File: 0a6c0655e35fbbb7ed234d2a10043f841c9768ee2afabd27558a41e3294e87d2
Metadata
| passport photo.xls | |
| Java Jar file data (zip) | 119929 bytes |
| 2016-01-19 23:28:12 | |
| 94c1146bffacc4a74eb6860e4c4521c7 | |
| 01ae0091e4503590db0fab5efeab4eb27c500d89 | |
| 0a6c0655e35fbbb7ed234d2a10043f841c9768ee2afabd27558a41e3294e87d2 | |
| 8803343ad64b281e94f4ef0a42846815000732d82a7ba729a5528c1c36b1f1c33dbac26a178eabbe2a8fd01d01bdb7cc6fdbe815457233961a0150d613c556da | |
| 3072:qFUQfuWuIHN+pmHF5OcHJlQXkgtfReUDq4Fn:qFUQfFtn/FHjQlpeUDLFn | |
| N/A | |
| N/A | |
APTNotes
Cyber threat intelligence reports associated with 0a6c0655e35fbbb7ed234d2a10043f841c9768ee2afabd27558a41e3294e87d2.
Cyber threat intelligence reports associated with 0a6c0655e35fbbb7ed234d2a10043f841c9768ee2afabd27558a41e3294e87d2.
Domains
Domains the malware sample communicates with.
Domains the malware sample communicates with.
Hosts
Hosts the malware sample communicates with.
Hosts the malware sample communicates with.
HTTP Requests
HTTP requests the malware sample makes.
HTTP requests the malware sample makes.
AV Detections
AV detection names associated with the malware sample.
AV detection names associated with the malware sample.
Mutants
Mutants created by the malware sample.
Mutants created by the malware sample.
Registry keys
Registry keys created by the malware sample.
Registry keys created by the malware sample.
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Resiliency |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Resiliency\StartupItems |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Office |
| HKEY_CURRENT_USER\Software\Microsoft\Office\Common |
| HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Common\ProductVersion |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Debug |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office Test\Special\Perf |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Common\LanguageResources |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\LanguageResources\EnabledLanguages |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\LanguageResources |
| HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale |
| HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts |
| HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups |
| HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\MUILanguages |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Common\LanguageResources\EnabledLanguages |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Common\LanguageResources\InstalledUIs |
| HKEY_CURRENT_USER\Software\Microsoft\Shared |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Common\Security |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\BypassMigration |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\OPWBypassMigration |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Migration\Office |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Migration\Excel |
| HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Office\12.0\User Settings\ |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\ |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\ |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\AccessDE_Core |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Access_Core |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Ace_OdbcCurrentUser |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Excel_Core |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Excel_Intl |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Graph_Core |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Mso_Core |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Mso_CoreReg |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Mso_Intl |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\outexum |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Outlook_AutoDiscover |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Outlook_Core |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Outlook_Intl |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\PowerPoint_Core |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\PowerPoint_Intl |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Sps_OutlookAddin |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Word_Core |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\Word_Intl |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\XDocs_XMLEditVerbHandler |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\\{90120000-0030-0000-0000-0000000FF1CE} |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Access_Core |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Ace_OdbcCurrentUser |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Excel_Core |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Excel_Intl |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Graph_Core |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Mso_Core |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Mso_CoreReg |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Mso_Intl |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\outexum |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Outlook_AutoDiscover |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Outlook_Core |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Outlook_Intl |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\PowerPoint_Core |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\PowerPoint_Intl |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Sps_OutlookAddin |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Word_Core |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\Word_Intl |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\XDocs_XMLEditVerbHandler |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\User Settings\\AccessDE_Core |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Options |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\IMM |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\SystemShared |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-1547161642-507921405-839522115-1004\Components\D94C8360B8BB1DC41B1950E2F8237563 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D94C8360B8BB1DC41B1950E2F8237563 |
| HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1547161642-507921405-839522115-1004\Installer\Products\00002109030000000000000000F01FEC |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Installer\Products\00002109030000000000000000F01FEC |
| HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\00002109030000000000000000F01FEC |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00002109030000000000000000F01FEC\InstallProperties |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Registration |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Registration\{90120000-0030-0000-0000-0000000FF1CE} |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1547161642-507921405-839522115-1004\Installer\Features\00002109030000000000000000F01FEC |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Installer\Features\00002109030000000000000000F01FEC |
| HKEY_LOCAL_MACHINE\Software\Classes\Installer\Features\00002109030000000000000000F01FEC |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00002109030000000000000000F01FEC\Features |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\72550EAA4F7970143BF094E2F6C9164E |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9B905EB838DBFEE4991CF8E66F518BBF |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD4E638E8714C454FA1AD399C0E81909 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CAB7071E27686994093945B9EE85F69D |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2FAFA61ADBF18444690EDB85CAA39EB7 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\337E30A68012B5341B7A8ADE48F4064A |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\379E92CC2CB71D119A12000A9CE1A22A |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\748B2526ADAB4D3429253E7976AF041A |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5120EEDE039486F42830D8D2552797F6 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCABF232126726445BC57F4CDE05C5EB |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\47155108894E68A409FDC1FC6E8DA2CB |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9B271454ED4348B47B365F93ADEAC015 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D6BD49C8A516ED41BB0C0D31B0F52BC |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4006F64980E4BACB0EF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1FA18F7974E099CD0AF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1FA18F7974E099CD0CF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1FA18F7974E099CD0BF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4006F64980E4BACB0DF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DA42BC89BF25F5BD0AF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DA42BC89BF25F5BD0CF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DA42BC89BF25F5BD0BF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\82DE7549CF3F8CCB0DF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2A31EAB9FA7E3C6D0AF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2A31EAB9FA7E3C6D0CF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2A31EAB9FA7E3C6D0BF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B92D5049E11C93DB0DF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6EC3DF47D8A2C9E00AF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6EC3DF47D8A2C9E00CF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6EC3DF47D8A2C9E00BF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\77AE531D63D456630DF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D94C8360B8BB1DC41B1950E0F8237563 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2562336682C91B850AF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2562336682C91B850CF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F949E36CB3004C50AF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F949E36CB3004C50CF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D6C7B862FD11C450AF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D6C7B862FD11C450CF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F3D0372D14C348850AF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F3D0372D14C348850CF18C3B9B1A1EE8 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\11B564CAA807C694ABE73044DC90516B |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3F997A2790938844ACDF81020B32415 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9C1D6229422D71045BFB2F8BCE017AA4 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C9A6F846E2818A47A408CAF13381C71 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C733A8B34D26AF4458B43E09EFC2C77F |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2227A34C816D4F94EB598446F9BD8B17 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7AA6F3DBF3CE139469FE63D56E7AF446 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7CD01816C53D32438CF043106011676 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00002109030000000000000000F01FEC\Usage |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D94C8360B8BB2DC41B1950E0F8237563 |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\General |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\TrustCenter |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Options\BinaryOptions |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Error Checking |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\IME |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP |
