魔盾安全分析报告

分析类型 开始时间 结束时间 持续时间 分析引擎版本
URL 2020-09-24 15:36:37 2020-09-24 15:38:43 126 秒 1.4-Maldun
虚拟机机器名 标签 虚拟机管理 开机时间 关机时间
win7-sp1-x64-shaapp03-1 win7-sp1-x64-shaapp03-1 KVM 2020-09-24 15:36:37 2020-09-24 15:38:45
魔盾分数

2.39

可疑的

URL信息

URL http://retracker.slvnet.ru
VirusTotal VirusTotal无域名信息

特征

创建一个隐藏文件或系统文件
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8acb3.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFa8ad10.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings~RFa8ad3f.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFa8b0fc.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8b6d7.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old~RFaf6f38.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT~RFaf716a.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFb63493.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFb63740.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc3d10c.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49915.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc49ca5.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49fe1.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc51862.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFcbacd0.TMP
file: C:\Users\test\AppData\Local\Temp\etilqs_1VT8zt0JiEA9PG7
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd22df6.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd233c0.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd2d149.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd2d5f4.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd95f97.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFdfecbe.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFdff407.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFe01852.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe156d4.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe160f6.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe72516.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedb163.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFedbdbe.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedd606.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFee5108.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFf4e485.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfb6e47.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfb702b.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfc598a.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfc5cb5.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfcd5bf.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10368a6.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF109f25c.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF109f53a.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF10a94cb.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10a9806.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF117b3dd.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1188f44.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11893dc.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1190cd3.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11f9fed.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF126248a.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1262aae.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1264d98.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF12d55e3.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF133e28f.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF133e89a.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1340ac8.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF13b17ac.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF141a319.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF141a3e4.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1427893.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1427f39.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF142f6a7.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF14987ff.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1500d89.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1500f4e.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15036e5.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF150b54f.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1574117.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15dcc8f.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15dd3c3.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15ea2b5.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15ea4e7.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15f1e4b.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF165b0eb.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF16c384a.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF16c3ad9.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1743d03.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RF1743f16.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17446b4.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17aca66.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17ad5d1.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17af14e.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1894e7f.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18952ca.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF18955dc.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18958b9.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF189cf9b.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1905b9c.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF196e3e0.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF196e66f.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1970e3a.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19e1e95.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee3b9.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF19ee6ea.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee9a8.TMP
file: C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1a4a76e.TMP
file: C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1a54378.TMP
通过进程尝试长时间延迟分析任务
Process: chrome.exe tried to sleep 542 seconds, actually delayed analysis time by 0 seconds

运行截图

网络分析

域名解析

域名 响应
www.gstatic.com A 203.208.41.66
acroipm.adobe.com A 23.223.195.201
CNAME acroipm.adobe.com.edgesuite.net
CNAME a1983.dscd.akamai.net
A 23.223.195.194

TCP连接

IP地址 端口
203.208.41.66 443
23.223.195.201 80

UDP连接

IP地址 端口
192.168.122.1 53
192.168.122.1 53

HTTP请求

URL HTTP数据
http://acroipm.adobe.com/11/rdr/CHS/win/nooem/none/message.zip
GET /11/rdr/CHS/win/nooem/none/message.zip HTTP/1.1
Accept: */*
If-Modified-Since: Mon, 08 Nov 2017 08:44:36 GMT
User-Agent: IPM
Host: acroipm.adobe.com
Connection: Keep-Alive
Cache-Control: no-cache

