

未发现网络提取文件
抱歉! 没有任何文件投放。
HTML 总结报告
(需15-60分钟同步)
下载

Processing ( 32.938 seconds )

  • 13.382 BehaviorAnalysis
  • 10.643 Suricata
  • 4.824 NetworkAnalysis
  • 1.991 VirusTotal
  • 1.768 Static
  • 0.328 AnalysisInfo
  • 0.002 Memory

Signatures ( 5.833 seconds )

  • 1.293 md_url_bl
  • 0.868 api_spamming
  • 0.806 stealth_timeout
  • 0.44 mimics_filetime
  • 0.265 stealth_file
  • 0.26 antivm_generic_disk
  • 0.246 virus
  • 0.22 bootkit
  • 0.212 antivm_generic_scsi
  • 0.14 antivm_generic_services
  • 0.135 hancitor_behavior
  • 0.129 anormaly_invoke_kills
  • 0.08 maldun_anomaly_massive_file_ops
  • 0.069 injection_createremotethread
  • 0.055 antiav_detectreg
  • 0.053 stack_pivot
  • 0.043 injection_runpe
  • 0.041 antiav_detectfile
  • 0.033 infostealer_ftp
  • 0.029 infostealer_bitcoin
  • 0.024 rat_luminosity
  • 0.023 antidbg_windows
  • 0.022 injection_explorer
  • 0.021 infostealer_im
  • 0.021 ransomware_extensions
  • 0.016 vawtrak_behavior
  • 0.016 antivm_vbox_files
  • 0.014 ransomware_files
  • 0.013 process_needed
  • 0.012 infostealer_mail
  • 0.011 antianalysis_detectreg
  • 0.01 md_domain_bl
  • 0.009 kovter_behavior
  • 0.008 ransomware_message
  • 0.008 ipc_namedpipe
  • 0.008 infostealer_browser_password
  • 0.007 hawkeye_behavior
  • 0.007 sets_autoconfig_url
  • 0.007 anomaly_persistence_autorun
  • 0.007 securityxploded_modules
  • 0.007 antidbg_devices
  • 0.007 geodo_banking_trojan
  • 0.006 antivm_vbox_window
  • 0.006 betabot_behavior
  • 0.006 h1n1_behavior
  • 0.006 rat_pcclient
  • 0.005 antiemu_wine_func
  • 0.005 network_tor
  • 0.005 kibex_behavior
  • 0.004 antivm_vbox_libs
  • 0.004 disables_spdy
  • 0.004 disables_wfp
  • 0.004 antisandbox_script_timer
  • 0.003 tinba_behavior
  • 0.003 rat_nanocore
  • 0.003 TrickBotTaskDelete
  • 0.003 kazybot_behavior
  • 0.003 antisandbox_sunbelt_libs
  • 0.003 deletes_self
  • 0.003 antivm_vmware_files
  • 0.003 antivm_xen_keys
  • 0.003 codelux_behavior
  • 0.002 removes_zoneid_ads
  • 0.002 antiav_avast_libs
  • 0.002 upatre_behavior
  • 0.002 infostealer_browser
  • 0.002 antisandbox_sboxie_libs
  • 0.002 antiav_bitdefender_libs
  • 0.002 ransomware_file_modifications
  • 0.002 shifu_behavior
  • 0.002 exec_crash
  • 0.002 cerber_behavior
  • 0.002 sniffer_winpcap
  • 0.002 antivm_generic_diskreg
  • 0.002 antivm_parallels_keys
  • 0.002 disables_browser_warn
  • 0.002 darkcomet_regkeys
  • 0.002 maldun_malicious_drop_executable_file_to_temp_folder
  • 0.002 network_torgateway
  • 0.001 network_anomaly
  • 0.001 dridex_behavior
  • 0.001 antivm_vmware_libs
  • 0.001 bypass_firewall
  • 0.001 antianalysis_detectfile
  • 0.001 antisandbox_sunbelt_files
  • 0.001 antivm_hyperv_keys
  • 0.001 antivm_vbox_keys
  • 0.001 antivm_vmware_keys
  • 0.001 antivm_vpc_files
  • 0.001 antivm_vpc_keys
  • 0.001 banker_cridex
  • 0.001 bot_drive
  • 0.001 bot_drive2
  • 0.001 browser_security
  • 0.001 malicous_targeted_flame
  • 0.001 ie_martian_children
  • 0.001 maldun_anomaly_invoke_vb_vba
  • 0.001 md_bad_drop
  • 0.001 network_tor_service
  • 0.001 recon_fingerprint
  • 0.001 stealth_web_history

Reporting ( 0.426 seconds )

  • 0.426 ReportHTMLSummary
Task ID 577376
Mongo ID 5f6c4d4a7e769a53d2c22136
Cuckoo release 1.4-Maldun