| HKEY_CURRENT_USER\Software\Microsoft\CTF |
| HKEY_CURRENT_USER\Software\Microsoft\CTF\TIP |
| HKEY_CURRENT_USER\Software\Microsoft\CTF\TIP\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\LanguageProfile |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\LanguageProfile |
| HKEY_CURRENT_USER\Software\Microsoft\CTF\TIP\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\LanguageProfile |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\LanguageProfile |
| HKEY_CURRENT_USER\Software\Microsoft\CTF\TIP\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\LanguageProfile |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\LanguageProfile |
| HKEY_CURRENT_USER\Software\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\LanguageProfile |
| HKEY_CURRENT_USER\Software\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\LanguageProfile\0x00000409 |
| HKEY_CURRENT_USER\Software\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\LanguageProfile\0x00000409\{09EA4E4B-46CE-4469-B450-0DE76A435BBB} |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\LanguageProfile |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\LanguageProfile\0x0000ffff |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\LanguageProfile\0x0000ffff\{09EA4E4B-46CE-4469-B450-0DE76A435BBB} |
| HKEY_CURRENT_USER\Software\Microsoft\CTF\TIP\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\LanguageProfile |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\LanguageProfile |
| HKEY_CURRENT_USER\Software\Microsoft\CTF\TIP\{FA445657-9379-11D6-B41A-00065B83EE53}\LanguageProfile |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{FA445657-9379-11D6-B41A-00065B83EE53}\LanguageProfile |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{FA445657-9379-11D6-B41A-00065B83EE53}\LanguageProfile\0x0000FFFF |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{FA445657-9379-11D6-B41A-00065B83EE53}\LanguageProfile\0x0000FFFF\{38445657-9381-11D6-B41A-00065B83EE53} |
| HKEY_CLASSES_ROOT\CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82} |
| HKEY_LOCAL_MACHINE\Software\Microsoft\COM3 |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004_Classes |
| HKEY_LOCAL_MACHINE\Software\Classes |
| \REGISTRY\USER |
| HKEY_LOCAL_MACHINE\Software\Classes\CLSID |
| CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82} |
| CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\TreatAs |
| \CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82} |
| \CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\InprocServer32 |
| \CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\InprocServerX86 |
| \CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\LocalServer32 |
| \CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\InprocHandler32 |
| \CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\InprocHandlerX86 |
| \CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\LocalServer |
| HKEY_CLASSES_ROOT\CLSID\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\TreatAs |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\LanguageProfile |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\LanguageProfile\0x00000409 |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF\TIP\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\LanguageProfile\0x00000409\{09EA4E4B-46CE-4469-B450-0DE76A435BBB} |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF\TIP\{FA445657-9379-11D6-B41A-00065B83EE53}\LanguageProfile |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{FA445657-9379-11D6-B41A-00065B83EE53}\LanguageProfile |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{FA445657-9379-11D6-B41A-00065B83EE53}\LanguageProfile\0x0000FFFF |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{FA445657-9379-11D6-B41A-00065B83EE53}\LanguageProfile\0x0000FFFF\{38445657-9381-11D6-B41A-00065B83EE53} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\SystemShared |
| CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53} |
| CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\TreatAs |
| \CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53} |
| \CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\InprocServer32 |
| \CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\InprocServerX86 |
| \CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\LocalServer32 |
| \CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\InprocHandler32 |
| \CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\InprocHandlerX86 |
| \CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\LocalServer |
| HKEY_CLASSES_ROOT\CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53} |
| HKEY_CLASSES_ROOT\CLSID\{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\TreatAs |
| CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7} |
| CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7}\TreatAs |
| \CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7} |
| \CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7}\InprocServer32 |
| \CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7}\InprocServerX86 |
| \CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7}\LocalServer32 |
| \CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7}\InprocHandler32 |
| \CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7}\InprocHandlerX86 |
| \CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7}\LocalServer |
| HKEY_CLASSES_ROOT\CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7} |
| HKEY_CLASSES_ROOT\CLSID\{A4B544A1-438D-4B41-9325-869523E2D6C7}\TreatAs |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\ |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\Category\Category\{B95F181B-EA4C-4AF1-8056-7C321ABBB091} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{B95F181B-EA4C-4AF1-8056-7C321ABBB091} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{B95F181B-EA4C-4AF1-8056-7C321ABBB091} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{B95F181B-EA4C-4AF1-8056-7C321ABBB091} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{B95F181B-EA4C-4AF1-8056-7C321ABBB091} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{FA445657-9379-11D6-B41A-00065B83EE53}\Category\Category\{B95F181B-EA4C-4AF1-8056-7C321ABBB091} |
| HKEY_CURRENT_USER\Keyboard Layout\Toggle |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF\LangBarAddIn\ |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\LangBarAddIn\ |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{FA445657-9379-11D6-B41A-00065B83EE53}\Category\Category\{534C48C1-0607-4098-A521-4FC899C73E90} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\Category\Item\{5130A009-5540-4FCF-97EB-AAD33FC0EE09} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{5130A009-5540-4FCF-97EB-AAD33FC0EE09} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\Category\Item\{7AE86BB7-262C-431E-9111-C974B6B7CAC3} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{7AE86BB7-262C-431E-9111-C974B6B7CAC3} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\Category\Item\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04} |
| HKEY_CURRENT_USER\Control Panel\International\Calendars\TwoDigitYearMax |
| HKEY_CURRENT_USER\Software\Microsoft\Office\Common\Security |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\GELPrefs |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14355655CBD54D944A7518EDDF19EA2D |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Research\Translation |
| HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework |
| HKEY_CURRENT_USER\Software\Microsoft\.NETFramework\Policy\Upgrades |
| HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\Upgrades |
| HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F5078F18-C551-11D3-89B9-0000F81FE221}\5.0\0\win32 |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\ |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Common\General |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBarItemsList |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Excel\DisabledCmdBarItemsCheckBoxes |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Excel\DisabledShortcutKeysList |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Excel\DisabledShortcutKeysCheckBoxes |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Toolbars |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Toolbars\Settings |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\ShipAsserts |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\StatusBar |
| HKEY_CURRENT_USER\Software\Microsoft\Office\8.0\Outlook |
| HKEY_CLASSES_ROOT\Outlook.Application |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Word\Options |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1547161642-507921405-839522115-1004\Installer\Components\621EAA421190F8740A91708B57BE9969 |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Installer\Components\621EAA421190F8740A91708B57BE9969 |
| HKEY_LOCAL_MACHINE\Software\Classes\Installer\Components\621EAA421190F8740A91708B57BE9969 |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MOTIF\FlexUIAutomation |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Toolbars\Excel |
| HKEY_LOCAL_MACHINE\Hardware\Description\System\FloatingPointProcessor |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\WK? Settings |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Line Print |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Delete Commands |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Init Menus |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Init Commands |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Excel\Addins |
| HKEY_CURRENT_USER\Software\Microsoft\Office\Excel\Addins |
| HKEY_CLASSES_ROOT\Excel.Chart.8\protocol\StdFileEditing\server |
| HKEY_CLASSES_ROOT\CLSID\{00024500-0000-0000-C000-000000000046}\LocalServer32 |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\Common |
| CLSID\{00020820-0000-0000-C000-000000000046} |
| CLSID\{00020820-0000-0000-C000-000000000046}\TreatAs |
| \CLSID\{00020820-0000-0000-C000-000000000046} |
| \CLSID\{00020820-0000-0000-C000-000000000046}\InprocServer32 |
| \CLSID\{00020820-0000-0000-C000-000000000046}\InprocServerX86 |