投放文件

无信息

行为分析

互斥量(Mutexes) 无信息
执行的命令 无信息
创建的服务 无信息
启动的服务 无信息

进程

chrome.exe PID: 2396, 上一级进程 PID: 2148

chrome.exe PID: 2820, 上一级进程 PID: 2396

访问的文件
  • C:\Windows\System32\ntshrui.dll
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D11.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D12.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D13.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons
  • C:\Users\test\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\*
  • C:\Users\test\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\*
  • C:\Users\test\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\*
  • C:\Windows\System32\p2pcollab.dll
  • C:\Windows\System32\qagentrt.dll
  • C:\Windows\System32\dnsapi.dll
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DF49.tmp
  • C:\Users
  • C:\Users\test
  • C:\Users\test\AppData
  • C:\Users\test\AppData\Local
  • C:\Users\test\AppData\Local\Google
  • C:\Users\test\AppData\Local\Google\Chrome
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Top Sites-wal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DFC7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DFC8.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
  • C:\
  • C:\Program Files (x86)
  • C:\Program Files (x86)\Google
  • C:\Program Files (x86)\Google\Chrome
  • C:\Program Files (x86)\Google\Chrome\Application
  • C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  • C:\Program Files (x86)\Google\Chrome\Application\
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\98STYHM26P5CP21S0UQ4.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8acb3.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\E0C3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFa8ad10.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E102.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings~RFa8ad3f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E132.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFa8b0fc.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E20D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E20E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\4IVJNMCVSNR1CM4ROQSI.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8b6d7.TMP
  • C:\Windows\System32\spool\drivers\color\D65.camp
  • C:\Windows\System32\spool\drivers\color\Photo.gmmp
  • C:\Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Index
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old~RFaf6f38.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOCK
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000034
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\*
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000036.log
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000038.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000039.log
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000037
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000037.dbtmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT~RFaf716a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000026.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000032.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000035.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000023.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000011.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000014.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000029.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000005.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000008.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000020.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000017.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000040.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08-wal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index *
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2017-09
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2017-09-journal
  • C:\Users\desktop.ini
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\index
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\ECAA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFb63493.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\ECF9.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFb63740.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A9.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc3d10c.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DF49.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DFC7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DFC8.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\396.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\397.tmp
  • C:\Program Files (x86)\desktop.ini
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Z5TN5OVP9ZJYZMZ9ZO70.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49915.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\415.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc49ca5.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E20D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E20E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\4D1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\4D2.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1SH2DJTL4JK40UR9J1RA.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49fe1.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\396.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\397.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\57F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\580.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23ZB8Y75KOSAOW4E4OEP.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc51862.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\4D1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\4D2.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6F7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6F8.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\S9MK5BZ1LOPUMKAQZQX6.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFcbacd0.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\7A5.tmp
  • C:\Users\test\AppData\Local\Temp\etilqs_1VT8zt0JiEA9PG7
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd22df6.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\580.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DE.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DF.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\R9SL9QGL3CX1FJVI48JF.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd233c0.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\1EE0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd2d149.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6F7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6F8.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\1F6D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\1F6E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\P25DRIG9IV88T31DCNTO.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd2d5f4.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DE.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DF.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\203A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\203B.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\32S7MVLXX54OW348E9Z3.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd95f97.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\2099.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFdfecbe.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\1F6D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\1F6E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2117.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2128.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3SIN2SER52R7MG8M793C.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFdff407.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\28F6.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFe01852.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\203A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\203B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2A6D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2ABC.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZG6228L4ILDP9I12F37L.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe156d4.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2117.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2128.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2D4C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2D4D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BZJMV6YP7MUONTBEYKB8.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe160f6.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2A6D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2ABC.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\300C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\300D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\EU5UNRKHUFDX106HKYDI.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe72516.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\31C3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedb163.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2D4C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2D4D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\33A8.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\33A9.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3GV3WR1OT0TAG8Q08CIU.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFedbdbe.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3D89.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedd606.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\300C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\300D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3F7D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3FCC.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\O3TYHD92VOY61AHMDCGJ.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFee5108.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\33A8.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\33A9.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\41B1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\41B2.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RO88LEWJRT4D65D7T3U8.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFf4e485.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\42CB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfb6e47.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3F7D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3FCC.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\44A0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\44B1.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9NZT9DK2B1XV4LPRILFY.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfb702b.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\518E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfc598a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\41B1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\41B2.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53B1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53C1.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ARTIGHYC4KXCGMI2FVBE.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfc5cb5.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\44A0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\44B1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\574B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\574C.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7EB5QYWLREGYFPEC75V4.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfcd5bf.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53B1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53C1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5A0B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5A6A.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RLR4JATVQDM55BI4F9YI.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10368a6.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\5B93.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF109f25c.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\574B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\574C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5E04.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5E63.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RYUK73UVFASCJAFUSJTH.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF109f53a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\68FE.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF10a94cb.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5A0B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5A6A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6B11.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6B22.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DYSV6Q9LZATZCW75QQV6.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10a9806.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5E04.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5E63.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6E4E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6E4F.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1DLNMOYXPYWDMHUBVIG9.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF117b3dd.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\78CC.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1188f44.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6B11.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6B22.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\79F5.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\79F6.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\FH1M4UBSYEFR4FS7RLT0.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11893dc.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6E4E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6E4F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7BCB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7BEB.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Q86DF4URE8M26PWVA1PE.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1190cd3.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\79F5.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\79F6.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7DEF.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7DF0.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6E65WXOFEVJFIX2WE8HO.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11f9fed.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\7FC5.