| \CLSID\{00020820-0000-0000-C000-000000000046}\LocalServer32 |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy\Appmgmt |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\Excel_Core |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\KindMap |
| HKEY_CLASSES_ROOT\.pip |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\downlevel_manifest |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\downlevel_payload |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\downlevel_manifest |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\downlevel_payload |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\downlevel_manifest |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\downlevel_payload |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\downlevel_manifest |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\downlevel_payload |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.8.0.Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_b2841548\downlevel_manifest |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_51e427d4\downlevel_manifest |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.8.0.Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_22ca9ad9\downlevel_manifest |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.8.0.Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_63bb0537\downlevel_manifest |
| HKEY_CLASSES_ROOT\CLSID\{000C0126-0000-0000-C000-000000000046} |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\User Settings\Mso_Core |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Common |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Common\Components\Watson_AltrIntl |
| \CLSID\{00020820-0000-0000-C000-000000000046}\InprocHandler32 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Ole |
| HKEY_CLASSES_ROOT\AppID\EXCEL.EXE |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE |
| HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName |
| ActiveComputerName |
| CLSID\{00020821-0000-0000-C000-000000000046} |
| CLSID\{00020821-0000-0000-C000-000000000046}\TreatAs |
| \CLSID\{00020821-0000-0000-C000-000000000046} |
| \CLSID\{00020821-0000-0000-C000-000000000046}\InprocServer32 |
| \CLSID\{00020821-0000-0000-C000-000000000046}\InprocServerX86 |
| \CLSID\{00020821-0000-0000-C000-000000000046}\LocalServer32 |
| \CLSID\{00020821-0000-0000-C000-000000000046}\InprocHandler32 |
| CLSID\{00020830-0000-0000-C000-000000000046} |
| CLSID\{00020830-0000-0000-C000-000000000046}\TreatAs |
| \CLSID\{00020830-0000-0000-C000-000000000046} |
| \CLSID\{00020830-0000-0000-C000-000000000046}\InprocServer32 |
| \CLSID\{00020830-0000-0000-C000-000000000046}\InprocServerX86 |
| \CLSID\{00020830-0000-0000-C000-000000000046}\LocalServer32 |
| \CLSID\{00020830-0000-0000-C000-000000000046}\InprocHandler32 |
| CLSID\{00020832-0000-0000-C000-000000000046} |
| CLSID\{00020832-0000-0000-C000-000000000046}\TreatAs |
| \CLSID\{00020832-0000-0000-C000-000000000046} |
| \CLSID\{00020832-0000-0000-C000-000000000046}\InprocServer32 |
| \CLSID\{00020832-0000-0000-C000-000000000046}\InprocServerX86 |
| \CLSID\{00020832-0000-0000-C000-000000000046}\LocalServer32 |
| \CLSID\{00020832-0000-0000-C000-000000000046}\InprocHandler32 |
| CLSID\{00020833-0000-0000-C000-000000000046} |
| CLSID\{00020833-0000-0000-C000-000000000046}\TreatAs |
| \CLSID\{00020833-0000-0000-C000-000000000046} |
| \CLSID\{00020833-0000-0000-C000-000000000046}\InprocServer32 |
| \CLSID\{00020833-0000-0000-C000-000000000046}\InprocServerX86 |
| \CLSID\{00020833-0000-0000-C000-000000000046}\LocalServer32 |
| \CLSID\{00020833-0000-0000-C000-000000000046}\InprocHandler32 |
| CLSID\{00020827-0000-0000-C000-000000000046} |
| CLSID\{00020827-0000-0000-C000-000000000046}\TreatAs |
| \CLSID\{00020827-0000-0000-C000-000000000046} |
| \CLSID\{00020827-0000-0000-C000-000000000046}\InprocServer32 |
| \CLSID\{00020827-0000-0000-C000-000000000046}\InprocServerX86 |
| \CLSID\{00020827-0000-0000-C000-000000000046}\LocalServer32 |
| \CLSID\{00020827-0000-0000-C000-000000000046}\InprocHandler32 |
| HKEY_CURRENT_USER\Software\Microsoft\Office\Common\UserInfo |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Resiliency\DisabledItems |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Open Find\Places |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Open Find |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\EXCEL.EXE |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{20D04FE0-3AEA-1069-A2D8-08002B30309D} |
| HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32 |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{475c7950-e3d2-11e0-8d7a-806d6172696f}\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{475c7952-e3d2-11e0-8d7a-806d6172696f}\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{475c7952-e3d2-11e0-8d7a-806d6172696f}\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{475c7950-e3d2-11e0-8d7a-806d6172696f}\ |
| HKEY_CLASSES_ROOT\Directory |
| HKEY_CLASSES_ROOT\Directory\CurVer |
| HKEY_CLASSES_ROOT\Directory\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| HKEY_CLASSES_ROOT\Directory\\ShellEx\IconHandler |
| HKEY_CLASSES_ROOT\Directory\\Clsid |
| HKEY_CLASSES_ROOT\Folder |
| HKEY_CLASSES_ROOT\Folder\Clsid |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\DrawAlerts\FTP Sites |
| HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions |
| HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9} |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Security |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Resiliency\DocumentRecovery |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Resiliency\DocumentRecovery\1E8CB71 |
| HKEY_CURRENT_USER\Software\Microsoft\Office\Common\Offline |
| HKEY_CURRENT_USER\Software\Microsoft\Office\Common\Offline\Files |
| HKEY_CLASSES_ROOT\Component Categories\{56FFCC30-D398-11D0-B2AE-00A0C908FA49} |
| HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Converters |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Security\FileOpenBlock |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xls |
| HKEY_CLASSES_ROOT\.xls |
| HKEY_CLASSES_ROOT\Excel.Sheet.8 |
| HKEY_CLASSES_ROOT\Excel.Sheet.8\ |
| HKEY_CLASSES_ROOT\Excel.Sheet.8\\ShellEx\IconHandler |
| HKEY_CLASSES_ROOT\SystemFileAssociations\.xls |
| HKEY_CLASSES_ROOT\SystemFileAssociations\.xls\ShellEx\IconHandler |
| HKEY_CLASSES_ROOT\Excel.Sheet.8\\Clsid |
| HKEY_CLASSES_ROOT\CLSID\{00020820-0000-0000-C000-000000000046}\Implemented Categories\{00021490-0000-0000-C000-000000000046} |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Security |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1547161642-507921405-839522115-1004\Installer\Components\8F622368F04F7B849A7B2021EE668F21 |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Installer\Components\8F622368F04F7B849A7B2021EE668F21 |
| HKEY_LOCAL_MACHINE\Software\Classes\Installer\Components\8F622368F04F7B849A7B2021EE668F21 |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Common\Alerts |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1547161642-507921405-839522115-1004\Installer\Components\2C418690CEFD69F479F69ED9E8B66816 |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Installer\Components\2C418690CEFD69F479F69ED9E8B66816 |
| HKEY_LOCAL_MACHINE\Software\Classes\Installer\Components\2C418690CEFD69F479F69ED9E8B66816 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1547161642-507921405-839522115-1004\Installer\Features\00002109E60090400000000000F01FEC |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Installer\Features\00002109E60090400000000000F01FEC |
| HKEY_LOCAL_MACHINE\Software\Classes\Installer\Features\00002109E60090400000000000F01FEC |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00002109E60090400000000000F01FEC\Features |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\869C0C701D584D115AF3000972A8B18B |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0F65D0D37A27C3840A1500571C8A02AD |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C7F79FDAFA4D737438D03B465465C6CD |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE8A6E800CDAB6E4ABB9DA4B7903E29F |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1542AEC87C5AB624197ACEDC5D5E546F |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\80F8A534CE34C37479A36408DF607B90 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\91A187C8354F85E409AC201B893A4BA0 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D7AD2E79A44585A4994A8C99F5B1A62C |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\13BF891EA7D724040A511B4AA04C9FF0 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E91DFF0B8F46B14EA1AE378F670B819 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C7F5FD8FE48395B48BCA14CB88C7442F |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCA383400EA17D241A7DC837A8F056D2 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4F01BFDB207D9748A1A71E4ADBB2B90 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACF660D8C07A6A04794E2ADD15B58C77 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EA5F97CBCB5F9944DB53275D6BE780AF |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\77ED11277E13FCF4BB8C47FDC65086F1 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\829A131E5CE21D944A67B52DE1268EA2 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CBD521FB6DFE3D115AF2000A9CAC24AB |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FBD521FB6DFE3D115AF2000A9CAC24AB |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2CD521FB6DFE3D115AF2000A9CAC24AB |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B055A4C037A53D115A02000A9C32B11A |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5CD521FB6DFE3D115AF2000A9CAC24AB |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CD521FB6DFE3D115AF2000A9CAC24AB |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCD521FB6DFE3D115AF2000A9CAC24AB |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ECD521FB6DFE3D115AF2000A9CAC24AB |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DD521FB6DFE3D115AF2000A9CAC24AB |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D811316032AC49B4E8BCC33454B31F61 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F0B5D1A7DE3021C43A14422F0005333C |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D2FFBA7ACD4FACF41929F6CCFE88DBDA |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1650EACF3C291D11A92C0006794C4E25 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\110D06364BE0F08438A5ACEED069DCBC |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7716FB73E5A23CA4180309AA54335EF9 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AD24949EBEB1D742A3F9F38DEF500BE |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2154EBF3EFF04B048A77A9F7181445D6 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D795BC613D313574CBB1FBE0448BFFA9 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\826BE7CCECB5A07419E4D5FC61E63C4A |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1547161642-507921405-839522115-1004\Installer\Products\00002109E60090400000000000F01FEC |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Installer\Products\00002109E60090400000000000F01FEC |
| HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\00002109E60090400000000000F01FEC |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00002109E60090400000000000F01FEC\Usage |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Alerts |
| HKEY_CLASSES_ROOT\.html |
| htmlfile\Shell\Open\Command |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{70FAF614-E0B1-11D3-8F5C-00C04F9CF4AC}\Category\Item\{A48FA74E-F767-44E4-BFBC-169E8B38FF58} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\Category\Item\{A48FA74E-F767-44E4-BFBC-169E8B38FF58} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\Category\Item\{A48FA74E-F767-44E4-BFBC-169E8B38FF58} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\Category\Item\{A48FA74E-F767-44E4-BFBC-169E8B38FF58} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\Category\Item\{A48FA74E-F767-44E4-BFBC-169E8B38FF58} |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\\{FA445657-9379-11D6-B41A-00065B83EE53}\Category\Item\{A48FA74E-F767-44E4-BFBC-169E8B38FF58} |
| CLSID\{FA445657-9379-11D6-B41A-00065B83EE53} |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\App Management |
| HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\App Management |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32 |
| HKEY_CURRENT_USER\Software\Microsoft\Office\Common\Workflow\Cache |
| HKEY_CURRENT_USER\Software\Microsoft\Office\Common\Workflow\WorkgroupCache |
| HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Office\12.0\Common |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Common |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4EEF86DD963C1D111A37000A9CA05BF0 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2EEF86DD963C1D111A37000A9CA05BF0 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\359E92CC2CB71D119A12000A9CE1A22A |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A457B2D1A9DC1D112897000CF42C6133 |
| HKEY_CURRENT_USER\Software\Microsoft\Office\Common\Smart Tag |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Resiliency\DocumentRecovery\1E8D218 |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\DWS |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Security\Trusted Locations |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Common\Security\Trusted Locations |
| HKEY_CURRENT_USER\Environment |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\File MRU |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Recent Files |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\File MRU\ |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office Test\Special |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Fonts |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Internet |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Shared\HTML |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Shared\MHTML |
| HKEY_CLASSES_ROOT\.htm |
| HKEY_CLASSES_ROOT\htmlfile\shell |
| HKEY_CLASSES_ROOT\htmlfile\shell\edit\command |
| HKEY_CLASSES_ROOT\htmlfile\shell\print\command |
| HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version |
| HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version\12 |
| HKEY_CLASSES_ROOT\.mht |
| HKEY_CLASSES_ROOT\mhtmlfile\shell |
| HKEY_CLASSES_ROOT\mhtmlfile\shell\edit\command |
| HKEY_CLASSES_ROOT\mhtmlfile\shell\print\command |
| HKEY_CLASSES_ROOT\TypeLib\{9B92EB61-CBC1-11D3-8C2D-00A0CC37B591}\1.2\0\win32 |
| HKEY_CURRENT_USER\Software\Microsoft\Office\Common\Smart Tag\Applications\XLMAIN |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Common\InstallRoot |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\Licensing |
| CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4} |
| CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\TreatAs |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4} |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InprocServer32 |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InprocServerX86 |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\LocalServer32 |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InprocHandler32 |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InprocHandlerX86 |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\LocalServer |
| HKEY_CLASSES_ROOT\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4} |
| HKEY_CLASSES_ROOT\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\TreatAs |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ |
| HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\\Ranges\ |
| HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings |
| HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl |
| HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_URLHOSTNAME |
| HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Office\12.0\Common\General |
| HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Registration |
| HKEY_CURRENT_USER\Control Panel\International |
| HKEY_CURRENT_USER\Control Panel\Desktop |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004 |
Comments
User comments about 0a6c0655e35fbbb7ed234d2a10043f841c9768ee2afabd27558a41e3294e87d2.
User comments about 0a6c0655e35fbbb7ed234d2a10043f841c9768ee2afabd27558a41e3294e87d2.