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF126248a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7BCB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7BEB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8207.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8208.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\AHSK2AI91WQJBUHXIDJ4.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1262aae.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\8C65.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1264d98.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7DEF.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7DF0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8D7F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DDE.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M6GC05CI2A4XR3QDOHZS.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF12d55e3.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\8E4C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF133e28f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8207.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8208.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8FC3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8FC4.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\YDEMW3MTYTBF0MDCW421.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF133e89a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\98DA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1340ac8.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8D7F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DDE.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9A70.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9A71.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZI4XP2IUKW4WYIE773ME.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF13b17ac.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\9B5C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF141a319.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8FC3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8FC4.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9C38.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9C39.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZAC98Q7SK9GD3WHUPTY7.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF141a3e4.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A03F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1427893.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9A70.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9A71.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A197.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A198.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IZ0FBSBB98GK9BU8DIQP.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1427f39.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9C38.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9C39.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A3DB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A3DC.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\69QC5PN59VAO7AB20PXK.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF142f6a7.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A197.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A198.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A6AA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A6AB.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\SKGI2XVTX7KKKSHD0IES.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF14987ff.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A777.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1500d89.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A3DB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A3DC.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A93C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A94D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\C26W8BAMKZNDS9KH93MM.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1500f4e.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\B790.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15036e5.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A6AA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A6AB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\B937.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\B986.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X70ID6VNQDG641UJ14XC.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF150b54f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A93C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A94D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\BC93.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\BC94.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9HD43JQS61ZSGIATIKFB.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1574117.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\BED6.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15dcc8f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\B937.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\B986.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C04D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C04E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\999FR0QVJVG827PG57PU.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15dd3c3.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\C7ED.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15ea2b5.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\BC93.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\BC94.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C974.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C975.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0YEXX8CEQG1I45SK6N3E.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15ea4e7.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C04D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C04E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CB98.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CB99.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DDGVS9SZ0O7B79NBJ1LM.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15f1e4b.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C974.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C975.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CE1A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CE69.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XFC2HG8FNVRETZYT04CW.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF165b0eb.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\CFE0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF16c384a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CB98.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CB99.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\D1F4.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\D1F5.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\U3XJFUEQZXSNRNE9QFCS.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF16c3ad9.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\738.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1743d03.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\95B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RF1743f16.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CE1A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CE69.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DA0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E0E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZSG1HL9E1D3MOKZJ9RQE.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17446b4.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\1292.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17aca66.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\D1F4.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\D1F5.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\16D7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\16D8.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IEXNGUNH1W32YWTT7HY4.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17ad5d1.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\2B81.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17af14e.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DA0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E0E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2E31.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2E32.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X1W0U6EHPVR927SBFQ0H.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1894e7f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\16D7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\16D8.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2EFD.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2F1E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DJOA2UCMK2O19W7YD2BZ.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18952ca.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3047.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF18955dc.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2E31.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2E32.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\320C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\320D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\JJSND4CWJGYK65WVD75P.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18958b9.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2EFD.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2F1E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3549.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\354A.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\CTRYAARUCKZUWK86BM26.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF189cf9b.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\320C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\320D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3848.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3849.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M1TMLGNVNIABNBPKTJTG.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1905b9c.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3905.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF196e3e0.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3549.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\354A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3A7C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3ACB.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\K1G6S64AKQRRWO2IC366.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF196e66f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\507E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1970e3a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3848.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3849.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\539A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53E9.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0XD8UQPR108DXX2E9WNQ.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19e1e95.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3A7C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3ACB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\567A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\568A.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2YI52EJ1VDWMD5BLOZSL.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee3b9.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\5727.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF19ee6ea.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\539A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53E9.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\58DD.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\58DE.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PEI7Z6S1QGTD52DTB6QG.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee9a8.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\567A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\568A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5DEE.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5DEF.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3Q75OTC4T4HUQLUZ0GYG.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1a4a76e.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\73FF.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1a54378.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\58DD.tmp
  • C:\Program Files (x86)\Google\Chrome\Application\chrome.dll
  • C:\Windows\Globalization\Sorting\sortdefault.nls
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\OLEACC.dll
  • C:\Windows\System32\oleacc.dll
  • C:\Program Files (x86)\Google\Chrome\Application\chrome.exe.Local\
  • C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2
  • C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\Secur32.dll
  • C:\Windows\System32\secur32.dll
  • C:\Program Files (x86)\Google\Chrome\Application\OLEACCRC.DLL
  • C:\Windows\System32\oleaccrc.dll
  • C:\Windows\WindowsShell.Manifest
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome_100_percent.pak
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\Locales
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\Locales\zh-CN.pak
  • C:\Windows\System32\tzres.dll
  • \Device\KsecDD
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
  • \??\pipe\chrome.2396.0.40193509
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
读取的文件
  • C:\Windows\System32\ntshrui.dll
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DF49.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DFC7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DFC8.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
  • C:\
  • C:\Program Files (x86)
  • C:\Program Files (x86)\Google
  • C:\Program Files (x86)\Google\Chrome
  • C:\Program Files (x86)\Google\Chrome\Application
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\98STYHM26P5CP21S0UQ4.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\E0C3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E102.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E132.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences
  • C:\Users
  • C:\Users\test
  • C:\Users\test\AppData
  • C:\Users\test\AppData\Local
  • C:\Users\test\AppData\Local\Google
  • C:\Users\test\AppData\Local\Google\Chrome
  • C:\Users\test\AppData\Local\Google\Chrome\User Data
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E20D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E20E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\4IVJNMCVSNR1CM4ROQSI.temp
  • C:\Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOCK
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000034
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000036.log
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000038.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000037.dbtmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000026.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000032.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000035.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000023.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000011.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000014.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000029.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000005.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000008.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000020.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000017.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000040.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
  • C:\Users\desktop.ini
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\index
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\ECAA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\ECF9.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A9.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\396.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\397.tmp
  • C:\Program Files (x86)\desktop.ini
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Z5TN5OVP9ZJYZMZ9ZO70.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\415.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\4D1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\4D2.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1SH2DJTL4JK40UR9J1RA.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\57F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\580.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23ZB8Y75KOSAOW4E4OEP.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6F7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6F8.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\S9MK5BZ1LOPUMKAQZQX6.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\7A5.tmp
  • C:\Users\test\AppData\Local\Temp\etilqs_1VT8zt0JiEA9PG7
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DE.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DF.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\R9SL9QGL3CX1FJVI48JF.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\1EE0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\1F6D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\1F6E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\P25DRIG9IV88T31DCNTO.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\203A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\203B.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\32S7MVLXX54OW348E9Z3.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\2099.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2117.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2128.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3SIN2SER52R7MG8M793C.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\28F6.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2A6D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2ABC.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZG6228L4ILDP9I12F37L.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2D4C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2D4D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BZJMV6YP7MUONTBEYKB8.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\300C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\300D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\EU5UNRKHUFDX106HKYDI.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\31C3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\33A8.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\33A9.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3GV3WR1OT0TAG8Q08CIU.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3D89.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3F7D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3FCC.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\O3TYHD92VOY61AHMDCGJ.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\41B1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\41B2.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RO88LEWJRT4D65D7T3U8.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\42CB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\44A0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\44B1.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9NZT9DK2B1XV4LPRILFY.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\518E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53B1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53C1.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ARTIGHYC4KXCGMI2FVBE.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\574B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\574C.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7EB5QYWLREGYFPEC75V4.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5A0B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5A6A.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RLR4JATVQDM55BI4F9YI.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\5B93.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5E04.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5E63.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RYUK73UVFASCJAFUSJTH.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\68FE.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6B11.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6B22.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DYSV6Q9LZATZCW75QQV6.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6E4E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\6E4F.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1DLNMOYXPYWDMHUBVIG9.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\78CC.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\79F5.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\79F6.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\FH1M4UBSYEFR4FS7RLT0.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7BCB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7BEB.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Q86DF4URE8M26PWVA1PE.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7DEF.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\7DF0.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6E65WXOFEVJFIX2WE8HO.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\7FC5.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8207.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8208.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\AHSK2AI91WQJBUHXIDJ4.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\8C65.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8D7F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8DDE.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M6GC05CI2A4XR3QDOHZS.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\8E4C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8FC3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\8FC4.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\YDEMW3MTYTBF0MDCW421.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\98DA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9A70.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9A71.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZI4XP2IUKW4WYIE773ME.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\9B5C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9C38.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\9C39.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZAC98Q7SK9GD3WHUPTY7.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A03F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A197.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A198.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IZ0FBSBB98GK9BU8DIQP.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A3DB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A3DC.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\69QC5PN59VAO7AB20PXK.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A6AA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A6AB.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\SKGI2XVTX7KKKSHD0IES.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A777.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A93C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\A94D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\C26W8BAMKZNDS9KH93MM.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\B790.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\B937.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\B986.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X70ID6VNQDG641UJ14XC.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\BC93.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\BC94.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9HD43JQS61ZSGIATIKFB.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\BED6.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C04D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C04E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\999FR0QVJVG827PG57PU.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\C7ED.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C974.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\C975.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0YEXX8CEQG1I45SK6N3E.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CB98.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CB99.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DDGVS9SZ0O7B79NBJ1LM.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CE1A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\CE69.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XFC2HG8FNVRETZYT04CW.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\CFE0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\D1F4.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\D1F5.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\U3XJFUEQZXSNRNE9QFCS.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\738.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\95B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DA0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\E0E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZSG1HL9E1D3MOKZJ9RQE.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\1292.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\16D7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\16D8.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IEXNGUNH1W32YWTT7HY4.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\2B81.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2E31.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2E32.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X1W0U6EHPVR927SBFQ0H.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2EFD.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\2F1E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DJOA2UCMK2O19W7YD2BZ.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3047.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\320C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\320D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\JJSND4CWJGYK65WVD75P.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3549.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\354A.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\CTRYAARUCKZUWK86BM26.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3848.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3849.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M1TMLGNVNIABNBPKTJTG.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3905.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3A7C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\3ACB.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\K1G6S64AKQRRWO2IC366.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\507E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\539A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\53E9.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0XD8UQPR108DXX2E9WNQ.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\567A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\568A.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2YI52EJ1VDWMD5BLOZSL.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\5727.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\58DD.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\58DE.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PEI7Z6S1QGTD52DTB6QG.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5DEE.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\5DEF.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3Q75OTC4T4HUQLUZ0GYG.temp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\73FF.tmp
  • C:\Windows\Globalization\Sorting\sortdefault.nls
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll
  • C:\Windows\System32\oleacc.dll
  • C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
  • C:\Windows\System32\secur32.dll
  • C:\Windows\System32\oleaccrc.dll
  • C:\Windows\WindowsShell.Manifest
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome_100_percent.pak
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\Locales\zh-CN.pak
  • C:\Windows\System32\tzres.dll
  • \Device\KsecDD
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
  • \??\pipe\chrome.2396.0.40193509
  • C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
修改的文件
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\DF49.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\98STYHM26P5CP21S0UQ4.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8acb3.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\E0C3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFa8ad10.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E102.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings~RFa8ad3f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E132.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFa8b0fc.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\4IVJNMCVSNR1CM4ROQSI.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8b6d7.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old~RFaf6f38.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOCK
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000038.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000039.log
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000037
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000037.dbtmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT~RFaf716a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000040.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Archived History-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\index
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\ECAA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFb63493.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\ECF9.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFb63740.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A9.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc3d10c.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Z5TN5OVP9ZJYZMZ9ZO70.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49915.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\415.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc49ca5.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1SH2DJTL4JK40UR9J1RA.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49fe1.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\23ZB8Y75KOSAOW4E4OEP.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc51862.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\S9MK5BZ1LOPUMKAQZQX6.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFcbacd0.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\7A5.tmp
  • C:\Users\test\AppData\Local\Temp\etilqs_1VT8zt0JiEA9PG7
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd22df6.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\R9SL9QGL3CX1FJVI48JF.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd233c0.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\1EE0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd2d149.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\P25DRIG9IV88T31DCNTO.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd2d5f4.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\32S7MVLXX54OW348E9Z3.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd95f97.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\2099.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFdfecbe.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3SIN2SER52R7MG8M793C.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFdff407.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\28F6.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFe01852.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZG6228L4ILDP9I12F37L.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe156d4.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BZJMV6YP7MUONTBEYKB8.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe160f6.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\EU5UNRKHUFDX106HKYDI.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe72516.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\31C3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedb163.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3GV3WR1OT0TAG8Q08CIU.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFedbdbe.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3D89.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedd606.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\O3TYHD92VOY61AHMDCGJ.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFee5108.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RO88LEWJRT4D65D7T3U8.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFf4e485.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\42CB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfb6e47.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9NZT9DK2B1XV4LPRILFY.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfb702b.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\518E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfc598a.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ARTIGHYC4KXCGMI2FVBE.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfc5cb5.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7EB5QYWLREGYFPEC75V4.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfcd5bf.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RLR4JATVQDM55BI4F9YI.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10368a6.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\5B93.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF109f25c.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RYUK73UVFASCJAFUSJTH.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF109f53a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\68FE.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF10a94cb.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DYSV6Q9LZATZCW75QQV6.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10a9806.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1DLNMOYXPYWDMHUBVIG9.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF117b3dd.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\78CC.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1188f44.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\FH1M4UBSYEFR4FS7RLT0.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11893dc.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\Q86DF4URE8M26PWVA1PE.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1190cd3.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6E65WXOFEVJFIX2WE8HO.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11f9fed.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\7FC5.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF126248a.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\AHSK2AI91WQJBUHXIDJ4.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1262aae.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\8C65.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1264d98.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M6GC05CI2A4XR3QDOHZS.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF12d55e3.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\8E4C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF133e28f.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\YDEMW3MTYTBF0MDCW421.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF133e89a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\98DA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1340ac8.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZI4XP2IUKW4WYIE773ME.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF13b17ac.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\9B5C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF141a319.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZAC98Q7SK9GD3WHUPTY7.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF141a3e4.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A03F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1427893.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IZ0FBSBB98GK9BU8DIQP.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1427f39.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\69QC5PN59VAO7AB20PXK.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF142f6a7.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\SKGI2XVTX7KKKSHD0IES.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF14987ff.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A777.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1500d89.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\C26W8BAMKZNDS9KH93MM.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1500f4e.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\B790.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15036e5.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X70ID6VNQDG641UJ14XC.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF150b54f.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\9HD43JQS61ZSGIATIKFB.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1574117.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\BED6.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15dcc8f.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\999FR0QVJVG827PG57PU.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15dd3c3.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\C7ED.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15ea2b5.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0YEXX8CEQG1I45SK6N3E.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15ea4e7.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DDGVS9SZ0O7B79NBJ1LM.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15f1e4b.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\XFC2HG8FNVRETZYT04CW.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF165b0eb.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\CFE0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF16c384a.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\U3XJFUEQZXSNRNE9QFCS.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF16c3ad9.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\738.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1743d03.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\95B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RF1743f16.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZSG1HL9E1D3MOKZJ9RQE.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17446b4.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\1292.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17aca66.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IEXNGUNH1W32YWTT7HY4.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17ad5d1.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\2B81.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17af14e.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X1W0U6EHPVR927SBFQ0H.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1894e7f.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DJOA2UCMK2O19W7YD2BZ.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18952ca.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3047.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF18955dc.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\JJSND4CWJGYK65WVD75P.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18958b9.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\CTRYAARUCKZUWK86BM26.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF189cf9b.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M1TMLGNVNIABNBPKTJTG.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1905b9c.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3905.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF196e3e0.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\K1G6S64AKQRRWO2IC366.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF196e66f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\507E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1970e3a.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0XD8UQPR108DXX2E9WNQ.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19e1e95.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2YI52EJ1VDWMD5BLOZSL.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee3b9.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\5727.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF19ee6ea.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PEI7Z6S1QGTD52DTB6QG.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee9a8.TMP
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3Q75OTC4T4HUQLUZ0GYG.temp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1a4a76e.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\73FF.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1a54378.TMP
  • \??\pipe\chrome.2396.0.40193509
删除的文件
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D11.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D12.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7D13.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8acb3.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\E0C3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFa8ad10.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E102.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings~RFa8ad3f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\E132.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFa8b0fc.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFa8b6d7.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old~RFaf6f38.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000037.dbtmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT~RFaf716a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000036.log
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000034
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000011.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000014.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000023.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000026.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000029.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000038.sst
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2017-09
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2017-09-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\ECAA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RFb63493.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\ECF9.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFb63740.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\History Index 2018-08-journal
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A9.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc3d10c.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DF49.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DFC7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DFC8.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49915.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\415.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFc49ca5.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E20D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E20E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc49fe1.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\396.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\397.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFc51862.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\4D1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\4D2.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFcbacd0.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\7A5.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd22df6.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\57F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\580.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd233c0.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\1EE0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFd2d149.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6F7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6F8.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd2d5f4.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DE.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DF.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFd95f97.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\2099.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFdfecbe.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\1F6D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\1F6E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFdff407.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\28F6.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFe01852.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\203A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\203B.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe156d4.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2117.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2128.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe160f6.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2A6D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2ABC.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFe72516.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\31C3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedb163.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2D4C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2D4D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFedbdbe.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3D89.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFedd606.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\300C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\300D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFee5108.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\33A8.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\33A9.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFf4e485.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\42CB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfb6e47.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3F7D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3FCC.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfb702b.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\518E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RFfc598a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\41B1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\41B2.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfc5cb5.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\44A0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\44B1.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RFfcd5bf.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53B1.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53C1.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10368a6.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\5B93.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF109f25c.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\574B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\574C.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF109f53a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\68FE.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF10a94cb.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5A0B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5A6A.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF10a9806.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5E04.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\5E63.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF117b3dd.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\78CC.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1188f44.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6B11.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6B22.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11893dc.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6E4E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\6E4F.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1190cd3.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\79F5.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\79F6.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF11f9fed.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\7FC5.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF126248a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7BCB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7BEB.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1262aae.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\8C65.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1264d98.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7DEF.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\7DF0.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF12d55e3.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\8E4C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF133e28f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8207.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8208.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF133e89a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\98DA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1340ac8.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8D7F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8DDE.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF13b17ac.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\9B5C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF141a319.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8FC3.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\8FC4.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF141a3e4.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A03F.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1427893.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9A70.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9A71.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1427f39.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9C38.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\9C39.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF142f6a7.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A197.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A198.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF14987ff.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\A777.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1500d89.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A3DB.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A3DC.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1500f4e.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\B790.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15036e5.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A6AA.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A6AB.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF150b54f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A93C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\A94D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1574117.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\BED6.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15dcc8f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\B937.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\B986.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15dd3c3.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\C7ED.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF15ea2b5.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\BC93.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\BC94.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15ea4e7.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C04D.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C04E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF15f1e4b.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C974.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\C975.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF165b0eb.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\CFE0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF16c384a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CB98.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CB99.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF16c3ad9.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\738.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1743d03.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\95B.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Preferences~RF1743f16.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CE1A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\CE69.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17446b4.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\1292.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17aca66.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\D1F4.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\D1F5.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF17ad5d1.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\2B81.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF17af14e.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\DA0.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\E0E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1894e7f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\16D7.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\16D8.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18952ca.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3047.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF18955dc.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2E31.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2E32.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF18958b9.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2EFD.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\2F1E.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF189cf9b.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\320C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\320D.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1905b9c.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\3905.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF196e3e0.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3549.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\354A.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF196e66f.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\507E.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1970e3a.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3848.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3849.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19e1e95.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3A7C.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\3ACB.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee3b9.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\5727.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF19ee6ea.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\539A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\53E9.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF19ee9a8.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\567A.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\568A.tmp
  • C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms~RF1a4a76e.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\73FF.tmp
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Local State~RF1a54378.TMP
  • C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\58DD.tmp
注册表键
  • HKEY_LOCAL_MACHINE\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
  • ap
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{40DD6E20-7C17-11CE-A804-00AA003CA9F6}
  • HKEY_CLASSES_ROOT\CLSID\{40DD6E20-7C17-11CE-A804-00AA003CA9F6}\InProcServer32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{40DD6E20-7C17-11CE-A804-00AA003CA9F6}\InProcServer32\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\WinSCPCopyHook
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\WinSCPCopyHook\(Default)
  • HKEY_CLASSES_ROOT\CLSID\{E15E1D68-0D1C-49F7-BEB8-812B1E00FA60}\InProcServer32
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\PROFILELIST
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20\ProfileImagePath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\ProfileImagePath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1001
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1001\ProfileImagePath
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Sharing
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe\DontUseDesktopChangeRouter
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.tmp
  • HKEY_CLASSES_ROOT\.tmp
  • HKEY_CLASSES_ROOT\.tmp\OpenWithProgids
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp\OpenWithProgids
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tmp
  • HKEY_CLASSES_ROOT\Unknown
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\CurVer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\ShellEx\PropertyHandler
  • HKEY_CLASSES_ROOT\SystemFileAssociations\.tmp
  • HKEY_CLASSES_ROOT\*
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\ShellEx\PropertyHandler
  • HKEY_CLASSES_ROOT\AllFilesystemObjects
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\PropertyHandler
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\crypt32
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root\ProtectedRoots
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\#16
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllOpenStoreProv\Ldap
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllOpenStoreProv
  • HKEY_USERS\S-1-5-21-2280033686-3172497658-3481507381-1000
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\PhysicalStores
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\Certificates
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\CRLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\CTLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\My\Keys
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\PhysicalStores
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\CRLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\CTLs
  • HKEY_CURRENT_USER\
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\Certificates
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CRLs
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA\PhysicalStores
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\CA
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\475BA6DA2AFD5AE3ADAE78A261CA0E3E548B9532
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\475BA6DA2AFD5AE3ADAE78A261CA0E3E548B9532\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CTLs
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\CA
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA\PhysicalStores
  • HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\CA
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\CA\CTLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Safer
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPublisher\Safer
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\Certificates
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\CRLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Disallowed\CTLs
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed\PhysicalStores
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Disallowed
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CTLs
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Disallowed
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed\PhysicalStores
  • HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Disallowed
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed\CTLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\PhysicalStores
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\039EEDB80BE7A03C6953893B20D2D9323A4C2AFD
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\039EEDB80BE7A03C6953893B20D2D9323A4C2AFD\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\03A5B14663EB12023091B84A6D6A68BC871DE66B
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\03A5B14663EB12023091B84A6D6A68BC871DE66B\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\07E032E020B72C3F192F0628A2593A19A70F069E
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\07E032E020B72C3F192F0628A2593A19A70F069E\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\36527D4FA26A68F9EB4596F1D99ABB2C0EA76DFA
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\36527D4FA26A68F9EB4596F1D99ABB2C0EA76DFA\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\58E8ABB0361533FB80F79B1B6D29D3FF8D5F00F0
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\58E8ABB0361533FB80F79B1B6D29D3FF8D5F00F0\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\9F744E9F2B4DBAEC0F312C50B6563B8E2D93C311
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\9F744E9F2B4DBAEC0F312C50B6563B8E2D93C311\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\AFE5D244A8D1194230FF479FE2F897BBCD7A8CB4
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\AFE5D244A8D1194230FF479FE2F897BBCD7A8CB4\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B31EB1B740E36C8402DADC37D44DF5D4674952F9
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B31EB1B740E36C8402DADC37D44DF5D4674952F9\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B94294BF91EA8FB64BE61097C7FB001359B676CB
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B94294BF91EA8FB64BE61097C7FB001359B676CB\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\D69B561148F01C77C54578C10926DF5B856976AD
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DF3C24F9BFD666761B268073FE06D1CC8D4F82A4
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DF3C24F9BFD666761B268073FE06D1CC8D4F82A4\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\CRLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\CTLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root\PhysicalStores
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\Root
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A7217F919843199C958C128449DD52D2723B0A8A
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A7217F919843199C958C128449DD52D2723B0A8A\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D85213E038F309D02A40917B59E142368AE6B1C0
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D85213E038F309D02A40917B59E142368AE6B1C0\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DBB84423C928ABE889D0E368FC3191D151DDB1AB
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DBB84423C928ABE889D0E368FC3191D151DDB1AB\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\AuthRoot
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3679CA35668772304D30A5FB873B0FA77BB70D54
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3679CA35668772304D30A5FB873B0FA77BB70D54\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\6252DC40F71143A22FDE9EF7348E064251B18118
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\6252DC40F71143A22FDE9EF7348E064251B18118\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\CTLs
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\Root
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root\PhysicalStores
  • HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\Root
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Root\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\SmartCardRoot
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CTLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople\PhysicalStores
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\TrustedPeople
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CTLs
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\TrustedPeople
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople\PhysicalStores
  • HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\TrustedPeople
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\TrustedPeople\CTLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\PhysicalStores
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\Certificates
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\CRLs
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\trust\CTLs
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\Certificates
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CRLs
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\trust\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust\PhysicalStores
  • HKEY_LOCAL_MACHINE\Software\Microsoft\SystemCertificates\trust
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\trust\CTLs
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\trust
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust\PhysicalStores
  • HKEY_LOCAL_MACHINE\Software\Microsoft\EnterpriseCertificates\trust
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CRLs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates\Trust\CTLs
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
  • HKEY_LOCAL_MACHINE\System\Setup
  • HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
  • HKEY_CURRENT_USER
  • HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4b\AAF68885
  • HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\LanguageList
  • HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\@%SystemRoot%\system32\p2pcollab.dll,-8042
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
  • HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\@%SystemRoot%\system32\dnsapi.dll,-103
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Time Zones\China Standard Time\Dynamic DST
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\UrlDllGetObjectUrl
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\UrlDllGetObjectUrl
  • HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\AuthRoot
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot\DisableRootAutoUpdate
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllVerifyEncodedSignature
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllVerifyEncodedSignature
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllImportPublicKeyInfoEx2
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CryptDllImportPublicKeyInfoEx2
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CertDllVerifyCertificateChainPolicy
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 1\CertDllVerifyCertificateChainPolicy
  • HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.NamespaceCLSID
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_JumpListItems
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\Start_JumpListItems
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a4-1bd9-11e5-9838-806e6f6e6963}\
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a4-1bd9-11e5-9838-806e6f6e6963}\Generation
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\KnownFolders
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsHistory
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsHistory
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_TrackDocs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\Start_TrackDocs
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\NoFileFolderConnection
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MaxUndoItems
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\MaxUndoItems
  • HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions
  • HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\\xe5\xae\x8b\xe4\xbd\x93
  • HKEY_CURRENT_USER\Control Panel\Desktop
  • HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\Win
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\camp
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\rip
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\Location Awareness
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane2
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane3
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane4
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane5
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane6
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane7
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane8
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane9
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane10
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane11
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane12
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane13
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane14
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane15
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane16
  • HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
  • HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\brand
  • HKEY_CLASSES_ROOT\.
  • HKEY_CLASSES_ROOT\.\OpenWithProgids
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\OpenWithProgids
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.\UserChoice
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\ShellEx\IconHandler
  • HKEY_CLASSES_ROOT\SystemFileAssociations\.
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\DocObject
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\BrowseInPlace
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\Clsid
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\IsShortcut
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\AlwaysShowExt
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\NeverShowExt
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PropertySystem\PropertyHandlers\.
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome
  • HKEY_CURRENT_USER\SOFTWARE\Policies\Google\Chrome
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\Recommended
  • HKEY_CURRENT_USER\SOFTWARE\Policies\Google\Chrome\Recommended
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions
  • HKEY_CURRENT_USER\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
  • HKEY_LOCAL_MACHINE\Software\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
  • HKEY_CURRENT_USER\Control Panel\International
  • HKEY_CURRENT_USER\Control Panel\International\LocaleName
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DebugHeapFlags
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\msasn1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLEAUT
  • HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
  • HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\State
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\Preference
  • HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\metricsid
  • HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\dr
  • HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{8A69D345-D564-463c-AFF1-A69D9E530F96}
  • UserDataDir
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Time Zones
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\GMT
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Central Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Central Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Afghanistan Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Afghanistan Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Alaskan Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Alaskan Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arab Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arab Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabian Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabian Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabic Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabic Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Argentina Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Argentina Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Armenian Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Atlantic Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Atlantic Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azerbaijan Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azerbaijan Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azores Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azores Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Bangladesh Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Bangladesh Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Canada Central Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Canada Central Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cape Verde Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cape Verde Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Caucasus Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Caucasus Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cen. Australia Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cen. Australia Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central America Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central America Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Asia Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Asia Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Brazilian Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Brazilian Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Europe Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Europe Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central European Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central European Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Pacific Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Pacific Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time (Mexico)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time (Mexico)\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\China Standard Time
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\China Standard Time\TZI
  • HKEY_LOCAL_MACHINE\
  • HKEY_CLASSES_ROOT\
  • HKEY_USERS\
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
读取的注册表键
  • ap
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{40DD6E20-7C17-11CE-A804-00AA003CA9F6}\InProcServer32\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\WinSCPCopyHook\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20\ProfileImagePath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\ProfileImagePath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1001\ProfileImagePath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe\DontUseDesktopChangeRouter
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagLevel
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DiagMatchAnyMask
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableMandatoryBasicConstraints
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableCANameConstraints
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\DisableUnsupportedCriticalExtensions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlCountInCert
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCountPerChain
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxUrlRetrievalByteCount
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalByteCount
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\MaxAIAUrlRetrievalCertCount
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\CryptnetPreFetchTriggerPeriodSeconds
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\EnableWeakSignatureFlags
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config\ChainCacheResyncFiletime
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\CA\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\109F1CAED645BB78B3EA2B94C0697C740733031C\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\475BA6DA2AFD5AE3ADAE78A261CA0E3E548B9532\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\D559A586669B08F46A30A133F8A9ED3D038E2EA8\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\FEE449EE0E3965A5246F000E87FDE2A065FD89D4\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs\A377D1B1C0538833035211F4083D00FECC414DAB\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\637162CC59A3A1E25956FA5FA8F60D2E1C52EAC6\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\7D7F4414CCEF168ADF6BF40753B5BECD78375931\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\039EEDB80BE7A03C6953893B20D2D9323A4C2AFD\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\03A5B14663EB12023091B84A6D6A68BC871DE66B\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\07E032E020B72C3F192F0628A2593A19A70F069E\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\36527D4FA26A68F9EB4596F1D99ABB2C0EA76DFA\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\58E8ABB0361533FB80F79B1B6D29D3FF8D5F00F0\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\9F744E9F2B4DBAEC0F312C50B6563B8E2D93C311\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\AFE5D244A8D1194230FF479FE2F897BBCD7A8CB4\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B31EB1B740E36C8402DADC37D44DF5D4674952F9\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\B94294BF91EA8FB64BE61097C7FB001359B676CB\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\Certificates\DF3C24F9BFD666761B268073FE06D1CC8D4F82A4\Blob
  • HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\ProtectedRoots\Certificates
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\18F7C1FCC3090203FD5BAA2F861A754976C8DD25\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8F43288AD272F3103B6FB1428485EA3014C0BCFE\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A43489159A520F0D93D032CCAF37E7FE20A8B419\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\A7217F919843199C958C128449DD52D2723B0A8A\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\BE36A4562FB2EE05DBB3D32323ADF445084ED656\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CDD4EEAE6000AC7F40C3802C171E30148030C072\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D85213E038F309D02A40917B59E142368AE6B1C0\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DBB84423C928ABE889D0E368FC3191D151DDB1AB\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3679CA35668772304D30A5FB873B0FA77BB70D54\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\6252DC40F71143A22FDE9EF7348E064251B18118\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\742C3192E607E424EB4549542BE1BBC53E6174E2\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D23209AD23D314232174E40D7F9D62139786633A\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E12DFB4B41D7D9C32B30514BAC1D81D8385E2D46\Blob
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
  • HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.44.3.4!7\Name
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
  • HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\@%SystemRoot%\system32\p2pcollab.dll,-8042
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.47.1.1!7\Name
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Cryptography\OID\EncodingType 0\CryptDllFindOIDInfo\1.3.6.1.4.1.311.64.1.1!7\Name
  • HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\@%SystemRoot%\system32\dnsapi.dll,-103
  • HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot\DisableRootAutoUpdate
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\System.NamespaceCLSID
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_JumpListItems
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\Start_JumpListItems
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{372941a4-1bd9-11e5-9838-806e6f6e6963}\Generation
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsHistory
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsHistory
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_TrackDocs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\Start_TrackDocs
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\NoFileFolderConnection
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MaxUndoItems
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Advanced\MaxUndoItems
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\\xe5\xae\x8b\xe4\xbd\x93
  • HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\Win
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\camp
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles\rip
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane1
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane2
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane3
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane4
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane5
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane6
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane7
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane8
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane9
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane10
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane11
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane12
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane13
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane14
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane15
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\SimSun\Plane16
  • HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\brand
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\DocObject
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\BrowseInPlace
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\IsShortcut
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\AlwaysShowExt
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\NeverShowExt
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\TurnOffSPIAnimations
  • HKEY_CURRENT_USER\Control Panel\International\LocaleName
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\crypt32\DebugHeapFlags
  • HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2280033686-3172497658-3481507381-1000\State
  • HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\metricsid
  • UserDataDir
  • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Central Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\AUS Eastern Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Afghanistan Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Alaskan Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arab Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabian Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Arabic Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Argentina Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Atlantic Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azerbaijan Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Azores Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Bangladesh Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Canada Central Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cape Verde Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Caucasus Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Cen. Australia Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central America Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Asia Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Brazilian Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Europe Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central European Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Pacific Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\Central Standard Time (Mexico)\TZI
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\China Standard Time\TZI
修改的注册表键
  • HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\4B\AAF68885\LanguageList
  • HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\dr
删除的注册表键 无信息
API解析
  • ws2_32.dll.freeaddrinfo
  • ws2_32.dll.getaddrinfo
  • ws2_32.dll.WSASocketW
  • ws2_32.dll.#21
  • ws2_32.dll.WSAIoctl
  • ws2_32.dll.WSAEventSelect
  • ws2_32.dll.#4
  • ole32.dll.CoCreateInstance
  • comctl32.dll.#328
  • comctl32.dll.#386
  • ole32.dll.CreateBindCtx
  • ole32.dll.CoTaskMemRealloc
  • shell32.dll.#66
  • advapi32.dll.GetNamedSecurityInfoW
  • sechost.dll.ConvertStringSidToSidW
  • netutils.dll.NetApiBufferFree
  • ws2_32.dll.WSAEnumNetworkEvents
  • ws2_32.dll.#6
  • advapi32.dll.RegOpenKeyExW
  • ole32.dll.CoTaskMemFree
  • ws2_32.dll.#16
  • ws2_32.dll.WSASend
  • ws2_32.dll.WSAResetEvent
  • ws2_32.dll.WSARecv
  • propsys.dll.PropVariantToUInt64
  • ws2_32.dll.WSAGetOverlappedResult
  • crypt32.dll.CertAddEncodedCertificateToStore
  • crypt32.dll.CertDuplicateCertificateContext
  • crypt32.dll.CryptHashCertificate
  • crypt32.dll.CryptDecodeObjectEx
  • crypt32.dll.CertRDNValueToStrW
  • comctl32.dll.#388
  • comctl32.dll.#321
  • crypt32.dll.CertFreeCertificateContext
  • crypt32.dll.CertOpenStore
  • crypt32.dll.CertAddCertificateContextToStore
  • crypt32.dll.CertCloseStore
  • crypt32.dll.CertGetCertificateChain
  • userenv.dll.GetUserProfileDirectoryW
  • userenv.dll.RegisterGPNotification
  • user32.dll.LoadStringW
  • ncrypt.dll.BCryptOpenAlgorithmProvider
  • bcryptprimitives.dll.GetHashInterface
  • ncrypt.dll.BCryptGetProperty
  • ncrypt.dll.BCryptCreateHash
  • ncrypt.dll.BCryptHashData
  • ncrypt.dll.BCryptFinishHash
  • ncrypt.dll.BCryptDestroyHash
  • cryptnet.dll.CryptGetObjectUrl
  • cryptnet.dll.I_CryptNetGetConnectivity
  • sensapi.dll.IsNetworkAlive
  • rpcrt4.dll.RpcBindingFromStringBindingW
  • rpcrt4.dll.RpcBindingSetAuthInfoExW
  • rpcrt4.dll.NdrClientCall2
  • bcryptprimitives.dll.GetAsymmetricEncryptionInterface
  • ncrypt.dll.BCryptImportKeyPair
  • ncrypt.dll.BCryptVerifySignature
  • ncrypt.dll.BCryptDestroyKey
  • crypt32.dll.CertVerifyCertificateChainPolicy
  • crypt32.dll.CertFreeCertificateChain
  • crypt32.dll.CryptFindOIDInfo
  • crypt32.dll.CertGetPublicKeyLength
  • bcryptprimitives.dll.GetSignatureInterface
  • cryptsp.dll.CryptAcquireContextA
  • cryptsp.dll.CryptGetKeyParam
  • cryptsp.dll.CryptDestroyKey
  • ole32.dll.CoGetMalloc
  • ws2_32.dll.#22
  • ws2_32.dll.WSACloseEvent
  • linkinfo.dll.CreateLinkInfoW
  • user32.dll.IsCharAlphaW
  • user32.dll.CharPrevW
  • ntshrui.dll.GetNetResourceFromLocalPathW
  • shlwapi.dll.PathRemoveFileSpecW
  • linkinfo.dll.DestroyLinkInfo
  • comctl32.dll.#387
  • comctl32.dll.#327
  • cryptsp.dll.CryptAcquireContextW
  • cryptsp.dll.CryptGenRandom
  • cryptsp.dll.CryptReleaseContext
  • advapi32.dll.GetSecurityInfo
  • advapi32.dll.SetSecurityInfo
  • advapi32.dll.GetSecurityDescriptorControl
  • comctl32.dll.RegisterClassNameW
  • imm32.dll.ImmIsIME
  • user32.dll.CreateIconIndirect
  • user32.dll.DestroyIcon
  • user32.dll.MoveWindow
  • user32.dll.GetForegroundWindow
  • gdi32.dll.GetLayout
  • advapi32.dll.RegQueryValueExA
  • advapi32.dll.RegEnumKeyExW
  • gdi32.dll.GetTextFaceAliasW
  • gdi32.dll.GetTextExtentExPointWPri
  • user32.dll.GetSysColorBrush
  • user32.dll.FrameRect
  • user32.dll.InflateRect
  • user32.dll.DrawFrameControl
  • user32.dll.DrawFocusRect
  • uxtheme.dll.BufferedPaintInit
  • uxtheme.dll.BeginBufferedPaint
  • uxtheme.dll.EndBufferedPaint
  • user32.dll.OffsetRect
  • ole32.dll.CoRevokeInitializeSpy
  • kernel32.dll.FlsAlloc
  • kernel32.dll.FlsGetValue
  • kernel32.dll.FlsSetValue
  • kernel32.dll.FlsFree
  • shell32.dll.CommandLineToArgvW
  • kernel32.dll.SortGetHandle
  • kernel32.dll.SortCloseHandle
  • advapi32.dll.EventWrite
  • advapi32.dll.EventRegister
  • advapi32.dll.EventUnregister
  • lpk.dll.LpkEditControl
  • user32.dll.GetSysColor
  • ntdll.dll.RtlCaptureStackBackTrace
  • shell32.dll.SHGetFolderPathW
  • sechost.dll.ConvertSidToStringSidW
  • chrome.dll.ChromeMain
  • kernel32.dll.IsWow64Process
  • user32.dll.OpenInputDesktop
  • user32.dll.GetProcessWindowStation
  • user32.dll.OpenWindowStationA
  • user32.dll.SetProcessWindowStation
  • user32.dll.CreateWindowExW
  • uxtheme.dll.EnableThemeDialogTexture
  • user32.dll.DestroyWindow
  • user32.dll.CloseWindowStation
  • icudt.dll.icudt46_dat
  • user32.dll.PostThreadMessageW
  • user32.dll.PeekMessageW
  • advapi32.dll.SystemFunction036
  • cryptbase.dll.SystemFunction001
  • cryptbase.dll.SystemFunction002
  • cryptbase.dll.SystemFunction003
  • cryptbase.dll.SystemFunction004
  • cryptbase.dll.SystemFunction005
  • cryptbase.dll.SystemFunction028
  • cryptbase.dll.SystemFunction029
  • cryptbase.dll.SystemFunction034
  • cryptbase.dll.SystemFunction036
  • cryptbase.dll.SystemFunction040
  • cryptbase.dll.SystemFunction041
  • pdf.dll.PPP_GetInterface
  • pdf.dll.PPP_InitializeModule
  • pdf.dll.PPP_ShutdownModule
  • ppgooglenaclpluginchrome.dll.PPP_GetInterface
  • ppgooglenaclpluginchrome.dll.PPP_InitializeModule
  • ppgooglenaclpluginchrome.dll.PPP_ShutdownModule
  • chrome.exe.SetExperimentList3
  • ntdll.dll.NtQueryObject
  • chrome.dll.RelaunchChromeBrowserWithNewCommandLineIfNeeded